19 November 

2020

1570/1590 APPLIANCE

R80.20.XX

Getting Started Guide

Models: V-81, V-81W, V-81WL, V-81WD [Classification: Restricted]
 Check Point Copyright Notice

Check Point Copyright Notice

© 2020 Check Point Software Technologies Ltd.

All rights reserved. This product and related documentation are protected by copyright and distributed
under licensing restricting their use, copying, distribution, and decompilation. No part of this product or
related documentation may be reproduced in any form or by any means without prior written authorization
of Check Point. While every precaution has been taken in the preparation of this book, Check Point
assumes no responsibility for errors or omissions. This publication and features described herein are
subject to change without notice.

RESTRICTED RIGHTS LEGEND:

Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)
(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.

TRADEMARKS:
Refer to the Copyright page for a list of our trademarks.
Refer to the Third Party copyright notices for a list of relevant copyrights and third-party licenses.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   2

 1570/1590 Appliance R80.20.XX Getting Started Guide

Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the
latest functional improvements, stability fixes, security enhancements and protection
against new and evolving attacks.

Certifications
For third party independent certification of Check Point products, see the Check Point
Certifications page.

Check Point 1500 Appliances

For more about the 1500 Appliance Series, see the 1500 Appliance home page.

Latest Version of this Document in English

Open the latest version of this document in a Web browser.
Download the latest version of this document in PDF format.

Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments.

Revision History

Date Description

19 November 2020 Updated links

07 September 2020 Added WiFi-DSL models

30 June 2020 General updates

24 February 2020 Added WiFi-LTE models

26 September 2019 First release of this document

1570/1590 Appliance R80.20.XX Getting Started Guide   |   3

 Table of Contents

Table of Contents
Introduction 6
Shipping Carton Contents 7
Setting up the Appliance 8
Wall Mounting 8
Connecting the Cables 9
First Time Deployment Options 10
3G/4G/LTE 11
xDSL (VDSL and ADSL) 14
Appliance Diagrams and Specifications 15
Front Panel 19
Management LED 21
Network LEDs 22
Back Panel 23
Side Panels 27
SIM Card Installation 31
Using the First Time Configuration Wizard 33
Starting the First Time Configuration Wizard 34
Welcome 35
Zero Touch 35
Authentication Details 37
Appliance Date and Time Settings 39
Appliance Name 40
Security Policy Management 41
Internet Connection 42
Local Network 44
Wireless Network 46
Administrator Access 48
Appliance Registration 50
Security Management Server Authentication 53
Security Management Server Connection 54

1570/1590 Appliance R80.20.XX Getting Started Guide   |   4

 Table of Contents

Software Blade Activation 56

Summary 57
Zero Touch Cloud Service 58
USB Drive or SD Card 59
Health and Safety Information 60
Information sur la Santé et la Sécurité 68
Support 76

1570/1590 Appliance R80.20.XX Getting Started Guide   |   5

 Introduction

Introduction
Thank you for choosing Check Point's Internet Security Product Suite. Check Point products provide your
business with the most up to date and secure solutions available today.
Check Point also delivers worldwide technical services including educational, professional, and support
services through a network of Authorized Training Centers, Certified Support Partners, and Check Point
technical support personnel to ensure that you get the most out of your security investment.
For more information about the appliance, see the Check Point 1500 Appliance series Administration
Guide.
For more technical information, go to Check Point Support Center.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   6

 Shipping Carton Contents

Shipping Carton Contents

Item Quantity Description

Appliance 1 1570 / 1590 Appliance.

LAN cable 1 1.8m - RJ45 to RJ45, CAT5e, shielded, STP, black color.

Console cable 1 1m, USB type-C to USB-2.0 type-A, black color.

Power adapter 1 AC to 12VDC desktop, black color.

n 40W for wired.
n 60W for WiFi, WiFi-LTE, WiFi-DSL.

Power cord for 1 Plug types: US, UK, EU and AUS/NZ, India, China, Japan.
adapter

Rubber feet 4 Assembled on the appliance.

Wall mount kit 1 Includes drilling hole location sticker.

2 Screws: M4x6, truss screw.
2 Screw anchors.

Antenna 4 WiFi Antenna RP-SMA type, black color (for WiFi models only).
2 LTE Antenna RP-SMA type, black color (for LTE models only).

DSL Cable 1 1.8M, RJ11-TAE cable for Annex B or RJ11-RJ11 cable for Annex A,
white color.

Guides 1 Check Point 1570 / 1590 Appliance Quick Start Guide.

1 SIM Installation Guide (for LTE models only).

License Agreement 1 End user license agreement.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   7

 Setting up the Appliance

Setting up the Appliance

1. Remove the Check Point 1570 / 1590 Appliance from the shipping carton and place it on a tabletop.
2. Optional - Remove the transparent protective sticker from the front panel of the appliance.
3. Attach antennas to the model (WiFi and LTE model only).
4. Identify the network interface marked as LAN1. This interface is preconfigured with the IP address
192.168.1.1.

Wall Mounting
To mount the appliance to the wall:
1. Place the wall-mount sticker on the wall and drill two holes for the screws.
2. Insert the 2 screw anchors in the wall.
3. Attach the 2 screws in the accessory kit (M4*6) to the wall.
4. Mount the appliance and verify the 2 screws are fastened well to the appliance.

Key Item Description

1 Holes on the bottom of the appliance Attach screws here

1570/1590 Appliance R80.20.XX Getting Started Guide   |   8

 Connecting the Cables

Connecting the Cables

1. Connect the power supply unit to the appliance and to a power outlet.
The appliance is turned on when the power supply is connected.
2. When the appliance is turned on, the Power LED on the front panel lights up in red for a short period.
The LED then turns blue and starts to blink. This shows a boot is in progress and firmware is being
installed.
When the LED turns a solid blue, the appliance is ready for login.
Note - The LED is red if there is an alert or error.
3. Connect the standard network cable to the LAN1 port on the back panel of the appliance and to the
network adapter on your PC.

4. Optional: Connect the console cable to the console port on the back of the appliance,
and to a USB port on a supported terminal.

a. The baud rate should be set to 115200.

Set the Flow control to None.
b. To get the console driver, click: https://www.silabs.com/products/development-
tools/software/usb-to-uart-bridge-vcp-drivers
c. Verify the MD5 and SHA256 are the following:
n MD5 - c0b27c9b0f3a3ed53927a4857853a2cb
n SHA 256 -
5d8fa117cd499a50cab895f35d50d108a61e80b6a3f6d2ecbffa8949085b8f2e

5. If you use an external modem:

Connect the Ethernet cable to the WAN port on the appliance back panel and plug it into your
external modem or router’s PC/LAN network port. The Internet LED on the appliance front panel
lights up when the Ethernet is connected.
For DSL appliances only: Connect the telephone cable to the DSL port on the appliance back panel
and plug it into the DSL line socket. The DSL LED as well as the Internet LED remains off until you
configure the appliance, including setting up the DSL as an internet connection.
Note - Wait 10 seconds between power cycles (off and on).

1570/1590 Appliance R80.20.XX Getting Started Guide   |   9

 First Time Deployment Options

First Time Deployment Options

There are different options for first time deployment of your gateways:
n "Using the First Time Configuration Wizard" on page 33
n "Zero Touch Cloud Service" on page 58
n "USB Drive or SD Card" on page 59

1570/1590 Appliance R80.20.XX Getting Started Guide   |   10

 3G/4G/LTE

3G/4G/LTE
The 1590 LTE (CPAP-SG1590WLTE*) supports these features:
*The suffix defines the country/region.
n Embedded modem that supports the latest advanced 4G/LTE, with fallback to 3G HSPA+ networks
in North America, Europe, and Asia.
n Worldwide LTE coverage with just two product variants: one for North America and EMEA, and one
for Asia-Pacific.
n Dual SIM functionality is supported to enable automatic fail over between SIMs.
n 4G/LTE supports CAT6, while 3G supports HSPA+ and UMTS (no 2G support).
n Peak download rate is 300Mbps and uplink of 50Mbps.
n Two external antennas (RP-SMA type, Main, and Diversity) to allow the best RF signal and
coverage.
Frequency and bands supported:

4G/LTE Radio frequency and bands

Region/country Frequency (MHz) Band

APAC and Australia 2100 1

1800 3

850 5

2600 7

900 8

700 28

EMEA 2100 1

1800 3

2600 7

900 8

800 20

1570/1590 Appliance R80.20.XX Getting Started Guide   |   11

 3G/4G/LTE

Region/country Frequency (MHz) Band

North America 1900 2

1700 4

850 5

700 12

700 13

700 17

1900 25

850 26

700 29 only Receive

Canada 1900 2

1700 4

850 5

2600 7

700 13

700 17

700 29 only Receive

3G Radio frequency and bands

Region/Country Band Transmit Frequency (MHz) Receive Frequency (MHz)

