Firewall & Security Management

Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT

What's New in Check Point SASE

Watch Now!

The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses

Watch Now!

AI Security Masters
Implementing the AI Security Trifecta

Watch Now!

CheckMates Go:
Half is Not Enough

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Contributor

43099

How to export Gaia config from a firewall

43099

inside

Explorer

42199

DNS Malware trap - DNS servers

42199

inside

Admin

42101

New Splunk App for Check Point Logs

42089

Solved

inside

Collaborator

42000

Log Exporter CEF Field Mappings

41799

Solved

inside

Advisor

41796

Blocking pornography without https inspection

41796

Solved

inside

Advisor

41702

URL and Application blade issues

41702

inside

MVP Gold

41700

R80.20 fresh install fails on Vmware ESXI

41700

inside

Collaborator

41600

Problem with VPN traffic and Nated IPs

41600

Solved

inside

Collaborator

41499

Log_indexer Performance Issues because of core limitation

41399

inside

Participant

41100

GAiA WebUI not working with latest Chrome browser

41100

inside

Participant

40899

How to configure Check Point as WAF?

40899

Solved

inside

Participant

40899

Viewing and Resetting VPN tunnels in R80

40899

Solved

inside

Advisor

40799

How to identify transceiver / SFP+ adapter?

40799

inside

Advisor

40499

Efficient way to disable several hundred IPS protections that do apply to our environment

40404

Solved

inside

Employee

40199

Review the changes in your current session in SmartConsole

40199

Solved

inside

Participant

40198

Difference between HTTPS Inspection and Categorize HTTPS websites settings

40198

Solved

inside

Participant

40000

CyberArk - PSM Connection Component - SmartConsole + Gaia

39899

inside

MVP Gold CHKP

39899

O365 access filtering in R80.10

39899

Solved

inside

Contributor

39803

How to check interfaces operation failure(down) log with GUI

39803

Solved

inside

Participant

39597

How to disable Gaia access from the Internet

39597

inside

Employee

39400

A simple way to keep your Security Gateway up-to-date – we want to hear what you think!

39400

Solved

inside

MVP Diamond

39399

Halting RAD requests handling / RAD reached maximum allowed concurrent request

39299

inside

Advisor

39299

Check Point Security Gateway freezes, crashes, or reboots randomly, core dump files are not created

39299

inside

Participant

39299

Message seen on /var/log/messages - "simi_reorder_enqueue_packet"

39299

inside

Participant

39099

Unable to install R80.10 on VMware workstation

39099

inside

Contributor

39001

sk83520 how to check connectivity to CP

38999

inside

Contributor

38900

Checkpoint gateway Memory Usage

38900

Solved

inside

Participant

38799

Resizing Disk After Increasing Disk Size in VMware on Gaia

38799

Solved

inside

MVP Silver

38698

policy migration from standalone to distributed

38399

Solved

inside

Participant

38299

Intermittent VOIP One Way Audio

38099

inside

Explorer

38099

Can't connect to management server via SmartDashboard

37900

Solved

inside

Collaborator

37900

FQDN and Domain Objects in R80.10 when DNS server fail?

37701

inside

Participant

37500

Move security gateways from different separated sms to an existing remote mds

37500

inside

Explorer

37499

IKE failure - no response from peer

37499

Solved

inside

Advisor

37499

Questions on upgrading from R80.10 to R80.40 or R81

37499

Solved

inside

Contributor

37400

rtmd Demon causing high utilization (99% CPU)

37400

inside

MVP Diamond

37399

'Invalid segment retransmission. Packet dropped.'

37200

inside

Advisor

37198

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

36895

Solved

inside

MVP Diamond

36699

Command to show the number of permitted cores

36699

inside

Advisor

36499

Anti-spoofing; network defined by routes with overlapping spaces

36499

Solved

inside

Participant

36299

How to know which cluster member is active?

36299

Solved

inside

Employee Alumnus

36199

FQDN in R80 Policy Access rule

36199

Solved

inside

Contributor

35999

Disable "Local interface address spoofing"

35899

inside

Collaborator

35501

MUH Identity Awareness Agent on Citrix randomly disconnects

35501

inside

MVP Gold CHKP

35499

ClusterXL active/standby interchange command?

35499

Solved

inside

Contributor

35498

Having problem with my clusterXL: Error message "HA module not started" after cphaprob stat.

