Predictika · Network security gateways

An AI sales agent's Quantum Spark gateway order, checked before it goes out

An AI sales agent prepares an order for a Quantum Spark 1600 or 1800 security gateway with a 3 or 5 year NGFW, NGTP or SNBT bundle, the throughput and remote access users the customer needs, ports, transceivers, power and management, and the throughput and users it states. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the data sheet and returns a verdict, every reason and the figures it computed.

Scope: Check Point Quantum Spark 1600 and 1800 security gateways: models, NGFW, NGTP and SNBT bundles, throughput, ports, transceivers, SD cards, power and Mobile Access. See everything this validator covers

This validator models an order for one Quantum Spark 1600 or 1800 security gateway, based on the figures in the public Check Point data sheet, not just the scenarios shown below.

  • Bundles — the 3 and 5 year NGFW, NGTP and SNBT bundles and what each includes: URL filtering, Antivirus and Anti-Bot, Anti-Spam and DNS Security start at NGTP; Threat Emulation (sandboxing) and IoT network protection for SMBs are in SNBT only. Any other term goes to a person.
  • Throughput — the data sheet figures for each model: Next Generation Firewall throughput of 3,200 Mbps (1600) and 5,000 Mbps (1800), and Threat Prevention throughput of 1,500 and 2,000 Mbps, or 2,000 and 2,600 Mbps with Smart Accel (available on gateways managed through the Web UI or Spark Management, not Smart-1). The throughput the quote states must equal the computed one.
  • Ports and accessories — 2.5 GbE LAN ports (1800 only), 1 GbE SFP transceivers, 10 GbE SFP+ transceivers (1800 DMZ port only), one micro-SD slot for a 32 or 64 GB card, and redundant power supplies (1800 only).
  • Mobile Access — 500 remote access users are included and each Mobile Access blade adds 50; the users the quote states must equal the computed total. Optional IoT and SD-WAN blades that the data sheet lists as Smart-1 only go to a person.

Any Quantum Spark 1600 or 1800 order that touches these rules is in scope — not only the scenarios pictured here. Not covered: prices (the data sheet lists part numbers but no list prices, so this page shows no price build-up), other Quantum Spark models, other Check Point product families, software releases and the cloud-managed service, and real-traffic performance, which depends on configuration. Assumptions: the data sheet lists a second WAN port on the 1800 as supported in a future software release, so this validator allows only one 1 GbE SFP transceiver on the 1800; NGTP and SNBT orders use the data sheet's Threat Prevention throughput and NGFW orders its Next Generation Firewall throughput.

The AI sales agentBuilds the gateway order from the conversation and says it is ready.
Predictika validatorChecks every rule at once and returns the verdict, each finding, and the computed figures.

7 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch

What the agent proposes

The AI sales agent says

Illustrative agent statement. The validator receives the structured request below.

Proposing agent: AI sales agent (scripted)

Before sending, the agent must call Recorded run

Predictika validator


      

        
        
        
      

      
Waiting for the call.

      
    

  

  
  

    
Where rules-based CPQ gets it wrong
Click to expand
    
Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.

    
What the validator caughtTypical rules-based CPQPredictika
What each bundle includes, checked against what the customer asked forOnly with care
A product rule per service and bundle. It works, but every new bundle or service means another set of rules to maintain.		The bundle and every requested service are in one request and every inclusion is checked together.
Throughput that depends on model, bundle and Smart AccelOnly with workarounds
The figure is a table of model by bundle by option, and then it has to be compared with the requirement and with the figure the quote states.		The figure is computed on every call and compared with both the requirement and the stated throughput.
Options that exist on one model onlyOnly with care
2.5 GbE ports, 10 GbE fiber and redundant power each need a rule tied to the model, and each is easy to miss on a rarely sold model.		Model and options travel in one request and every model-specific option is checked together.
Management that changes what is supportedOnly with workarounds
Smart Accel and IoT protection depend on how the gateway is managed, a choice that sits on a different line from the feature.		Management and features are compared together, in any order the choices arrive.
Every problem returned in one answerOnly with workarounds
Rules tend to fire as the quote is saved or a step is completed, so a person often fixes one error and meets the next.		All findings come back together, whatever order the choices arrived in.

  

  

    
What this validator catches: findings from its test cases
Click to expand
    
Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.