APAC and Australia 1 1920-1980 2110-2170

5 824-849 869-894

8 880-915 2110-2170

EMEA 1 1920-1980 2110-2170

3 1710-1785 1805-1880

8 880-915 925-960

1570/1590 Appliance R80.20.XX Getting Started Guide   |   12

 3G/4G/LTE

Region/Country Band Transmit Frequency (MHz) Receive Frequency (MHz)

North America 2 1850-1910 1930-1990

4 1710-1755 2110-2155

5 824-849 869-894

Canada 2 1850-1910 1930-1990

4 1710-1755 2110-2155

5 824-849 869-894

For more information on LTE, see sk167276.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   13

 xDSL (VDSL and ADSL)

xDSL (VDSL and ADSL)

The xDSL port supports these VDSL2 and ADSL profiles and Annex:
n VDSL: G.993.1 (VDSL)
n G.993.2 (VDSL2)
n G.993.5 (VDSL2 Vectoring)
n G.998.4 (G.INP)
n VDSL2 profiles: 8a, 8b, 8c, 8d, 12a, 12b, and 17a
n ADSL: Annex A (POTS), Annex B (ISDN), G.992.1 (ADSL), G.992.3 (ADSL2), G.992.5 (ADSL2+),
Annex M (ADSL2/2+) ,Annex L Reach-extended (ADSL2)
n Dying Gasp
n DSL Forum TR-067
n TR-100
n TR-114 Conformity

1570/1590 Appliance R80.20.XX Getting Started Guide   |   14

 Appliance Diagrams and Specifications

Appliance Diagrams and

Specifications
This section describes the different features in the front, back, and side panels of these 1570 / 1590
Appliance models:
n Wired
n WiFi
n WiFi-LTE
n WiFi-DSL
Note - Depending on which model appliance you have, some of the specifications below may vary.

Wired

1570/1590 Appliance R80.20.XX Getting Started Guide   |   15

 Appliance Diagrams and Specifications

WiFi

1570/1590 Appliance R80.20.XX Getting Started Guide   |   16

 Appliance Diagrams and Specifications

WiFi-LTE

1570/1590 Appliance R80.20.XX Getting Started Guide   |   17

 Appliance Diagrams and Specifications

WiFi-DSL

1570/1590 Appliance R80.20.XX Getting Started Guide   |   18

 Front Panel

Front Panel
Wired / WiFi (antennas not shown)

WiFi-LTE

1570/1590 Appliance R80.20.XX Getting Started Guide   |   19

 Front Panel

WiFi-DSL

Note - There is only one set of LEDs. The LED color (blue or red) depends on what activity occurs.
Table: LEDs
Key Item LED Description

1 Power LED n Solid Blue – Normal operation

n Blinking Blue – Boot in progress or installing firmware.
n Red – Error/Alert
Note – This LED is red when the appliance is first turned on.

2 Internet LED n Off - No internet connection

n Blinking Blue - Connecting to the Internet.
n Blue - Connected
n Blinking Red - Connection failure

3 Management n Off – No management

LED n Colors - See below

4 WiFi LED n Off - WiFi off

(WiFi models n Blue - WiFi on and operates normally
only) n Red - WiFi error/alert

1570/1590 Appliance R80.20.XX Getting Started Guide   |   20

 Front Panel

Table: LEDs (continued)

Key Item LED Description

5 LTE LED n Off - Cellular off

(WiFi-LTE model n Solid Blue - Cellular modem is available (operating SIM must
only) be inserted and activated)
n Blinking Blue - Cellular data transfer
n Red - Cellular modem issue (no SIM, modem off, no signal,
etc.)

6 DSL LED n Off - DSL off

(WiFi-DSL model n Blinking Blue - DSL sync in progress
only) n Solid Blue - DSL synced
n Flashing Red (LED alternates between blue and pink) -
Traffic

Management LED
The Management LED shows the status of the retries mechanism:

Management LED
Action
Activity

Zero Touch is running. Blinks red (slowly)

Successfully connected to Zero Touch Cloud Server and saved the Blinks red (rapidly)
deployment script.

Zero Touch process is completed. SMP activation is not needed. LED off

Activation sleeping time. Blinks blue (slowly)

Reactivation. Blinks blue (rapidly)

SMP is connected. Solid blue.

SMP mode is off. LED off

Gateway failed to connect to the SMP and will exit from the retry script. Constant red.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   21

 Front Panel

Wait times before retry:

Failure Waiting Time

1st 2 minutes

2nd 4 minutes

3rd 8 minutes

4th 16 minutes

Subsequent Retries every 16 minutes until Cloud Services are successfully activated

Network LEDs
The table below describes the network LEDs (RJ45 WAN and LAN ports and the SFP).
Each port uses a bi-color LED to reflect the link/activity and speed, from 10M to 1GbE.

RJ45 and 1G SFP LED1 (Green) LED2 (Amber)

No link Off Off

1G link ON ON

1G Act Blink ON

100M link ON Off

100M Act Blink Off

10M link ON Off

10M Act Blink Off

1570/1590 Appliance R80.20.XX Getting Started Guide   |   22

 Back Panel

Back Panel
Wired

WiFi

1570/1590 Appliance R80.20.XX Getting Started Guide   |   23

 Back Panel

WiFi-LTE

1570/1590 Appliance R80.20.XX Getting Started Guide   |   24

 Back Panel

WiFi-DSL

Key Item Description

1 Reset Short press resets the system but does not remove any user parameters.

2 Ground screw Functional grounding.

3 Factory default Press the button continuously for 12 seconds to restore the appliance to
its factory default.
All user parameters previously configured are removed.

4 LAN ports LAN ports 1-8.

LAN port 2/Sync.
Support 10/100/1000MbE.

5 DMZ port WAN combo port (RJ45 or DMZ fiber).

(combo RJ45 or Only one can operate at a time once plugged in and connected.
DMZ fiber SFP Once connected, you must remove it to activate the other port.
port) The LEDs above indicate connection and speed per connection.
Each uses its own LEDs.
The SFP supports 1GbE speed, short and long range. See catalog for
P/Ns.

6 RJ45 WAN port WAN port RJ45 (on the right) - supports 10/100/1000MbE.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   25

 Back Panel

Key Item Description

7 USB port 3.0 USB port 3.0 for software download.

8 Console Plug in the serial console cable here. Baud rate: 115200.

9 Power cord socket Plug the power adapter cord in here.

10 DSL Port Port for attaching RJ11 cable.

(WiFi-DSL models
only)

1570/1590 Appliance R80.20.XX Getting Started Guide   |   26

 Side Panels

Side Panels
Wired, WiFi, WiFi-LTE, WiFi-DSL
Side 1

Side 2

1570/1590 Appliance R80.20.XX Getting Started Guide   |   27

 Side Panels

WiFi-LTE
Side 1

1570/1590 Appliance R80.20.XX Getting Started Guide   |   28

 Side Panels

Side 2

Key Item Description

1 Anti-theft slot Insert anti-theft cable here.

Use Kensington and Sunbox TL-623M cable as a reference.

2 SD slot Insert micro-SD card here.

3 Dual SIM slot Insert one of two SIM cards here (LTE models only):
n SIM1 - Micro-SIM
n SIM2 - Nano-SIM

1570/1590 Appliance R80.20.XX Getting Started Guide   |   29

 Side Panels

SD Card Notes:
n Micro-SD card supports the format ext4, up to 256GB size.
n Insert or remove SD card only when the appliance is powered down.
n While inserting the micro-SD card, make sure the golden pins are facing upward:

Dual SIM Card Notes:

n Activation is done manually in Gaia Portal or Gaia Clish. The user selects the preferred SIM.
n The modem supports automatic failover between SIM cards.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   30

 SIM Card Installation

SIM Card Installation

To install the SIM card:

1. Remove the SIM card tray cover.

2. Use the pin to pop out the SIM tray.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   31

 SIM Card Installation

3. Insert the SIM card into the tray.

Note - The SIM card tray can support up to 2 SIM cards:

n SIM 1 - Micro-SIM
n SIM 2 - Nano-SIM
4. Insert the SIM tray into the appliance.
5. Replace the SIM card cover.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   32

 Using the First Time Configuration Wizard

Using the First Time Configuration

Wizard
Configure the Check Point Appliance with the First Time Configuration Wizard.
To close the wizard and save configured settings, click Quit.
Note - In the First Time Configuration Wizard, you may not see all the pages described in this guide. The
pages that show in the wizard depend on your appliance model and the options you select.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   33

 Starting the First Time Configuration Wizard

Starting the First Time Configuration Wizard

To configure the Check Point 1570 / 1590 Appliance for the first time after you complete the hardware
setup, use the First Time Configuration Wizard.
WiFi models with a special device label only:
If you did not yet run the First Time Configuration Wizard, you can connect through WiFi using the SSID
and WiFi password that appears on the sticker. This is unique for each appliance.
If you do not complete the wizard because of one of these conditions, the wizard will run again the next
time you connect to the appliance:
n The browser window is closed.
n The appliance is restarted while you run the wizard.
After you complete the wizard, you can use the WebUI (web user interface) to change settings configured
with the First Time Configuration Wizard and to configure advanced settings.
To open the Gaia Portal, enter one of these addresses in a web browser:
n https://my.firewall
n https://192.168.1.1:4434
If a security warning message shows, confirm it and continue.
The First Time Configuration Wizard starts.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   34

 Welcome

Welcome
The Welcome page introduces the product and shows the name of your appliance.