35498

Solved

inside

Employee Alumnus

35400

ICAP Server on Sandblast Appliance (TEX)

35400

Solved

inside

Explorer

35300

tcpdump for site to site vpn traffic

35300

Solved

inside

Contributor

35200

Check SIC status without SmartConsole on Management

35200

inside

Advisor

35198

Connection with 'xxxxx' is lost

35198

Solved

inside

Advisor

35099

SmartLog only look back 14 days - how to reindex 90 days back?

35099

inside

Participant

35000

Allow file download and block file upload with wetransfer

35000

Solved

inside

Participant

34899

IPSec VPN Site to Site_Checkpoint send wrong Proxy-ID in proposal phase 2

34899

inside

Explorer

34700

IPSec VPN tunnel stuck at phase 1 ESP traffic dropped

34700

Solved

inside

Contributor

34700

viewing LOG - filter on NAT rule #

34399

Solved

inside

MVP Diamond

34300

Export of rules with zero hits in dashboard

34300

Solved

inside

Collaborator

34299

Expired Accounts view in R80.10 SmartConsole

34299

Solved

inside

Contributor

34199

Troubleshooting policy installation

34099

Solved

inside

Explorer

34000

High CPU usage on management server [r81.10]

34000

inside

Participant

33999

Security Management and Gateway Same Host?

33699

inside

Participant

33699

HowTo Set Up Certificate Based VPNs with Check Point Appliances – R80.x edition

33699

Solved

inside

Contributor

33699

SmartConsole: Multiple ReadWrite sessions for same administrator

33699

Solved

inside

Participant

33699

Troubleshooting dropped packets in Checkpoint using zdebug

33500

Solved

inside

Contributor

33499

PBR configuration is missing on Audit log

33499

Solved

inside

Contributor

33399

SmartConsole object problem on Windows 1903

33399

Solved

inside

Advisor

33299

VPN Check Point - Palo Alto issue

33199

Solved

inside

Contributor

33100

Custom view for getting Remote Access User Stats

33100

inside

MVP Silver

33100

RSA secure ID authentication for checkpoint gateways and Management

33099

Solved

inside

Advisor

33099

Remote Access VPN Authentication Failure

33099

Solved

inside

Advisor

33002

R80.20: Administrators cannot log into Web Smartview GUI

33002

inside

Not applicable

32900

Unified Policy Column-based Rule Matching

32900

Solved

inside

Explorer

32899

Identity Awareness using Azure AD

32899

Solved

inside

Advisor

32898

Virtual Standby member cannot reach internal DNS or Internet

32898

Solved

inside

Participant

32897

Blocking list of domain names (FQDN) with R80.10

32897

inside

Participant

32799

ISP Redundancy - 2 default route pointing to different ISP

32799

inside

Employee Alumnus

32799

Updatable SmartConsole Early Availability

32799

Solved

inside

MVP Gold

32700

AD-query failed with Microsoft Windows Server 2022

32700

Solved

inside

Participant

32698

SMS Server R80.10 Extremely Slow and Cannot login

32698

inside

Employee

32499

Behavior of the subscription blade policies after expiration

32498

inside

Participant

32400

UserCheck Block Page Times Out

32400

inside

Contributor

32400

How to block traffic coming from known malicious IP addresses R81.10

32400

Solved

inside

MVP Diamond

32198

Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

32100

Solved

inside

Collaborator

31999

Get SKU, MAC, and Serial Number of Appliance thru CLI

31999

inside

Contributor

31999

Checkpoint endpoint VPN with Microsoft 2-Factor Authentication.

31999

inside

Participant

31899

SmartConsole AD Authentication

31899

inside

Contributor

31899

How can I avoid "Host Port" scan?

31899

inside

Explorer

31700

Policy installation failed: TCP connectivity failure port 18191

31700

Solved

inside

MVP Gold CHKP

31699

R77.30 VSX appliance upgrade to R80.10

31699

Solved

inside

Contributor

31699

Has SmartView Tracker been eliminated?

31699

Solved

inside

Explorer

31599

Checkpoint Management Log Size Problem

31599

Solved

inside

Contributor

31599

IPSec VPN tunnel with Fortinet

31501

Solved

inside

Participant

31499

Change Standby Member to Active Member

31399

inside

Advisor

31299

Exporting Check Point logs over syslog (LogExporter) with Log Server (CP)

31299

Solved

inside

Participant

31200

Connect Smart-1 Cloud to local Active Directory

31200

inside

Participant

31199

How to Remove an Interface from Checkpoint Firewall

31199

inside

Explorer

31199

First packet isn't Syn; tcp_flags: ACK

31199

Solved

inside

Advisor

31100

Gaia build number list including HFAs - does it exist?