    
1URL filtering is included in the NGTP and SNBT bundles but not in the NGFW bundle.
2Antivirus and Anti-Bot are included in the NGTP and SNBT bundles but not in the NGFW bundle.
3Anti-Spam and email security are included in the NGTP and SNBT bundles but not in the NGFW bundle.
4DNS Security is included in the NGTP and SNBT bundles but not in the NGFW bundle.
5Threat Emulation (sandboxing) is included only in the SNBT bundle.
6IoT network protection for SMBs is included only in the SNBT bundle.
7IoT network protection for SMBs is supported with the Web UI and Spark Management only, not with Smart-1 central management.
8Smart Accel is supported on gateways managed through the Web UI or Spark Management, not through Smart-1.
9The quote needs 2,600 Mbps of throughput; the selected gateway and bundle give 2,000 Mbps.
10The quote needs 1,501 Mbps of throughput; the selected gateway and bundle give 1,500 Mbps.
11The quote needs 3,201 Mbps of throughput; the selected gateway and bundle give 3,200 Mbps.
12The quote needs 5,001 Mbps of throughput; the selected gateway and bundle give 5,000 Mbps.
13The quote needs 551 remote access users; the gateway includes 500 and each Mobile Access blade adds 50, which gives 550 in total.
14The quote needs 600 remote access users; the gateway includes 500 and each Mobile Access blade adds 50, which gives 500 in total.
15The quote needs 2.5 GbE LAN ports, quantity 1; the selected gateway has 0 such ports.
16The quote includes 1 GbE SFP transceivers, quantity 3; the selected gateway can use 2 in total.
17The quote includes 1 GbE SFP transceivers, quantity 2; the selected gateway can use 1 in total.
18The quote includes 10 GbE SFP+ transceivers, quantity 1; the 10 GbE fiber port is on the 1800 DMZ only, so the selected gateway can use 0.
19The quote includes 10 GbE SFP+ transceivers, quantity 2; the 10 GbE fiber port is on the 1800 DMZ only, so the selected gateway can use 1.
20The quote has 2 SD memory cards; the gateway has a single micro-SD slot.

  

  

    
Scenarios and results
Click to expand
    
The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.

    
1. Bundle contents: A 1800 on the NGFW bundle with URL filtering, Antivirus and sandboxing

    
The agent's request. Please quote a Quantum Spark 1800 security gateway with the NGFW bundle on a 5-year term, managed through the Web UI, for a network that needs 1,800 Mbps of throughput and 550 remote access users, with 1 Mobile Access blade. It needs URL filtering, Antivirus and Anti-Bot and Threat Emulation (sandboxing). The quote states 5,000 Mbps of throughput and 550 remote access users in total. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • URL filtering is not in the NGFW bundle. URL filtering is included in the NGTP and SNBT bundles but not in the NGFW bundle.
    • 
      
  • Antivirus and Anti-Bot are not in the NGFW bundle. Antivirus and Anti-Bot are included in the NGTP and SNBT bundles but not in the NGFW bundle.
    • 
      
  • Threat Emulation needs the SNBT bundle. Threat Emulation (sandboxing) is included only in the SNBT bundle.
    • 
    

    
2. Bundle contents: The agent resubmits after fixing the errors

    
The agent's request. Please quote a Quantum Spark 1800 security gateway with the SNBT bundle on a 5-year term, managed through the Web UI, for a network that needs 1,800 Mbps of throughput and 550 remote access users, with 1 Mobile Access blade. It needs URL filtering, Antivirus and Anti-Bot and Threat Emulation (sandboxing). The quote states 2,000 Mbps of throughput and 550 remote access users in total. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Order summary. The selected gateway and bundle give 2,000 Mbps of throughput against 1,800 Mbps required, with 550 remote access users licensed.
    • 
    

    
3. Throughput and Smart Accel: A 1600 on the NGTP bundle for 1,800 Mbps

    
The agent's request. Please quote a Quantum Spark 1600 security gateway with the NGTP bundle on a 3-year term, managed through the Web UI, for a network that needs 1,800 Mbps of throughput and 500 remote access users. The quote states 2,000 Mbps of throughput and 500 remote access users in total. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Throughput below the requirement. The quote needs 1,800 Mbps of throughput; the selected gateway and bundle give 1,500 Mbps.
    • 
      
  • Stated throughput does not match. The quote states 2,000 Mbps of throughput; the selected gateway and bundle give 1,500 Mbps.
    • 
    

    
4. Throughput and Smart Accel: The agent resubmits after fixing the errors

    
The agent's request. Please quote a Quantum Spark 1600 security gateway with the NGTP bundle on a 3-year term, managed through the Web UI, for a network that needs 1,800 Mbps of throughput and 500 remote access users. Smart Accel is enabled. The quote states 2,000 Mbps of throughput and 500 remote access users in total. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Order summary. The selected gateway and bundle give 2,000 Mbps of throughput against 1,800 Mbps required, with 500 remote access users licensed.
    • 
    

    
5. Ports, power and central management: A 1600 with Smart-1 management, redundant power and 10 GbE fiber

    
The agent's request. Please quote a Quantum Spark 1600 security gateway with the SNBT bundle on a 3-year term, managed through Smart-1, for a network that needs 1,800 Mbps of throughput and 500 remote access users. Smart Accel is enabled; redundant power supplies are required; it needs two 2.5 GbE LAN ports; it includes two 1 GbE SFP transceivers; it includes one 10 GbE SFP+ transceiver. The quote states 2,000 Mbps of throughput and 500 remote access users in total. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Smart Accel not supported with Smart-1. Smart Accel is supported on gateways managed through the Web UI or Spark Management, not through Smart-1.
    • 
      
