Check Point 2590
1U Spark firewall with high copper and fibre density, four 10 GbE SFP+ slots and reference TP of 5.5 Gb/s.
Overview
The Spark 2590 is the 1U option for projects that need to concentrate more local connections within the 2500 series. It combines sixteen copper Gigabit LAN ports, eight Gigabit SFP LAN slots, two 2.5 GbE LAN ports and four 10 GbE SFP+ slots, alongside dedicated WAN and DMZ interfaces. It is particularly relevant when the number and type of links determine appliance selection. The current matrix lists only a wired version. Sizing must account for inspection, growth and high-availability topology, without assuming that the sum of port speeds represents security capacity. The power supply and transceiver configuration must follow the project requirements. Selection criteria: Evaluate this model when the site needs greater density: sixteen Gigabit RJ45 LAN ports, eight Gigabit SFP slots, two 2.5 GbE RJ45 ports and four 10 GbE SFP+ slots. Reserve 1U of rack space and check power redundancy, transceivers and cabling; select according to the required port layout as well as the inspection benchmark. Use 5500 Mbps TP and 75000 new connections/s as references from separate tests; validate the combined workload with security services and VPN enabled. Manufacturer image; interface configuration may vary by SKU.
Key features
- Copper and fibre densityCopper and fibre interfaces in the same chassis to accommodate different segments and uplinks. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_T3/EN/Content/Topics-T3/Front-Panel-2590.htm
- SFP+ ports X1–X4Four SFP+ ports X1–X4 supporting 10/1 GbE, according to the hardware guide. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_T3/EN/Content/Topics-T3/Front-Panel-2590.htm
- Console and local maintenanceConsole through USB-C or RJ45 and a micro-SD slot for the maintenance operations specified in the guide. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_T3/EN/Content/Topics-T3/Front-Panel-2590.htm
- Centralised policies in R82R82 and central administration to standardise policies across sites with more connections. Source: https://sc1.checkpoint.com/documents/Appliances/Quantum_Spark_R82.00.X/AdminGuides_Centrally_Managed/EN/Content/Topics/Overview.htm
Technical specifications
| Threat Prevention — benchmark | 5500 Mbps; Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection with logging. Edition dated 22/07/2026, pp. 5–6. |
|---|---|
| NGFW — benchmark | 11000 Mbps; Firewall, Application Control and IPS with logging. Edition dated 22/07/2026, pp. 5–6. |
| New connections per second — laboratory | 75000; RFC 3511/2544/2647/1242 section of the datasheet, p. 5. Not equivalent to sessions inspected in production. |
| Copper LAN | 16 × 1 GbE RJ45 and 2 × 2.5 GbE RJ45 |
| Fibre LAN | 8 × 1 GbE SFP and 4 × 10 GbE SFP+ |
| WAN and DMZ | One combo WAN interface and one combo DMZ interface, with copper or fibre connection options. The optical speed of the DMZ depends on confirmation of the SKU and compatible transceivers in the documentation applicable to the configuration. |
| Form factor | 1U, 430 × 300 × 42.5 mm |
| Radio options | Wired; no built-in Wi-Fi or cellular modem |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
Documents and references
- Complex projects require more than knowledge of a single technology.
- Better decisions begin with a better understanding of the environment.
- The network that connects the business must be ready to support it.
- Cloud is not where the infrastructure is. It is how it was architected to operate.
- Connectivity is necessary. Controlling every communication is security.
- Security designed to protect what keeps your business running.
- Spark 2500 Firewalls — Datasheet (22/07/2026)
- Spark Firewall 2590 — Getting Started Guide
- R82.00.X — central management guide
- Official manufacturer page