31100

Solved

inside

Participant

30999

Adding an interface in ClusterXL High Availability

30999

Solved

inside

Contributor

30999

ABR (Application Based Routing): "PBR_" rules don't show up on firewalls

5923

inside

Explorer

197

How to unload a specific policy in smart1 cloud to a specific site?

197

inside

MVP Gold

1121

ElasticXL switch configuration for data interfaces ?

1121

inside

MVP Gold CHKP

211

Why do we need Zero Trust today more then ever before?

211

inside

Explorer

759

Some sites not working with HTTPS Inspection enabled

759

Solved

inside

Collaborator

277

ElasticXL R82.x Licensing Clarification – Single License or Per Appliance?

277

Solved

inside

Participant

4499

VPN with Two GWs Managed by One SMS - One GW is in AWS

4499

Solved

inside

Explorer

174

Migrate secondary management to new hardware

174

inside

Advisor

155

Recommended way to update Firewall 3920

566

inside

Explorer

141

Problem with Capsule on 3900 R82.10 Take 24

141

Solved

inside

Explorer

2986

Infinity Cloud Rest API Container loop

2986

inside

Contributor

674

ClusterXL R81.20 SmartConsole display different cluster configuration

399

inside

MVP Diamond

4231

Upgrade Software - Check Point How-To

4231

Solved

inside

MVP Diamond

7274

Converting Tool - ClusterXL to ElasticXL

7274

inside

Explorer

243

Certificate cannot be validated. Reason: Could not retrieve CRL." with External CA

243

Solved

inside

Collaborator

570

IPSec Tunnel (Center - Sattelite) not comming up anymore

570

inside

Explorer

177

Interoperability Device Object for Dynamic IP

177

inside

Contributor

6561

R82 - vpn accel is deprecated?

443

inside

Advisor

5162

Policy Push Time. Accelerated Policy Install. Global Objects

5162

Solved

inside

Contributor

5523

Site-2-Site VPN with Cisco Cloud (Cisco Secure Acccess)

3292

inside

Contributor

10147

IPS - HTTP parsing error detected

10147

inside

MVP Silver

2018

Check Point Firewall: Policy-Based Routing (PBR) | Dual ISP Configuration Guide

2018

Solved

inside

Collaborator

376

R81.20 JHFA update from 119 to 146, gateway looses connectivity during update at 14%

376

inside

MVP Diamond

395

Policy Auditor: Turning Access Control Policy Review into Intent-Based Segmentation Validation

395

inside

Explorer

166

File sdconf.rec in VSX Gateway Cluster

554

Solved

inside

Collaborator

357

Is there any API or CLI command to automate External CA (.p12) certificate replacement on Gateways?

inside

MVP Diamond

1620

Web SmartConsole - Global Properties still not available

498

inside

Collaborator

373

Management Interface Setup with PBR

373

inside

Advisor

15524

Traffic dropped with message information: "Rulebase Internal Error"

15524

inside

MVP Diamond

18590

R82 DynamicID via Email (SMTP) – Configuration Tips and Key Considerations

1128

inside

MVP Diamond

931

IPS Performance in R82/R82+: Why SND, CoreXL, SecureXL, PXL, PSL and Multi-Queue Matter More Than “I

931

Solved

inside

Participant

19345

Configure Checkpoint as NTP server

19345

inside

Advisor

652

Office Mode traffic hitting Cleanup Rule despite correct Identity Awareness

652

inside

MVP Diamond

654

[TIP] Check Point Migration Backup: Collecting Relevant Files Before a Clean Install

654

inside

MVP Diamond

591

[INFO] Why Can Gaia Configure LOM If LOM Is Supposed to Be Independent?

591

inside

Contributor

264

3900 series with R82.10:jumbo hotfix Take19 does not install properly and breaks firewall

1138

Solved

inside

Employee

174991

112

CPViewer - visualize your cpview/cpinfo files in 5 minutes

174991

112

inside

Collaborator

406

Can a Temporary SMS VM Be Migrated to a Production Smart-1 700S?

406

Solved

inside

Collaborator

858

MVC (Multi Version Cluster) state reset (off) after upgrade

858

Solved

inside

Contributor

3598

I have a question about Cluster XL error messages

3598

inside

Contributor

1253

An error occurred while adding a user to the Access-role.