You can connect to the Zero Touch server to fetch settings automatically from the cloud.

To change the language of the WebUI application:

Select the language link at the top of the page.
Note - Only English is allowed as the input language.

Zero Touch
Zero Touch enables a gateway to automatically fetch settings from the cloud when it is connected to the
internet for the first time.
Note - You cannot use Zero Touch if you connect to the internet with a proxy server.
If the gateway connects to the internet through DHCP, the gateway will fetch the Zero Touch settings
without any additional action. If no DHCP service is available, you must run the First Time Configuration
Wizard, configure the Internet Connection settings, and then fetch the settings from the Zero Touch
server.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   35

 Welcome

To connect to the Zero Touch server:

1. In the Welcome page, click Fetch Settings from the cloud.
2. In the window that opens, click OK to confirm that you want to proceed.
3. The Internet connection page opens. Configure your Internet connection and click Connect.
4. The Fetching settings from the cloud window opens and shows the Connecting to the service
provider status. This process may take several minutes.
5. If you fail to connect, an error message appears. Possible errors include:
n Internet connection is not configured correctly.
n Internet connection is through a proxy server.
n Zero Touch is already running.
n Zero Touch service already completed.
n The First Time Configuration Wizard already completed.
n Zero Touch service is disabled.
Where applicable, click Retry now to connect again.
6. After you connect to the server, the settings are automatically downloaded and installed. The status
is shown in the Fetching settings from the cloud window. It may take several minutes until the
installation is complete.
7. Click Finish.
Note - If a collision is detected between an internal network (LAN) and an IP returned using DHCP (WAN),
the conflicting LAN address is changed automatically. If a colliding LAN IP address is changed, a message
appears in the system logs.
When you reconnect to the WebUI or click Refresh, the browser opens to show the status of the installation
process.
After the gateway downloads and successfully applies the settings, it does not connect to the Zero Touch
server again.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   36

 Authentication Details

Authentication Details
In the Authentication Details page, enter the required details to log in to the Gaia Portal, or if the wizard
terminates abnormally:
n Administrator Name - We recommend that you change the default "admin" login name of the
administrator. The name is case sensitive.
n Password - A strong password has a minimum of 6 characters with at least one capital letter, one
lower case letter, and a special character. Use the Password strength meter to measure the
strength of your password.
Note - The meter is only an indicator and does not enforce creation of a password with a specified
number of character or character combination. To enforce password complexity, click the check
box.
n Confirm Password - Enter the password again.
n Country - Select a country from the list (for wireless network models).
The country where the license is set determines the wireless frequency and parameters, as the
regulations vary according to region.
If you are using a trial license, only basic radio settings , are allowed in all zones. A warning that
selected wireless radio settings are not applied shows on the Summary page and also on the
Device > License page. For more information on basic wireless radio settings, see sk159693.
If you select a country and install a valid license, but the wireless region of the device does not match
the selected country, a warning message shows and you must edit the country information. When
the country and wireless region match, you see the full settings.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   37

 Authentication Details

1570/1590 Appliance R80.20.XX Getting Started Guide   |   38

 Appliance Date and Time Settings

Appliance Date and Time Settings

In the Appliance Date and Time Settings page, configure the appliance's date, time, and time zone
settings manually or use the Network Time Protocol option.
When you set the time manually, the host computer's settings are used for the default date and time
values. If necessary, change the time zone setting to show your correct location. Daylight Savings Time is
automatically enabled by default. You can change this in the WebUI application on the Device > Date and
Time page.
n Date - The host computer's date appears by default. If required, set a different date.
n Time - The host computer's time appears by default. If required, set a different time.
n Time Zone - The host computer's time zone appears by default. If required, select a time zone
setting to reflect your exact location.
n Primary NTP server - The IP or host name of the primary NTP server. The default server is
ntp.checkpoint.com
n Secondary NTP server - The IP or host name of the secondary NTP server. The default server is
ntp2.checkpoint.com

1570/1590 Appliance R80.20.XX Getting Started Guide   |   39

 Appliance Name

Appliance Name
In the Appliance Name page, enter a name to identify the appliance, and enter a domain name (optional).
When the gateway performs DNS resolving for a specified object’s name, the domain name is appended to
the object name. This lets hosts in the network look up hosts by their internal names.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   40

 Security Policy Management

Security Policy Management

In the Security Policy Management page, select how to manage security settings:
n Central management - A remote Security Management Server manages the Security Gateway in
SmartConsole with a network object and security policy.
n Local management - The appliance uses a web application to manage the security policy. After you
configure the appliance with the First Time Configuration Wizard, the default security policy is
enforced automatically. With the Gaia Portal, you can configure the Software Blades you activated
and fine tune the security policy.
This Getting Started Guide describes how to configure both locally and centrally managed deployments.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   41

 Internet Connection

Internet Connection
In the Internet Connection page, configure your Internet connectivity details or select Configure Internet
connection later.

To configure Internet connection now:

1. Select Configure Internet connection now.
2. From the Connection type drop down list, select the protocol used to connect to the Internet.
3. Enter the fields for the selected connection protocol. The information you must enter is different for
each protocol. You can get it from your Internet Service Provider (ISP).
n Static IP - A fixed (non-dynamic) IP address.
n DHCP - Dynamic Host Configuration Protocol (DHCP) automatically issues IP addresses
within a specified range to devices on a network. This is a common option when you connect
through a cable modem.
n PPPoE (PPP over Ethernet) - A network protocol for encapsulating Point-to-Point Protocol
(PPP) frames inside Ethernet frames. It is used mainly with DSL services where individual
users connect to the DSL modem over Ethernet and Metro Ethernet networks. Enter the ISP
login user name and ISP login password. Note - In the First Time Configuration Wizard,
only dynamic IP is supported.
n PPTP - The Point-to-Point Tunneling Protocol (PPTP) implements virtual private networks.
PPTP uses a control channel over TCP and a GRE tunnel operating to encapsulate PPP
packets.
n L2TP - Layer 2 Tunneling Protocol (L2TP) is a tunneling protocol used to support virtual
private networks (VPNs). It does not provide any encryption or confidentiality. It relies on an
encryption protocol that it passes within the tunnel to provide privacy.
n Cellular - This is for appliances with an internal LTE modem. Both SIM cards are used for the
internet connection with a failover between them.
n Cellular Modem - Connect to the Internet with a cellular modem to the ISP through a 3G or
4G network. For this option, select the USB/Serial option in the Interface name.
Note - Only one cellular modem is supported. Appliances with an internal LTE modem do not
support an external USB modem.
n Bridge - Connects multiple network segments at the data link layer (Layer 2).
n DNS Server (Static IP and Bridge connections) - Enter the DNS server address information in
the relevant fields. For DHCP, PPPoE, PPTP, L2TP, Cellular, and Cellular Modem the DNS
settings are supplied by your service provider. You can override these settings later in the
WebUI application, under Device > DNS.
We recommend that you configure the DNS as the appliance needs to perform DNS resolving for different
functions. For example, to connect to Check Point User Center during license activation or when
Application Control, Web Filtering, Anti-Virus, or Anti-Spam services are enabled.

To test your ISP connection status:

Click Connect.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   42

 Internet Connection

The appliance connects to your ISP. Success or failure shows at the bottom of the page.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   43

 Local Network

Local Network
In the Local Network page, select to enable or disable switch on LAN ports and configure your network
settings. By default, they are enabled. You can change the IP address and stay connected as the
appliance's original IP is kept as an alias IP until the first time you boot the appliance.

