Firewall mgmt for SMB devices as MSP

[bigzell]

Hi,

we are an MSP who deliver both fortigate and cisco meraki firewalls to the SMB market. Since we already deliver harmony sase and harmony email & collaboration we want to test out their firewalls.

I know checkpoint SMB firewall does not run the same OS as their enterprise firewalls. I have some previous experience managing enterprise firewalls using smartconsole with management servers. It looks like their SMB firewalls can be managed the same way.

As an MSP, which management would you recommend? Smart 1 cloud/management server or spark management?

[israelfds95]

Both management options are valid, and the right choice depends on the MSP/MSSP use case, scale, and required level of flexibility.

Smart-1 Cloud / Smart-1 Management
Recommended if you plan to manage enterprise or mixed SMB + enterprise environments.

• Full SmartConsole experience (same as enterprise firewalls)

• Supports up to 400 gateways

• Advanced policy capabilities (multiple rule bases, layers, install-on targeting)

• Allows strong customer and location isolation

• Secure Internet-based onboarding simplifies deployment

• Best fit for MSSPs that need scalability and advanced governance

Spark Management
Recommended for SMB-focused MSPs looking for simplicity and lower operational overhead.

• no extra cost, no extra license for Spark Management, spark management is on SMB license.

• Set up and apply various security policies across multiple Quantum Spark gateways from a centralized location.

•  Oversee and configure VPN connections for different Quantum Spark gateways centrally.

• Built-in reporting and log search

• Faster setup and simpler day-to-day operations

Summary

• Pure SMB, simple environments → Spark Management

• Growing MSP/MSSP or need for advanced separation and scalability → Smart-1 Cloud

For a deeper discussion, licensing details, and to explore the best option for your business model, I recommend contacting your Check Point Account Manager to review the available options and design the most suitable architecture.

Hope this helps.

[yahavb]

Spark Management is designed for MSPs:

• Configuration templates, with simple out of the box configuration
• Pay-as-you-go
• Aligned with Infinity Portal MSP hierarchy
  • Integrates with your existing accounts (MSP / customers) hierarchy
  • Full control and visibility from the top level account
• Comprehensive security and operational views including:
  • System health
  • Internet monitoring
  • Assets view
  • VPN monitoring
  • Wi-Fi monitoring
  • Traffic monitoring
  • More...
• Access to unique features such as:
  • Zero Touch deployment
  • Reach my device + seamless login
  • Customer level periodic reports
  • Firmware upgrade control
  • Periodic backup to cloud
  • Many more...

Feel free to reach out if you have additional questions.

Edit:

I am also sharing relevant videos / guides:

Transform MSP efficiency with Spark Management:

To view this video, you must Accept and consent to the use of cookies.

Accept

Useful topics from admin guide:

Getting started admin guide - with video  

Admin guide - MSP capabilities 

Enabling Pay-as-you-go