topic Re: R80.x Ports Used for Communication by Various Check Point Modules in Firewall and Security Management

R8x Ports Used for Communication by Various Check Point Modules (new version 2.1)

HeikoAnkenbrand — Tue, 27 Jan 2026 23:47:57 GMT

Introduction

This drawing should give you an overview of the used R80, R81 ports respectively communication flows. It should give you an overview of how different Check Point modules communicate with each other. Furthermore, services that are used for firewall operation are also considered. These firewall services are also partially mapped as implied rules in the set on the firewall.

Overview

Download PDF

Download R8x:
R8x Ports Used for Communication PDF

SmartConsole Extention

New!

Now I have developed a SmartConsole Extension so that you can view the overview directly in the SmartConsole.
In the Access Policy section in the upper area, there is a tab called "Ports for Modules". More infos here.

Extension URL: https://www.ankenbrand24.de/ex/ports.json

References

Support Center: Ports used by Check Point software

Versions

Version 2.2:
+ v2.2a R82 + R82.10 update 01/28/2026

Version 2.1:
+ v2.1c  all new R82 ports + two bugs fixed   10/20/2025
+ v2.1b all new R82 ports (IA + RA VPN ikev2)            10/29/2024
+ v2.1a all new R81.20 ports (Cloudguard + VPN + ClusterXL)           07/15/2024

old Version 2.0:
+ v2.0f new! now with SmartConsole Extension                                02/13/2023
+ v2.0e add LOM port 2048                                                                       01/31/2023
+ v2.0d add LOM ports                                                           01/23/2023
+ v2.0c new colors + design                                                                      01/22/2023
+ v2.0b best mistake 🙂 SmartDashboard versus SmartConsole     01/22/2023
+ v2.0a correct names : SMS, MDS, SmartConsole, ...                          01/21/2023

old Version 1.9:
+ v1.9a add port 443 cloud CME 19.03.2022
+ v1.9b fix port issue 442 cloud CME 22.03.2022

old Version 1.8:
+ v1.8a R81.10 EA update 04.05.2021
+ v1.8b add port 18264 30.05.2021
+ v1.8c R81.10 upgrade 28.07.2021

old Version 1.7:
+ v1.7a R81 EA update 17.07.2021
+ v1.7b bug fix 20.08.2021
+ v1.7c bug fix + new download link 25.06.2021

old Version 1.6:
+ v1.6a add Azure ports 05.05.2020
+ v1.6b add all cloud ports 15.06.2020

old Version 1.5:
+ v1.5a typos corrected 18.09.2019
+ v1.5b port update 26.01.2020

old version 1.4:
+ v1.4a bug fix, update port 1701 udp L2TP 09.04.2018
+ v1.4b bug fix 15.04.2018
+ v1.4c CPUSE update 17.04.2018
+ v1.4d legend fixed 17.04.2018
+ v1.4e add SmartLog and SmartView on port 443 20.04.2018
+ v1.4f bug fix 21.05.2018
+ v1.4g bug fix 25.05.2018
+ v1.4h add Backup ports 21, 22, 69 UDP and ClusterXL full sync port 256 30.05.2018
+ v1.4i add port 259 udp VPN link probeing 12.06.2018
+ v1.4j bug fix 17.06.2018
+ v1.4k add OSPF/BGP route Sync 25.06.2018
+ v1.4l bug fix routed 29.06.2018
+ v1.4m bug fix tcp/udp ports 03.07.2018
+ v1.4n add port 256 13.07.2018
+ v1.4o bug fix / add TE ports 27.11.2018
+ v1.4p bug fix routed port 2010 23.01.2019
+ v1.4q change to new forum format 16.03.2019

old version 1.3:
+ v1.3a new designe (blue, gray), bug fix, add netflow, new names 27.03.2018
+ v1.3b add routing ports, bug fix designe 28.03.2018
+ v1.3c bug fix, rename ports (old) 29.03.2018
+ v1.3d bug fix 30.03.2018
+ v1.3e fix issue L2TP UDP port 1701

old version 1.1:
+ v1.1a - added r80.xx ports 16.03.2018
+ v1.1b - bug in drawing fixed 17.03.2018
+ v1.1c - add RSA, TACACS, Radius 19.03.2018
+ v1.1d - add 900, 259 Client-auth - deleted od 4.0 ports 20.03.2018
+ v1.1e - add OPSEC -delete R55 ports 21.03.2018
+ v1.1f - bug fix 22.03.2018
+ v1.1g - bug fix - add mail smtp -add dhcp - add snmp 25.03.2018

Re: R80.x Ports Used for Communication by Various Check Point Modules

Ivo_Marques — Tue, 06 Mar 2018 17:46:28 GMT

Great stuff!