Tell me about the fields...

n Enable switch on LAN ports - Aggregates all LAN ports to act as a switch with one IP address for
the switch. If this option is disabled (checkbox is cleared), the local network is defined as LAN1 only.
n Network name - Enter the network name.
n IP address - You can modify the IP address and maintain connectivity. The appliance's original IP is
kept as an alias IP to maintain connectivity until the wizard is completed.
n Subnet mask - Enter the subnet mask.
n DHCP server and range fields - DHCP is enabled by default with a default network range. Make
sure to set the appropriate range and do not include predefined static IPs in your network.
n Exclusion range - Set the exclusion range for IP addresses that are not defined by the DHCP
server. Define the range of IP addresses that the DHCP excludes when IP addresses are assigned
in the network. The appliance's IP address is automatically excluded from the range. For example, if
the appliance IP is 1.1.1.1 the range also starts from 1.1.1.1, but excludes its own IP address.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   44

 Local Network

Important - If you choose to disable the switch on LAN ports (clear the checkbox), make sure your network
cable is placed in the LAN1 port. Otherwise, connectivity will be lost when you click Next.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   45

 Wireless Network

Wireless Network
For WiFi models only:
In the Wireless Network page, configure wireless connectivity details.
When you configure a wireless network, you must define a network name (SSID). The SSID (service set
identifier) is a unique string that identifies a WLAN network to clients that try to open a wireless connection
with it.
We recommend that you protect the wireless network with a password. Otherwise, a wireless client can
connect to the network without authentication.

To configure the wireless network now:

1. Select Configure wireless network now.
2. Enter a name in the Network name (SSID) field. This is the name shown to clients that look for
access points in the transmission area.
3. Select Protected network (recommended) if the wireless network is protected by password.
4. Enter a Password.
5. The Hide password option is selected by default.
6. Allow access from this network to the local network is selected by default. This means the
wireless network is considered trusted and access is allowed from it to the local network.
7. Radio Band
n 2.4GHz: 2414-2462 MHz
n 5GHz: 5180-5240, 5260-5320, 5500-5720, 5745- 5825MHz

1570/1590 Appliance R80.20.XX Getting Started Guide   |   46

 Wireless Network

1570/1590 Appliance R80.20.XX Getting Started Guide   |   47

 Administrator Access

Administrator Access
In the Administrator Access page, configure if administrators can use the appliance from a specified IP
address or any IP address.

To configure administrator access:

1. Select the sources from where administrators are allowed access:
n LAN - All internal physical ports.
n Trusted wireless - A known wireless network.
n VPN - Using encrypted traffic through VPN tunnels from a remote site or using a remote
access client.
n Internet - Clear traffic from the Internet (not recommended).
2. Select the IP address from which the administrator can access the appliance:
n Any IP address .
n Specified IP addresses only - Select this option to let administrators access the appliance
from a specified IP address or network. Click New to configure the IP address information.
n Specified IP addresses from the Internet and any IP address from other sources - Select
this option to allow administrator access from the Internet from specific IP addresses only and
access from other selected sources from any IP address. This option is the default.

To specify IP addresses:
1. Click New.
2. In the IP Address Configuration window, select an option:
n Specific IP address - Enter the IP address or click Get IP from my computer.
n Specific network - Enter the Network IP address and Subnet mask .
3. Click Apply .

1570/1590 Appliance R80.20.XX Getting Started Guide   |   48

 Administrator Access

1570/1590 Appliance R80.20.XX Getting Started Guide   |   49

 Appliance Registration

Appliance Registration
The appliance can connect to the Check Point User Center with its credentials to pull the license
information and activate the appliance.

If you have Internet connectivity configured:

Click Activate License.
You are notified that you successfully activated the appliance and you are shown the status of your license
for each blade.

If you are working offline while configuring the appliance:

1. From a computer with authorized access to the Check Point User Center, follow one of these
procedures:
n Use your User Center account

a. Log in to your User Center account.

b. Select the specified container of your appliance.
c. From the Product Information tab, click License > Activate.
This message appears: "Licenses were generated successfully".
d. Click Get Activation File and save the file locally.

n Register your appliance

a. Go to: https://smbregistration.checkpoint.com
b. Enter your appliance details and click Activate.
This message appears: "Licenses were generated successfully".
c. Click Get Activation File and save the file locally.

2. In the Appliance Activation page of the First Time Configuration Wizard, click Offline.
The Import from File window opens
3. Browse to the activation file you downloaded and click Import. The activation process starts.
You are notified that you successfully activated the appliance and you are shown the status of your
license for each blade.
If there is a proxy between your appliance and the Internet, you must configure the proxy details before
you can activate your license.

To configure the proxy details:

1. Click Set proxy .
2. Select Use proxy server and enter the proxy server Address and Port.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   50

 Appliance Registration

3. Click Apply .
4. Click Activate License.
You are notified that you successfully activated the appliance and you are shown the status of your license
for each blade.

To postpone appliance registration and get a 30-day trial license:

1. Click Next.
The License activation was not complete notification message is shown.
2. Click OK.
The appliance uses a 30-day trial license for all blades. You can register the appliance later in the
Gaia Portal from the Device > License page.

If your device is not paired with a User Center account, you must create an account or ask your company
administrator to create one for you.

To create a new User Center account (for Locally Managed appliances only):
1. Click Activate License.
The Appliance Registration window opens.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   51

 Appliance Registration

2. Select Create a new User Center account and click Next.

3. In the new window, enter:
n First name
n Last Name
n Email . You must enter this a second time to confirm.
n Company - This is the Account Name to which the appliance is paired.
4. Click Next.
The Software Blades Activation page opens.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   52

 Security Management Server Authentication

Security Management Server Authentication

For Centrally Managed appliances only:
When you select central management as your security policy management method, the Security
Management Server Authentication page opens.
Select an option to authenticate trusted communication with the Security Management Server:
n Initiate trusted communication securely by using a one-time password - The one-time
password is used to authenticate communication between the appliance and the Security
Management Server securely.
Enter a one-time password and confirm it. This password is only used for establishing the initial
trust. When established, trust is based on security certificates.

Important - This password must be identical for the Secure Communication

authentication one-time password configured for the appliance object in the
SmartConsole of the Security Management Server.
n Initiate trusted communication without authentication (not secure) - Use this option only if there is
no risk of malicious behavior (for example, when in a lab setting).
n Configure one-time password later - Set the one-time password at a different time using the
WebUI application.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   53

 Security Management Server Connection

Security Management Server Connection

For Centrally managed appliances only:
After you set a one-time password for the Security Management Server and the appliance, you can
connect to the Security Management Server to establish trust between the Security Management Server
and the appliance.

To connect to the Security Management Server, select one of these:

n Connect to the Security Management Server now.
n Connect to the Security Management Server later.

If you select to connect now, enter the data for these fields:
n Management address - Enter the IP address or host name of the Security Management Server.
n Connect - When you successfully connect to the Security Management Server, the security policy
will automatically be fetched and installed.
n If the Security Management Server is deployed behind a 3rd party NAT device, select Always use
the above address to connect to the Security Management Server. Manually enter the IP
address or the host name of the appliance should connect to reach the Security Management
Server.
If you enter an IP address, it will override the automatic mechanism that determines the routable
IP address of the Security Management Server for each appliance.
If you enter a host name, it is saved and the Security Gateway will re-resolve the name of the
IP address changes. This configuration can be edited later in the Home > Security Management
page of the WebUI.
If you do not select this checkbox and you use a host name to fetch the policy, when the policy is
fetched, the Security Management Server IP is set to the IP address in the policy.
Select where to send logs:
l Send logs to same address - The logs are sent to the IP address entered on this page for
the Security Management Server.
l Send logs to - Enter the IP address of a log server.
l Send logs according to policy - The logs are sent according to the log server definitions that
are defined in the policy.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   54

 Security Management Server Connection

1570/1590 Appliance R80.20.XX Getting Started Guide   |   55

 Software Blade Activation

Software Blade Activation

Select the Software Blades to activate on this appliance.
QoS (bandwidth control) can only be activated from the WebUI after completing the First Time
Configuration Wizard.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   56

 Summary

Summary
The Summary page shows the details of the elements configured with the First Time Configuration
Wizard.
Click Finish to complete the First Time Configuration Wizard.

The WebUI opens on the Home > System page.

To back up the system configuration in the WebUI:

Go to Device > System Operations > Backup.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   57

 Zero Touch Cloud Service

Zero Touch Cloud Service

The Zero Touch Cloud Service lets you easily manage the initial deployment of your gateways in the Zero
Touch portal.
Zero Touch enables a gateway to automatically fetch settings from the cloud when it is connected to the
internet for the first time.
Note - If you already used the First Time Configuration Wizard to configure your appliance, you cannot use
the Zero Touch Cloud service. If you start the First Time Configuration Wizard while the Zero Touch
settings are being installed, the installation process terminates.
If the gateway connects to the internet via DHCP, the gateway will fetch the Zero Touch settings without
any additional action. If no DHCP service is available, you must run the First Time Configuration Wizard,
configure the Internet Connection settings, and then fetch the settings from the Zero Touch server.

