topic Re: Firewall mgmt for SMB devices as MSP in Spark Firewall (SMB)

Firewall mgmt for SMB devices as MSP

bigzell — Sun, 01 Feb 2026 00:13:10 GMT

Hi,

we are an MSP who deliver both fortigate and cisco meraki firewalls to the SMB market. Since we already deliver harmony sase and harmony email & collaboration we want to test out their firewalls.

I know checkpoint SMB firewall does not run the same OS as their enterprise firewalls. I have some previous experience managing enterprise firewalls using smartconsole with management servers. It looks like their SMB firewalls can be managed the same way.

As an MSP, which management would you recommend? Smart 1 cloud/management server or spark management?

Re: Firewall mgmt for SMB devices as MSP

israelfds95 — Sun, 01 Feb 2026 13:35:55 GMT

Both management options are valid, and the right choice depends on the MSP/MSSP use case, scale, and required level of flexibility.

Smart-1 Cloud / Smart-1 Management
Recommended if you plan to manage enterprise or mixed SMB + enterprise environments.

Full SmartConsole experience (same as enterprise firewalls)
Supports up to 400 gateways
Advanced policy capabilities (multiple rule bases, layers, install-on targeting)
Allows strong customer and location isolation
Secure Internet-based onboarding simplifies deployment
Best fit for MSSPs that need scalability and advanced governance

Spark Management
Recommended for SMB-focused MSPs looking for simplicity and lower operational overhead.

no extra cost, no extra license for Spark Management, spark management is on SMB license.
Set up and apply various security policies across multiple Quantum Spark gateways from a centralized location.
Oversee and configure VPN connections for different Quantum Spark gateways centrally.
Built-in reporting and log search
Faster setup and simpler day-to-day operations

Summary

Pure SMB, simple environments → Spark Management
Growing MSP/MSSP or need for advanced separation and scalability → Smart-1 Cloud

For a deeper discussion, licensing details, and to explore the best option for your business model, I recommend contacting your Check Point Account Manager to review the available options and design the most suitable architecture.

Hope this helps.

Re: Firewall mgmt for SMB devices as MSP

yahavb — Mon, 02 Feb 2026 08:40:31 GMT

Spark Management is designed for MSPs:

Configuration templates, with simple out of the box configuration
Pay-as-you-go
Aligned with Infinity Portal MSP hierarchy
- Integrates with your existing accounts (MSP / customers) hierarchy
- Full control and visibility from the top level account
Comprehensive security and operational views including:
- System health
- Internet monitoring
- Assets view
- VPN monitoring
- Wi-Fi monitoring
- Traffic monitoring
- More...
Access to unique features such as:
- Zero Touch deployment
- Reach my device + seamless login
- Customer level periodic reports
- Firmware upgrade control
- Periodic backup to cloud
- Many more...

Feel free to reach out if you have additional questions.

Edit:

I am also sharing relevant videos / guides:

Transform MSP efficiency with Spark Management:

Useful topics from admin guide:

Getting started admin guide - with video

Admin guide - MSP capabilities

Enabling Pay-as-you-go