Thank you for the diagram. It will be helpful.

Maybe you can complement with the connections that are used to update services or signatures, like IPS is the SmartDashboard that goes online if it's a manual update, the application control is the smart center, etc, etc.

Regards,

Ivo

Re: R80.x Ports Used for Communication by Various Check Point Modules

PhoneBoy — Fri, 09 Mar 2018 21:46:50 GMT

Nicely done!

Re: R80.x Ports Used for Communication by Various Check Point Modules

Florian_Winterb — Wed, 14 Mar 2018 08:36:52 GMT

I think it's great.

Maybe you can get a bigger overview with more balades. I think that's very helpful.

Re: R80.x Ports Used for Communication by Various Check Point Modules

HeikoAnkenbrand — Wed, 14 Mar 2018 11:11:09 GMT

I have released a new version 0.9 with the following features:
- VPN connections
- Secure Client
- Update server Check Point
- Sandblast Appliance
- DNS/NTP

Regards,

Heiko

Re: R80.x Ports Used for Communication by Various Check Point Modules

HeikoAnkenbrand — Thu, 15 Mar 2018 10:15:00 GMT

Found a small bug in my drawing.
NAT-T is UDP 4500

Regards,

Heiko

Re: R80.x Ports Used for Communication by Various Check Point Modules

HeikoAnkenbrand — Thu, 15 Mar 2018 11:40:30 GMT

I have released a new version 0.9b with the following features:

- Identity Awareness

- Smart Reporter + Smart Event + Event Agent

- bug fixed

Regards,

Heiko

Re: R80.x Ports Used for Communication by Various Check Point Modules

hong_jungil — Thu, 15 Mar 2018 12:14:24 GMT

This overview has been missing for a long time.

Keep up the good work!

Re: R80.x Ports Used for Communication by Various Check Point Modules

Kaspars_Zibarts — Thu, 15 Mar 2018 13:53:44 GMT

You may add Identity Collector in it sorry about the diagram "quality work"

Re: R80.x Ports Used for Communication by Various Check Point Modules

HeikoAnkenbrand — Thu, 15 Mar 2018 14:17:19 GMT

THX

I will update it in the next version!

Regards,

Heiko

Re: R80.x Ports Used for Communication by Various Check Point Modules

PhoneBoy — Thu, 15 Mar 2018 17:05:48 GMT

I decided to rename the document.

Hope you don't mind

Re: R80.x Ports Used for Communication by Various Check Point Modules

HeikoAnkenbrand — Thu, 15 Mar 2018 17:13:28 GMT

Identity Collectors is completed!

Re: R80.x Ports Used for Communication by Various Check Point Modules

HeikoAnkenbrand — Thu, 15 Mar 2018 17:14:26 GMT

Is ok!

Re: R80.x Ports Used for Communication by Various Check Point Modules

Kaspars_Zibarts — Thu, 15 Mar 2018 17:22:03 GMT

Awesome!

Re: R80.x Ports Used for Communication by Various Check Point Modules

Juan_Carlos — Fri, 16 Mar 2018 08:13:00 GMT

Hello,

Thanks, usefull diagram for R77. Would be very interesting for R80.XX!

We tried to get such information from the Support for R80.10 after we found out that opening 19009 was mandatory between management servers and log servers (DBsync<->CPM).

As per our Diamond Engineer it seems that R&D think it's not necessary to add the information in sk52421...

Re: R80.x Ports Used for Communication by Various Check Point Modules

HeikoAnkenbrand — Fri, 16 Mar 2018 15:49:45 GMT

THX for this info.

I checked this port 19009. See Wireshark:

I think this is the database query from the DashBoard to the Management Server.

Check Point KB SK says:

I will add the R80.xx ports in the next version.

Regards,

Heiko

Re: R80.x Ports Used for Communication by Various Check Point Modules

HeikoAnkenbrand — Fri, 16 Mar 2018 16:16:15 GMT

I have added R80 ports.

Regards,

Heiko

Re: R80.x Ports Used for Communication by Various Check Point Modules

Juan_Carlos — Fri, 16 Mar 2018 16:24:39 GMT

Hello Heiko, I know that SmartConsole R80.10 needs TCP19009 to connect to the management server, this is explained in the sk

But what the sk does not explains is that all management servers (including dedicated log servers) need to connect to each other using TCP19009. We noticed that when we noticed CPM packets dropped between our management servers (including dedicated log servers).

Re: R80.x Ports Used for Communication by Various Check Point Modules

Juan_Carlos — Fri, 16 Mar 2018 16:30:03 GMT

By the way thanks for the new diagram

Re: R80.x Ports Used for Communication by Various Check Point Modules

Silvia_Day — Fri, 16 Mar 2018 16:37:09 GMT

Nice R80 port update!