To connect to the Zero Touch server from the First Time Configuration Wizard:
1. In the Welcome page of the First Time Configuration Wizard, click Fetch Settings from the cloud.
2. In the window that opens, click Yes to confirm that you want to proceed.
3. The Internet connection page of the First Time Configuration Wizard opens. Configure your
Internet connection and click Connect.
The settings are automatically downloaded and installed.
A new window opens and shows the installation status. It may take several minutes until the
installation is complete.
When you reconnect to the Gaia Portal or click Refresh, you may see one of these:
n Login page - This means the process ended successfully and your settings are installed.
n Welcome page of the First Time Configuration Wizard - The process is still running. The settings
are installing or they do not exist in the cloud.
Note - If you click Next on the Welcome page, the Zero Touch settings installation process
terminates
n Page not found - The appliance local IP address may have been changed by the cloud settings
installation. Try http://my.firewall or consult your administrator for the new local IP address.
After the gateway downloads and successfully applies the settings, it does not connect to the Zero Touch
server again.
For more information on how to use Zero Touch, see sk116375 and the R80.20 Zero Touch Web Portal
Admin Guide.
Retries mechanism:
During cloud activation, there are sometimes temporary issues which prevent the gateway from activating
Cloud Services. See the Management LED description in the "Front Panel" on page 19 section.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   58

 USB Drive or SD Card

USB Drive or SD Card

The USB drive or SD card can be used for rapid deployment of configuration files, or to install an image,
without using the First Time Configuration Wizard.
The configuration file lets you configure more settings and parameters than are available in the First Time
Configuration Wizard
You can deploy configuration files in these conditions:
n An appliance with default settings is not configured at all.
n An appliance that already has an existing configuration.
The Check Point appliance starts, automatically mounts the USB drive or SD card, and searches the root
directory for a configuration file.
Note - The USB drive and SD card must be formatted in FAT32.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   59

 Health and Safety Information

Health and Safety Information

Read these warnings before setting up or using the appliance.

Warning - Do not block air vents. A minimum 1/2 inch clearance is required.

Warning - This appliance does not contain any user-serviceable parts. Do not remove
any covers or attempt to gain access to the inside of the product. Opening the device or
modifying it in any way has the risk of personal injury and will void your warranty. The
following instructions are for trained service personnel only.

Power Supply Information

To reduce potential safety issues with the DC power source, only use one of these:
n The AC adapter supplied with the appliance.
n A replacement AC adapter supplied by Check Point.
n An AC adapter purchased as an accessory from Check Point.
To prevent damage to any system, it is important to handle all parts with care. These measures are
generally sufficient to protect your equipment from static electricity discharge:
n Restore the communications appliance system board and peripherals back into the antistatic bag
when they are not in use or not installed in the chassis. Some circuitry on the system board can
continue operating when the power is switched off.
n Do not allow the lithium battery cell used to power the real-time clock to short. The battery cell may
heat up under these conditions and present a burn hazard.

Warning - DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY

REPLACED. REPLACE ONLY WITH SAME OR EQUIVALENT TYPE
RECOMMENDED BY THE MANUFACTURER. DISCARD USED BATTERIES
ACCORDING TO THE MANUFACTURER’S INSTRUCTIONS.
n Do not dispose of batteries in a fire or with household waste.
n Contact your local waste disposal agency for the address of the nearest battery deposit site.
n Avoid short-circuiting the lithium battery; this can cause it to superheat and cause burns if touched.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   60

 Health and Safety Information

IMPORTANT SAFETY INSTRUCTIONS: When using your telephone equipment, basic safety
precautions should always be followed to reduce the risk of fire, electric shock and injury to persons,
including the following:
n Do not use this product near water for example, near a bathtub, washbowl, kitchen sink or laundry
tub, in a wet basement or near a swimming pool.
n Avoid using a telephone (other than a cordless type) during an electrical storm. There may be a
remote risk of electric shock from lightning.
n Do not use the telephone to report a gas leak in the vicinity of the leak.
n Use only the power cord and batteries indicated in this manual. Do not dispose of batteries in a fire.
They may explode. Check with local codes for possible special disposal instructions.
n This equipment is not suitable for use in locations where children are likely to be present.
n Make sure to connect the power cord to a socket-outlet with a grounded connection.
n Never open the equipment. For safety reasons, the equipment should be opened only by a qualified
skilled person authorized by Check Point.
CAUTION: To reduce the risk of fire, use only No. 26 AWG or larger (e.g., 24 AWG) UL Listed or CSA
Certified Telecommunication Line Cord.
For California:
Perchlorate Material - special handling may apply. See
http://www.dtsc.ca.gov/hazardouswaste/perchlorate
The foregoing notice is provided in accordance with California Code of Regulations Title 22, Division 4.5,
Chapter 33. Best Management Practices for Perchlorate Materials. This product, part, or both may include
a lithium manganese dioxide battery which contains a perchlorate substance.
Proposition 65 Chemical
Chemicals identified by the State of California, pursuant to the requirements of the California Safe Drinking
Water and Toxic Enforcement Act of 1986, California Health & Safety Code s. 25249.5, et seq.
("Proposition 65"), that is "known to the State to cause cancer or reproductive toxicity." See
http://www.calepa.ca.gov
WARNING:
Handling the cord on this product will expose you to lead, a chemical known to the State of California to
cause cancer, and birth defects or other reproductive harm. Wash hands after handling.
Declaration of Conformity

Manufacturer's Check Point Software Technologies Ltd.

Name:

Manufacturer's 5 Shlomo Kaplan Street, Tel Aviv 67897, Israel

Address:

Model Number: V-81, *V-81W, *V-81WL, *V-81WD

Product Options: 1570 / 1590 Wired, 1570 / 1590 WiFi, 1570 / 1590 WiFi-LTE, 1570 / 1590 WiFi-
DSL Appliance

Date First Applied: August 2019

Declares under our sole responsibility, that the products conform to the following Product Specifications:

1570/1590 Appliance R80.20.XX Getting Started Guide   |   61

 Health and Safety Information

RF/Wi-Fi (*marked model), Cellular (**marked model), WiFi-DSL (***marked model)

Certification New Type

CE EN 55032:2015 + AC:2016, Class B EMC, *RF/Wi-Fi, **Cellular, ***WiFi-

CE EN 55032:2012 + AC:2013, Class B DSL
CE EN 55024:2010 / A1:2015
CE EN 55024:2010
FCC Part15B
ICES-003
AS/NZS CISPR32
VCCI, V-3/2015.4, V4/2012.04, Class B VCCI CISPR
32:2016
ISO Standard 8802-3 Section14(10BASE-T)
ISO Standard 8802-3 Section25(100BASE-TX)
ISO Standard 8802-3 Section40(1000BASE-T) Article 9

*EN300 328
*EN301 893
*ETSI EN301 489-1
*ETSI EN301 489-1-17
*EN62311:2008
*EN50386:2002, EN50383:2010
*AS/NZS 4268:2017
*FCC Part15C+E
*RSS-247
*RSS-102
*JP ARIB STD-T66
*JP ARIB STD-T71

**AS/CS S042/1/4:2018
**EN 303 413
**EN 308 901-1
**FCC Part 22, subp H
**FCC Part 24. subp E
**FCC Part 27 subp C, H, F,L
**FCC Part 27 subp C, M
**FCC part 90 subp I,S

**AS/NZS: ACMA EMR, AS/CA S042. 1,4 LTE

**EN 301 489-1, 7, 24, 52
**EN 301 908 – 1, 2, 13
**EN 50385:2017 MPE
**FCC 47 CFR Part 15 Subpart C FCC 47 CFR Part 2 MPE
**FCC 47 CFR Part 24 Cellular Transmitter Certification
**RSS 102 / 247
**RSS 130
**RSS 132
**RSS 133
**RSS 139
**RSS 199
**PTCRB and GCF – on going certification process

1570/1590 Appliance R80.20.XX Getting Started Guide   |   62

 Health and Safety Information

Certification New Type

Annex A DSL
***TBR-21
***ITU-T K.21

IEC/EN 62368-1 Safety

UL 62368-1

AS/NZS 62368.1

Physical and environmental reliability Description

Operating Conditions Vibrations and Shock Based on EN 300 019-2-3.

Storage Conditions Temperature: (-40)°C ~ 60°C.

Humidity: 95%, non-condensed.
Vibrations and Shock based on EN 300 019-2-1.

Transportation Conditions Temperature: (-40)°C ~ 85°C.

Humidity: 95%, non-condensed.
Vibrations and Shock based on EN 300 019-2-2.

IP Rating IP30

Date and Place of Issue: August 2019, Tel Aviv, Israel.

