Security
Yes - you need to add a new manual rule to allow the "Dropbox" application.
Inbound HTTPS Inspection is only available for Centrally Managed Quantum Spark appliances.
Zone-based policy is on the roadmap for 2025.
sk95235 refers to the Threat Emulation engine in the cloud.
There should be no difference, as both Gateways use the same Threat Emulation engine in the Check Point cloud.
There is no local Threat Emulation engine on Quantum Spark Gateways.