topic Re: Platform Portal & UserCheck ip address in General Topics

Platform Portal & UserCheck ip address

Ilovecheckpoint — Mon, 30 Mar 2026 15:41:53 GMT

Hello,

By default usercheck and portal ip address is the one configured on main ip address.

My gateway has as main ip address, a public one, its management is reachable via Internet.

My concern is security; is there any limitation if I change their ip address to an internal one and I allow only internal ip addresses to reach them, like remote access ipsec vpn?

Re: Platform Portal & UserCheck ip address

PhoneBoy — Mon, 30 Mar 2026 16:19:08 GMT

If you change the Main IP, it will impact Remote Access unless you configure Link Selection to the correct (public) IP.
It's also the IP used for managing the gateways, so it needs to be reachable from the management.

Re: Platform Portal & UserCheck ip address

Ilovecheckpoint — Tue, 31 Mar 2026 07:36:24 GMT

Thank you for your answer.

What about if I change Platform Portal & UserCheck ip address, and I choose an internal one?

Re: Platform Portal & UserCheck ip address

Gaurav_Pandya — Tue, 31 Mar 2026 08:37:46 GMT

There is an option to keep the platform portal and UserCheck IPs public while restricting access using a dynamic geo object. Please refer to the thread below for details.

https://community.checkpoint.com/t5/SASE-and-Remote-Access/Geo-VPN-blocking/m-p/214040

Re: Platform Portal & UserCheck ip address

emmap — Wed, 01 Apr 2026 05:55:21 GMT

You can change the Platform Portal IP to an internal one without breaking remote access. Often people will configure a URL for UserCheck and have their internal DNS server map it to the suitable internal interface VIP on the gateway. You can then set that URL in the UserCheck settings.