Testing lab

Address: No 9 Harrison Road, Harrison Industrial Building, #05-01

Issued By: Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch Ling Kou
Laboratories

Lab No. 47-2, 14th Ling, Chia Pau Vil., Lin Kou Dist., New Taipei City, Taiwan
Address:

Federal Communications Commission (FCC) Statement

FCC SDOC
According to FCC Part 15
We, Check Point Software Technologies Ltd.
Address: Shlomo Kaplan St 5, / HaSolelim St 5 Tel Aviv-Yafo # 67897, Phone: +972-3-753-4555.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1)
This device may not cause harmful interference, and (2) This device must accept any interference
received, including interference that may cause undesired operation.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   63

 Health and Safety Information

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to
Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may cause harmful interference
to radio communications. However, there is no guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the interference
by one of the following measures:
n Reorient or relocate the receiving antenna.
n Increase the separation between the equipment and receiver.
n Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
n Consult the dealer or an experienced radio/TV technician for help.
FCC Caution
n Any changes or modifications not expressly approved by the party responsible for compliance could
void the user's authority to operate this equipment.
n This transmitter must not be co-located or operating in conjunction with any other antenna or
transmitter.
n Operations in the 5.15-5.25GHz band are restricted to indoor usage only.
This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules.
Radiation Exposure Statement
This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with a minimum distance of 27 centimeters between the
radiator and your body.
For Country Code Selection Usage (WLAN Devices)
Note: The country code selection is for non-US models only and is not available to all US models. Per FCC
regulation, all WiFi products marketed in the US must be fixed to US operation channels only.
If trouble is experienced with this Gateway, for repair or warranty information, please contact:
Check Point
6330 Commerce Drive Suite 120, Irving, Texas 75063
Office Phone Numbers 972-444-6612
Canadian Department Compliance Statement
This radio transmitter [IC: 7849A-WLE1216V220, IC: 7849A-WLE1216V520] has been approved by
Innovation, Science and Economic Development Canada to operate with the antenna types listed below,
with the maximum permissible gain indicated. Antenna types not included in this list that have a gain
greater than the maximum gain indicated for any type listed are strictly prohibited for use with this device.
Sample statement for antennas:
This radio transmitter [IC: 7849A-WLE1216V220, IC: 7849A-WLE1216V520] has been approved by
Innovation, Science and Economic Development Canada to operate with the antenna types listed below,
with the maximum permissible gain indicated. Antenna types not included in this list that have a gain
greater than the maximum gain indicated for any type listed are strictly prohibited for use with this device.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   64

 Health and Safety Information

Max. Impedance
Frequency Band Antenna Type
Gain Ω

2414-2462 MHz Dipole Antenna (RP- 2.22 dBi 50Ω

SMA)

5180-5240, 5260-5320, 5500-5720, 5745- Dipole Antenna (RP- 4.29 dBi 50Ω
5825MHz SMA)

Radiation Exposure Statement

This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This
equipment should be installed and operated with minimum distance 27 cm between the radiator & your
body.
This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the
following two conditions:
1. This device may not cause interference, and
2. This device must accept any interference, including interference that may cause undesired
operation of the device.
This Class B digital apparatus complies with Canadian ICES-003.
This device and its antenna(s) must not be co-located or operating in conjunction with any other antenna
or transmitter, except tested built-in radios.
The County Code Selection feature is disabled for products marketed in the US/ Canada.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   65

 Health and Safety Information

FOR WLAN 5 GHz DEVICE:

Caution:
1. The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential
for harmful interference to co-channel mobile satellite systems;
2. For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the
bands 5250-5350 MHz and 5470-5725 MHz shall be such that the equipment still complies with the
e.i.r.p. limit;
3. The maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725
MHz shall comply with the e.i.r.p. limit; and
4. For devices with detachable antenna(s), the maximum antenna gain permitted for devices in the
band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits as
appropriate;
5. The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall comply with the
e.i.r.p. limits specified for point-to-point and non point-to-point operation as appropriate.
6. The worst-case tilt angle(s) necessary to remain compliant with the e.i.r.p. elevation mask
requirement set forth in Section 6.2.2(3) shall be clearly indicated. (For 5G B2 with DFS devices
only)
7. Where applicable, antenna type(s), antenna models(s), and worst-case tilt angle(s) necessary to
remain compliant with the e.i.r.p. elevation mask requirement set forth in section 6.2.2.3 shall be
clearly indicated.
8. Users should also be advised that high-power radars are allocated as primary users (i.e. priority
users) of the bands 5250-5350 MHz and 5650-5850 MHz and that these radars could cause
interference and/or damage to LE-LAN devices.
NOTICE: The Ringer Equivalence Number (REN) for this terminal equipment is 01. The REN assigned to
each terminal equipment provides an indication of the maximum number of terminals allowed to be
connected to a telephone interface. The termination on an interface may consist of any combination of
devices subject only to the requirement that the sum of the Ringer Equivalence Numbers of all the devices
does not exceed five.
Industry Canada Statement
This device complies with ISED’s licence-exempt RSSs. Operation is subject to the following two
conditions: (1) This device may not cause harmful interference, and (2) this device must accept any
interference received, including interference that may cause undesired operation.
Radiation Exposure Statement:
This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with greater than 27 cm between the radiator & your
body.
Detachable Antenna Usage
This radio transmitter (IC: 2417C-EM7455 / Model: EM7455) has been approved by ISED to operate with
the antenna type listed below with maximum permissible gain indicated. Antenna types not included in this
list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with
this device. Note - This paragraph is valid for V-81WL models only.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   66

 Health and Safety Information

Approved Antenna(s) List

Type Gain Brand Manufacturer

Dipole 3.2dBi - -

Japan Class A Compliance Statement

European Union (EU) Electromagnetic Compatibility Directive

This product is herewith confirmed to comply with the requirements set out in the Council Directive on the
Approximation of the Laws of the Member States relating to Electromagnetic Compatibility Directive
(2014/30/EU). This product was confirmed to comply with the requirements RED 2014/53/EU.
This product is in conformity with Low Voltage Directive 2014/35/EU, and complies with the requirements in
the Council Directive 2014/35/EU relating to electrical equipment designed for use within certain voltage
limits and the Amendment Directive 93/68/EEC.
Product Disposal

This symbol on the product or on its packaging indicates that this product must not be disposed of with your
other household waste. Instead, it is your responsibility to dispose of your waste equipment by handing it
over to a designated collection point for the recycling of waste electrical and electronic equipment. The
separate collection and recycling of your waste equipment at the time of disposal will help to conserve
natural resources and ensure that it is recycled in a manner that protects human health and the
environment. For more information about where you can drop off your waste equipment for recycling,
please contact your local city office or your household waste disposal service.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   67

 Information sur la Santé et la Sécurité

Information sur la Santé et la Sécurité

Avant de mettre en place ou d'utiliser l'appareil, veuillez lire les avertissements suivants.

Avertissement - ne pas obturer les aérations. Il faut laisser au moins 1,27 cm d'espace libre.

Avertissement - cet appareil ne contient aucune pièce remplaçable par l'utilisateur.

Ne pas retirer de capot ni tenter d'atteindre l'intérieur. L'ouverture ou la modification de
l'appareil peut entraîner un risque de blessure et invalidera la garantie. Les instructions
suivantes sont réservées à un personnel de maintenance formé.

Information pour l'alimentation

Pour limiter les risques avec l'alimentation CC, n'utilisez que l'une des solutions suivantes:
n L'adaptateur secteur fourni avec l'appareil
n Un adaptateur secteur de remplacement, fourni par Check Point
n Un adaptateur secteur acheté en tant qu'accessoire auprès de Check Point
Pour éviter d'endommager tout système, il est important de manipuler les éléments avec soin. Ces
mesures sont généralement suffisantes pour protéger votre équipement contre les décharges d'électricité
statique:
n Remettez dans leur sachet antistatique la carte système et les périphériques de l'appareil de
communications lorsqu'ils ne sont pas utilisés ou installés dans le châssis. Certains circuits sur la
carte système peuvent rester fonctionnels lorsque si l'appareil est éteint.
n Ne jamais court-circuiter la pile au lithium (qui alimente l'horloge temps-réel). Elle risque de
s'échauffer et de causer des brûlures.