1253

inside

Contributor

655

SmartConsole has experienced a serious problem and needs to relaunch.

655

inside

Advisor

388

Question About Anti-Spoofing Configuration

388

Solved

inside

Participant

534

Upgrade Management HA while migrating to new server

534

inside

Contributor

275

How to force VPN users to change password on next login

275

Solved

inside

MVP Diamond

1009379

473

322

R8x Ports Used for Communication by Various Check Point Modules (new version 2.2 - R82.10)

1009379

473

322

inside

Contributor

236

SmartCenter on NUTANIX – Increase Disk Space

236

inside

Contributor

246

Migration of R81.20 SmartCenter and SmartEvent ESX VMs to NUTANIX

246

inside

Admin

3935

What's New in R82.10 June 2026: Video, Slides, and Q&A

3935

Solved

inside

Participant

1538

Log Exporter Sends Only a Few Syslog Blade Events to FortiAnalyzer and Exported Messages differ

1538

inside

Contributor

271

Sessions dropping : fw_handle_old_conn_recovery on long-lived UDP flows

271

Solved

inside

Advisor

2424

Repeated debug error messages in fwk.elg

2424

Solved

inside

Explorer

1308

Confused in VSX CoreXL instance configuration

1308

Solved

inside

Collaborator

525

Threat Prevention Custom Policy

525

inside

Advisor

415

Threat Extraction in ElasticXL / Maestro – handling of original files?

249

Solved

inside

Contributor

3285

it is not possible to directly request information about groups and Active Directory

1113

Solved

inside

Contributor

384

Changing ElasticXL Distribution Mode

384

Solved

inside

MVP Diamond

39494

Mac standalone Endpoint VPN - Negotiation with site failed

720

inside

Collaborator

308

NMSAAA9999 Invalid NAS IP address

308

inside

MVP Silver

346

About "CPNotEnoughDataForRuleMatch" and connection reset

10288

inside

MVP Diamond

999

Policy Install Failed? Start Thinking in Processes, Not Only in Rules

999

Solved

inside

Contributor

708

sk170857 - How to identify potential segmentations affected by VPN EDPC?

708

Solved

inside

MVP Silver

1276

Python reverse shell communicating over ports 80 or 443

538

inside

Participant

22737

Restrict VPN access by GEO location

22737

inside

Collaborator

1231

ElasticXL with VSNext Deployment – Secondary Appliance Initial Configuration Clarification

1231

inside

Collaborator

305

VoIP Traffic Application Control Objects vs Port Objects

305

Solved

inside

Participant

925

Error "You cannot activate both the Firewall and Endpoint Policy Management on the same sever"

925

Solved

inside

Collaborator

469

R82: What is the need of different SSL certificates by gateway

469

Solved

inside

Collaborator

573

Apple MacOS Rosetta 2 EOL - Identity Agent for Apple Silicon

2188

Solved

inside

Participant

460

Removing member from ClusterXL

460

inside

MVP Gold

1364

Site to Site VPN fails after installing the new hotfix for VPN auth bybass

809

inside

Participant

358

Is SG3600 suitable for upgrading to R82 ?

615

inside

Explorer

243

chekpoint and zscaler ipsec issue

243

Solved

inside

Participant

309

ElasticXL VSNext - Where Are VSwitches Created and Managed?

282

Solved

inside

Contributor

2916

R82.10 smartconsole: Evaluation License Expired

2916

inside

MVP Diamond

65477

HowTo - Creating an scpuser account on Gaia Clish

65477

inside

Explorer

210

Domain logserver locked for editing by fwm_user

210

inside

Contributor

7313

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

1496

Solved

inside

Participant

711

web_api_show_package.sh - Script stopped running due to severe error!

582

inside

Advisor

1802

Endpoint client - Confusing input prompts

1802

inside

Participant

5970

how to mount windows file share on gaia r80.10 ?

5970

inside

Collaborator

716

Wrong SmartConsole update package

716

inside

Collaborator

1540

root filesystem disk space and /run/podman/logs/events.log

1540

Solved

inside

Employee

7964

Harden Now: Preparing Check Point Gateways & Management for AI‑Driven Threats like Mythos

7964

inside

Contributor

471

CPSEMD low disk space - disk space left

471

inside

MVP Gold

381

VSX R82 Virtual Router creation fails: “The certificate is not valid”

615

inside

MVP Silver

1047

web site times out when going through firewall

1047

inside

Collaborator

343

MTA didn't send Non-Delevery-Report

343

inside

MVP Silver

364

Check Point Disk Troubleshooting - df and du Commands Explained

364

inside

Contributor

1426

R81.20 Take 127 to R82 T779 MDS HA Secondary upgrade fails: “Upgrade to this version is prohibited.