  • Not enough 2.5 GbE LAN ports. The quote needs 2.5 GbE LAN ports, quantity 2; the selected gateway has 0 such ports.
    • 
      
  • Too many 10 GbE SFP+ transceivers. The quote includes 10 GbE SFP+ transceivers, quantity 1; the 10 GbE fiber port is on the 1800 DMZ only, so the selected gateway can use 0.
    • 
      
  • Redundant power needs the 1800. Redundant power supplies are listed only for the 1800; the 1600 has a single power supply.
    • 
    

    
6. Ports, power and central management: The agent resubmits after fixing the errors

    
The agent's request. Please quote a Quantum Spark 1800 security gateway with the SNBT bundle on a 3-year term, managed through Smart-1, for a network that needs 1,800 Mbps of throughput and 500 remote access users. Smart Accel is enabled; redundant power supplies are required; it needs two 2.5 GbE LAN ports; it includes two 1 GbE SFP transceivers; it includes one 10 GbE SFP+ transceiver. The quote states 2,600 Mbps of throughput and 500 remote access users in total. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Smart Accel not supported with Smart-1. Smart Accel is supported on gateways managed through the Web UI or Spark Management, not through Smart-1.
    • 
      
  • Too many 1 GbE SFP transceivers. The quote includes 1 GbE SFP transceivers, quantity 2; the selected gateway can use 1 in total.
    • 
    

    
7. Ports, power and central management: The agent resubmits after fixing the errors

    
The agent's request. Please quote a Quantum Spark 1800 security gateway with the SNBT bundle on a 3-year term, managed through Spark Management, for a network that needs 1,800 Mbps of throughput and 500 remote access users. Smart Accel is enabled; redundant power supplies are required; it needs two 2.5 GbE LAN ports; it includes one 1 GbE SFP transceiver; it includes one 10 GbE SFP+ transceiver. The quote states 2,600 Mbps of throughput and 500 remote access users in total. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Order summary. The selected gateway and bundle give 2,600 Mbps of throughput against 1,800 Mbps required, with 500 remote access users licensed.
    • 
    

  

  

    
Narration transcript
Click to expand
    
The text of the narrated walkthrough, step by step.

    
    
      
  1. Welcome to a demo of Predictika's Validator. An AI sales agent prepares an order for a Quantum Spark 1600 or 1800 security gateway. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the data sheet and returns a verdict, every reason and the figures it computed.
    2. 
      
  2. I will start with the first request by the agent.
    3. 
      
  3. The agent says. Please quote a Quantum Spark 1600 security gateway with the SNBT bundle on a 3-year term, managed through Smart-1, for a network that needs 1,800 Mbps of throughput and 500 remote access users. Smart Accel is enabled; redundant power supplies are required; it needs two 2.5 GbE LAN ports; it includes two 1 GbE SFP transceivers; it includes one 10 GbE SFP+ transceiver. The rest of the request is on screen. The quote states 2,000 Mbps of throughput and 500 remote access users in total.
    4. 
      
  4. Before it goes out, the agent calls the validator.
    5. 
      
  5. Blocked, with four findings, all in one answer. Smart Accel is supported on gateways managed through the Web UI or Spark Management, not through Smart-1. The quote needs 2.5 GbE LAN ports, quantity 2; the selected gateway has 0 such ports. The quote includes 10 GbE SFP+ transceivers, quantity 1; the 10 GbE fiber port is on the 1800 DMZ only, so the selected gateway can use 0. The other one is on screen.
    6. 
      
  6. The validator returned four blocking findings in one answer. A check that reads one field at a time would pass most of this; it shows only when the choices in the quote are checked against each other.
    7. 
      
  7. What this shows: for throughput that depends on model, bundle and Smart Accel, a rules-based CPQ can do this only with workarounds.
    8. 
      
  8. Now the agent resubmits.
    9. 
      
  9. The corrected request. It changes the gateway to Quantum Spark 1800 and the stated total throughput as to 2,600 Mbps.
    10. 
      
  10. It calls the validator again.
    11. 
      
  11. Still blocked, with two findings, all in one answer. Smart Accel is supported on gateways managed through the Web UI or Spark Management, not through Smart-1. The quote includes 1 GbE SFP transceivers, quantity 2; the selected gateway can use 1 in total.
    12. 
      
  12. Three findings cleared. Still blocking: smart Accel not supported with Smart-1. Newly found: too many 1 GbE SFP transceivers.
    13. 
      
  13. The agent resubmits once more.
    14. 
      
  14. The revised request. It changes the management to Spark Management and the 1 GbE SFP transceivers to 1.
    15. 
      
  15. It calls the validator once more.
    16. 
      
  16. This time the validator clears it.
    17. 
      
  17. Both earlier findings are cleared, and the validator's figure matches the quote.
    18. 
      
  18. Four problems caught in one call, fixed in two passes, and a clean quote. That is the value of Predictika's validator: catching mistakes before they reach the customer. Now you can try the other scenarios yourself.
    19.