Avertissement - DANGER D'EXPLOSION SI LA PILE EST MAL REMPLACÉE. NE

REMPLACER QU'AVEC UN TYPE IDENTIQUE OU ÉQUIVALENT, RECOMMANDÉ
PAR LE CONSTRUCTEUR. LES PILES DOIVENT ÊTRE MISES AU REBUT
CONFORMÉMENT AUX INSTRUCTIONS DE LEUR FABRICANT.
n Ne pas jeter les piles au feu ni avec les déchets ménagers.
n Pour connaître l'adresse du lieu le plus proche de dépôt des piles, contactez votre service local de
gestion des déchets.
n Ne pas court-circuiter la pile au lithium: elle risque de surchauffer et de causer des brûlures en cas
de contact.
INSTRUCTIONS DE SÉCURITÉ IMPORTANTES: Lorsque vous utilisez votre équipement
téléphonique, des précautions de sécurité élémentaires doivent toujours être respectées afin de réduire le
risque incendie, d'électrocution ou de blessures, comme celles qui suivent:
n Ne pas utiliser ce produit à proximité de l'eau, par exemple près d'une baignoire, d'un lavabo, d'un
évier de cuisine ou de buanderie, dans un sous-sol humide ou près d'une piscine.
n Evitez d'utiliser un téléphone (autre qu'un téléphone sans fil) par temps de foudre. Les éclaires
impliquent un risque faible d'électrocution.
n N'utilisez pas la téléphone pour signaler une fuite de gaz si vous vous tenez près de cette fuite.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   68

 Information sur la Santé et la Sécurité

n Utilisez uniquement le cordon alimentation et les piles indiquées dans ce manuel. Ne pas jeter les
piles au feu. Elles risquent d'exploser. Consultez les réglementations locales pour toute instruction
spécifique concernant leur élimination.
n Cet équipement ne convient pas pour une utilisation dans des endroits où des enfants sont
susceptibles d'être présents.
n Veillez à connecter le cordon d'alimentation à une prise de courant reliée à la terre autorisé par
Check Point.
n N'ouvrez jamais l'équipement. Pour des raisons de sécurité, les équipements ne doivent être
ouverts que par un homme de métier qualifié.
SAUVEGARDEZ CES INSTRUCTIONS
ATTENTION: Pour réduire tout risque d'incendie, utilisez uniquement un cordon de ligne téléphonique 26
AWG ou plus large (ex. 24 AWG) homologué UL et certifié CSA.
Pour la Californie:
Matériau perchloraté: manipulation spéciale potentiellement requise. Voir
http://www.dtsc.ca.gov/hazardouswaste/perchlorate
L'avis suivant est fourni conformément au California Code of Regulations, titre 22, division 4.5, chapitre 33.
Meilleures pratiques de manipulation des matériaux perchloratés. Ce produit, cette pièce ou les deux
peuvent contenir une pile au dioxyde de lithium manganèse, qui contient une substance perchloratée.
Produits chimiques «Proposition 65»
Les produits chimiques identifiés par l'état de Californie, conformément aux exigences du California Safe
Drinking Water and Toxic Enforcement Act of 1986 du California Health & Safety Code s. 25249.5, et seq.
(«Proposition 65»), qui sont «connus par l'état pour être cancérigène ou être toxiques pour la
reproduction» (voir http://www.calepa.ca.gov).

AVERTISSEMENT:
La manipulation de ce cordon vous expose au contact du plomb, un élément reconnue par l'état de
Californie pour être cancérigène, provoquer des malformations à la naissance et autres dommages
relatifs à la reproduction. Se laver les mains après toute manipulation.
Déclaration de conformité

Nom du constructeur: Check Point Software Technologies Ltd.

Adresse du 5 Shlomo Kaplan Street, Tel Aviv 67897, Israel

constructeur:

Numéro de modèle: V-81, *V-81W, *V-81WL, *V-81WD

Options de produit: 1570 / 1590 Wired, 1570 / 1590 WiFi, 1570 / 1590 WiFi-LTE, 1570 / 1590 WiFi-
DSL Appliance

Date de demande Aout 2019

initiale:

Déclare sous son entière responsabilité que les produits sont conformes aux normes produit suivantes:
RF/Wi-Fi (modèle signalé par *), Cellulaire (modèle signalé par**), WiFi-DSL (modèle signalé par***)

1570/1590 Appliance R80.20.XX Getting Started Guide   |   69

 Information sur la Santé et la Sécurité

Certification Nouvelle Type

CE EN 55032:2015 + AC:2016, Class B EMC, *RF/Wi-Fi, **Cellular, ***WiFi-

CE EN 55032:2012 + AC:2013, Class B DSL
CE EN 55024:2010 / A1:2015
CE EN 55024:2010
FCC Part15B
ICES-003
AS/NZS CISPR32
VCCI, V-3/2015.4, V4/2012.04, Class B VCCI CISPR
32:2016
ISO Standard 8802-3 Section14(10BASE-T)
ISO Standard 8802-3 Section25(100BASE-TX)
ISO Standard 8802-3 Section40(1000BASE-T) Article 9

*EN300 328
*EN301 893
*ETSI EN301 489-1
*ETSI EN301 489-1-17
*EN62311:2008
*EN50386:2002, EN50383:2010
*AS/NZS 4268:2017
*FCC Part15C+E
*RSS-247
*RSS-102
*JP ARIB STD-T66
*JP ARIB STD-T71

**AS/CS S042/1/4:2018
**EN 303 413
**EN 308 901-1
**FCC Part 22, subp H
**FCC Part 24. subp E
**FCC Part 27 subp C, H, F,L
**FCC Part 27 subp C, M
**FCC part 90 subp I,S

**AS/NZS: ACMA EMR, AS/CA S042. 1,4 LTE

**EN 301 489-1, 7, 24, 52
**EN 301 908 – 1, 2, 13
**EN 50385:2017 MPE
**FCC 47 CFR Part 15 Subpart C FCC 47 CFR Part 2 MPE
**FCC 47 CFR Part 24 Cellular Transmitter Certification
**RSS 102 / 247
**RSS 130
**RSS 132
**RSS 133
**RSS 139
**RSS 199
**PTCRB and GCF – on going certification process

1570/1590 Appliance R80.20.XX Getting Started Guide   |   70

 Information sur la Santé et la Sécurité

Certification Nouvelle Type

Annex A DSL
***TBR-21
***ITU-T K.21

IEC/EN 62368-1 Sécurité

UL 62368-1
AS/NZS 62368.1

Fiabilité physique et environnementale Description

Conditions de fonctionnement Vibrations et chocs selon EN 300 019-2-3.

Conditions de stockage Température: (- 40) ° C ~ 60 ° C.

Hhumidité: 95%, sans condensation.
Vibrations et chocs selon EN 300 019-2-1.

Conditions de transport Température: (-40) ° C ~ 85 ° C.

Humidité: 95%, sans condensation.
Vibrations et chocs selon EN 300 019-2-2.

Indice IP IP30

Date et lieu d'émission: Aout 2016, Tel Aviv, Israël.

Laboratoire d'essais

Adresse: No 9 Harrison Road, Harrison Industrial Building, #05-01

Délivré par: Bureau Veritas Consumer Products Services (H.K.) Ltd., Taoyuan Branch Ling
Kou Laboratories

Adresse du No. 47-2, 14th Ling, Chia Pau Vil., Lin Kou Dist., New Taipei City, Taiwan
laboratoire:

Déclaration à la Federal Communications Commission (FCC)

Selon section 15 des réglementations de la FCC
Nous, Check Point Software Technologies Ltd.
Adresse: Shlomo Kaplan St 5, / HaSolelim St 5 Tel Aviv-Yafo # 67897, Phone: +972-3-753-4555.
Ce dispositif est conforme à la section 15 des réglementations de la FCC. Son fonctionnement est soumis
aux deux conditions suivantes: (1) Cet appareil ne doit pas causer d'interférence préjudiciable et (2) Cet
appareil doit tolérer toute interférence reçue, y compris celles qui pourraient causer un fonctionnement
indésirable.
Partie responsable
Nom de la compagnie: Check Point Software Technologies Inc.
Adresse de la compagnie: 959 Skyway Road Suite 300, San Carlos, CA 94070
Téléphone: 1-800-429-4391