1426

inside

Collaborator

204

MTA TE: Cannot retrieve original password-protected PDF via UserCheck (Blocked by Policy)

204

Solved

inside

Collaborator

1080

SmartConsole Administrator external authentication

376

inside

Explorer

281

How to view the list of banned IPs in VPN SNX

281

inside

Contributor

415

[MANAGEMENT] - High Consumption

415

inside

Explorer

267

"Interface leads to DMZ" setting

535

Solved

inside

Collaborator

1398

Primary SMS upgrade from R81.10 to R82 fail

1398

inside

MVP Gold

734

The Scalable Platform Migration Tool - Refresh question

734

inside

MVP Diamond

4047

HTTPS Inspection Is Not “Just Decryption”: It Is a TLS Enforcement Pipeline

4047

inside

Admin

795

Identity Awareness Best Practices May 2026: Video and Slides

795

inside

Collaborator

469

VSNext on ElasticXL (R82+) with Shared External/Campus vSwitches and Internal Transit vSwitch

469

inside

MVP Gold

952

List of CVE and half a solution

952

inside

Advisor

1125

Post-Migration Issue: Lost HTTPS and External SSH Access to Cluster Member

1173

inside

Participant

321

Compatible Smart Console version for Security Gateway with version 80.40

3325

Solved

inside

Explorer

355

Check Point 3900 – Using SFP+ ports (eth10/eth11) for Cluster Sync instead of default eth9

433

inside

Advisor

311

Large File download emulation responses

311

Solved

inside

Contributor

27445

I have a question about the LACP (8023AD) Bond interface.

27445

Solved

inside

Participant

373

Cluster XL Load sharing unicast mode Traffic forwarding interface

373

inside

Explorer

733

Performance Limitations of Virtual Switches in a VSX Environment

13675

Solved

inside

Collaborator

647

Why Standby SMS show No communication ?

647

No messages.

Firewall & Security Management

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800/2000/2500), see the Spark Firewall space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 15 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live BeLux - AI Security Workshop

In-Person

Tue 15 Sep 2026 @ 12:00 PM (MDT)

Lone Tree, CO: Workspace Security and Exposure Management

Virtual

Thu 17 Sep 2026 @ 10:00 AM (CEST)

The Cloud Architects Series: Check Point Cloud Firewall Architectures - AWS, Azure & GCP

Virtual

Thu 17 Sep 2026 @ 05:00 PM (CEST)

Under the Hood: Unified Hybrid Mesh Management across AWS Firewalls, SASE and SD-WAN

Virtual

Thu 17 Sep 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Troubleshooting 101 for Check Point Firewalls

Virtual

Wed 23 Sep 2026 @ 10:00 AM (CEST)

Inside Check Point Spark R82.00.11 -EMEA

Virtual

Thu 17 Sep 2026 @ 10:00 AM (CEST)

The Cloud Architects Series: Check Point Cloud Firewall Architectures - AWS, Azure & GCP

Virtual

Thu 17 Sep 2026 @ 05:00 PM (CEST)

Under the Hood: Unified Hybrid Mesh Management across AWS Firewalls, SASE and SD-WAN

Virtual

Thu 17 Sep 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Troubleshooting 101 for Check Point Firewalls

Virtual

Wed 23 Sep 2026 @ 10:00 AM (CEST)

Inside Check Point Spark R82.00.11 -EMEA

Virtual

Wed 23 Sep 2026 @ 05:00 PM (CEST)

Inside Check Point Spark R82.00.11 - AMER

Virtual

Mon 28 Sep 2026 @ 03:00 PM (CEST)

La nouvelle réalité des attaques DDoS: autonomie, échelle et avenir de la défense

In-Person

Tue 15 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live BeLux - AI Security Workshop

In-Person

Tue 15 Sep 2026 @ 12:00 PM (MDT)

Lone Tree, CO: Workspace Security and Exposure Management

In-Person

Wed 23 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live Belgrade - AI Security Workshop

In-Person

Wed 23 Sep 2026 @ 06:00 PM (EDT)

Santo Domingo: Workspace Security and SASE Live: Protección Total del Usuario Email, Endpoint y SASE

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

CheckMates Events

Are you a member of CheckMates?