1570/1590 Appliance R80.20.XX Getting Started Guide   |   71

 Information sur la Santé et la Sécurité

Cet équipement a été testé et déclaré conforme aux limites pour appareils numériques de classe B, selon
la section 15 des règlements de la FCC. Ces limitations sont conçues pour fournir une protection
raisonnable contre les interférences nocives dans un environnement résidentiel. Cet appareil génère, et
peut diffuser des fréquences radio et, dans le cas d’une installation et d’une utilisation non conforme aux
instructions, il peut provoquer des interférences nuisibles aux communications radio. Cependant, il
n’existe aucune garantie qu’aucune interférence ne se produira dans le cadre d'une installation
particulière. Si cet appareil provoque des interférences avec un récepteur radio ou un téléviseur, ce qui
peut être détecté en mettant l’appareil sous et hors tension, l’utilisateur peut essayer d’éliminer les
interférences en suivant au moins l’une des procédures suivantes:
n Réorienter ou déplacer l’antenne de réception.
n Augmenter la distance entre l’appareil et le récepteur.
n Brancher l’appareil sur une prise appartenant à un circuit différent de celui sur lequel est branché le
récepteur.
n Consulter le distributeur ou un technicien radio/télévision qualifié pour obtenir de l’aide.
FCC Attention
n Tout changement ou modification non expressément approuvé par la partie responsable de la
conformité pourrait empêcher l’utilisateur autorisé de faire fonctionner cet appareil.
n Cet émetteur ne doit pas être installé ou utilisé en conjonction avec d'autres antennes ou émetteurs.
n Les opérations dans la bande 5.15-5.25GHz sont limitées à une utilisation en intérieur.
Cet appareil répond à toutes les autres exigences spécifiées dans la partie 15E, section 15.407 des règles
de la FCC.
Déclaration à la FCC sur l'exposition aux rayonnements
Cet équipement respecte les limites de la FCC en matière d'exposition aux rayonnements radio, pour un
environnement non contrôlé. Cet équipement doit être installé et utilisé en réservant au moins 27 cm entre
l'élément rayonnant et l'utilisateur.
Concernant la sélection du code pays (appareils WLAN)
Remarque: la sélection du code pays est uniquement pour les modèles hors Etats-Unis, et reste
indisponible pour tout modèle vendus aux États-Unis. Selon la règlementation FCC tous les produits WIFI
commercialisés aux Etats-Unis sont fixés uniquement sur des canaux américains.
Déclaration de conformité du département Canadien
Exemple de déclaration pour les antennes:
Le présent émetteur radio [IC: 7849A-WLE1216V220, IC: 7849A-WLE1216V520] a été approuvé par
Innovation, Sciences et Développement économique Canada pour fonctionner avec les types d'antenne
énumérés ci dessous et ayant un gain admissible maximal. Les types d'antenne non inclus dans cette liste,
et dont le gain est supérieur au gain maximal indiqué pour tout type figurant sur la liste, sont strictement
interdits pour l'exploitation de l'émetteur.

Max. Impedance
Frequency Band Antenna Type
Gain Ω

2414-2462 MHz Dipole Antenna (RP- 2.22 dBi 50Ω

SMA)

5180-5240, 5260-5320, 5500-5720, 5745- Dipole Antenna (RP- 4.29 dBi 50Ω
5825MHz SMA)

1570/1590 Appliance R80.20.XX Getting Started Guide   |   72

 Information sur la Santé et la Sécurité

Déclaration d'exposition aux radiations

Cet équipement est conforme aux limites d'exposition aux rayonnements IC établies pour un
environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de 27 cm de
distance entre la source de rayonnement et votre corps.
Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de
licence. L'exploitation est autorisée aux deux conditions suivantes:
1. L'appareil ne doit pas produire de brouillage, et
2. L'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est
susceptible d'en compromettre le fonctionnement.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
Cet appareil et son antenne ne doivent pas être situés ou fonctionner en conjonction avec une autre
antenne ou un autre émetteur, exception faites des radios intégrées qui ont été testées.
La fonction de sélection de l'indicatif du pays est désactivée pour les produits commercialisés aux États-
Unis et au Canada.
POUR WLAN 5 GHz DISPOSITIF:
Avertissement:
1. Les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une
utilisation à l’intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de
satellites mobiles utilisant les mêmes canaux;
2. Pour les dispositifs munis d’antennes amovibles, le gain maximal d’antenne permis pour les
dispositifs utilisant les bandes de 5 250 à 5 350 MHz et de 5 470 à 5 725 MHz doit être conforme à la
limite de la p.i.r.e;
3. Pour les dispositifs munis d’antennes amovibles, le gain maximal d’antenne permis (pour les
dispositifs utilisant la bande de 5 725 à 5 850 MHz) doit être conforme à la limite de la p.i.r.e.
spécifiée, selon le cas;
4. Lorsqu’il y a lieu, les types d’antennes (s’il y en a plusieurs), les numéros de modèle de l’antenne et
les pires angles d’inclinaison nécessaires pour rester conforme à l’exigence de la p.i.r.e. applicable
au masque d’élévation, énoncée à la section 6.2.2.3, doivent être clairement indiqués
5. Le gain maximal d’antenne permis pour les dispositifs utilisant les bandes 5250-5350 MHz et 5470-
5725 MHz doit se conformer à la limite de p.i.r.e.;
6. Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz) doit se
conformer à la limite de p.i.r.e. spécifiée pour l’exploitation point à point et non point à point, selon le
cas.
7. Les pires angles d’inclinaison nécessaires pour rester conforme à l’exigence de la p.i.r.e. applicable
au masque d’élévation, et énoncée à la section 6.2.2 3), doivent être clairement indiqués. (Pour 5G
B2 avec les périphériques DFS uniquement)
8. Lorsqu’il y a lieu, les types d’antennes (s’il y en a plusieurs), les numéros de modèle de l’antenne et
les pires angles d’inclinaison nécessaires pour rester conforme à l’exigence de la p.i.r.e. applicable
au masque d’élévation, énoncée à la section 6.2.2.3, doivent être clairement indiqués.
9. De plus, les utilisateurs devraient aussi être avisés que les utilisateurs de radars de haute puissance
sont désignés utilisateurs principaux (c.-à-d., qu’ils ont la priorité) pour les bandes 5250-5350 MHz
et 5650-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux
dispositifs LAN-EL.
Restrictions concernant le raccordement de matériel

1570/1590 Appliance R80.20.XX Getting Started Guide   |   73

 Information sur la Santé et la Sécurité

Avis : L'indice d'équivalence de la sonnerie (IES) du présent matériel est de 01. L'IES assigné à chaque
dispositif terminal indique le nombre maximal de terminaux qui peuvent être raccordés à une interface
téléphonique. La terminaison d'une interface peut consister en une combinaison quelconque de
dispositifs, à la seule condition que la somme d'indices d'équivalence de la sonnerie de tous les dispositifs
n'excède pas 5.
Industry Canada Statement
Le présent appareil est conforme aux CNR d’ ISED applicables aux appareils radio exempts de licence.
L’exploitation est autorisée aux deux conditions suivantes: (1) le dispositif ne doit pas produire de
brouillage préjudiciable, et (2) ce dispositif doit accepter tout brouillage reçu, y compris un brouillage
susceptible de provoquer un fonctionnement indésirable.
Déclaration d'exposition aux radiations:
Cet équipement est conforme aux limites d'exposition aux rayonnements ISED établies pour un
environnement non contrôlé. Cet équipement doit être installé et utilisé à plus de 27 cm entre le radiateur
et votre corps.
Utilisation d'antenne détachable
Le présent émetteur radio (IC: 2417C-EM7455 / Model: EM7455) a été approuvé par ISED pour
fonctionner avec les types d'antenne énumérés ci-dessous et ayant un gain admissible maximal. Les
types d'antenne non inclus dans cette liste, et dont le gain est supérieur au gain maximal indiqué, sont
strictement interdits pour l'exploitation de l'émetteur. Remarque - Ce paragraphe est valable pour les
modèles V-81WL uniquement
Liste des antennes approuvées

Type Gain Brand Fabricant

Dipole 3.2dBi - -

Déclaration de conformité de classe A pour le Japon

Directive de l'Union européenne relative à la compatibilité électromagnétique

Ce produit est certifié conforme aux exigences de la directive du Conseil concernant le rapprochement des
législations des États membres relatives à la directive sur la compatibilité électromagnétique
(2014/30/EU). Ce produit a été confirmé conforme aux exigences RED 2014/53 / EU.
Ce produit est conforme à la directive basse tension 2014/35/EU et satisfait aux exigences de la directive
2014/35/EU du Conseil relative aux équipements électriques conçus pour être utilisés dans une certaine
plage de tensions, selon les modifications de la directive 93/68/CEE.
Mise au rebut du produit

1570/1590 Appliance R80.20.XX Getting Started Guide   |   74

 Information sur la Santé et la Sécurité

Ce symbole apposé sur le produit ou son emballage signifie que le produit ne doit pas être mis au rebut
avec les autres déchets ménagers. Il est de votre responsabilité de le porter à un centre de collecte
désigné pour le recyclage des équipements électriques et électroniques. Le fait de séparer vos
équipements lors de la mise au rebut, et de les recycler, contribue à préserver les ressources naturelles et
s'assure qu'ils sont recyclés d'une façon qui protège la santé de l'homme et l'environnement. Pour obtenir
plus d'informations sur les lieux où déposer vos équipements mis au rebut, veuillez contacter votre
municipalité ou le service de gestion des déchets.

1570/1590 Appliance R80.20.XX Getting Started Guide   |   75

 Support

Support
For technical assistance, contact Check Point 24 hours a day, seven days a week at:
n +1 972-444-6600 (Americas)
n +972 3-611-5100 (International)
When you contact support, you must provide your MAC address.
For more technical information, go to: Check Point Support Center.
To learn more about the Check Point Internet Security Product Suite and other security solutions, go to:
https://www.checkpoint.com

1570/1590 Appliance R80.20.XX Getting Started Guide   |   76