Firewall & Security Management

Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT

What's New in Check Point SASE

Watch Now!

The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses

Watch Now!

AI Security Masters
Implementing the AI Security Trifecta

Watch Now!

CheckMates Go:
Half is Not Enough

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Participant

43099

Threat Prevention is Not Block DNS Reputation Which Policy Are Block

43099

inside

Collaborator

42458

Problem with VPN traffic and Nated IPs

42458

inside

Explorer

42400

DNS Malware trap - DNS servers

42400

inside

Employee Alumnus

42300

New Splunk App for Check Point Logs

42300

inside

Admin

42299

Blocking pornography without https inspection

41999

Solved

inside

Collaborator

41999

URL and Application blade issues

41899

inside

MVP Gold

41799

R80.20 fresh install fails on Vmware ESXI

41799

inside

Not applicable

41799

Log Exporter CEF Field Mappings

41799

Solved

inside

Contributor

41599

Log_indexer Performance Issues because of core limitation

41599

Solved

inside

Explorer

41598

GAiA WebUI not working with latest Chrome browser

41202

inside

Participant

41200

How to identify transceiver / SFP+ adapter?

41000

inside

Participant

40899

How to configure Check Point as WAF?

40899

Solved

inside

Participant

40899

Viewing and Resetting VPN tunnels in R80

40899

inside

Advisor

40699

Efficient way to disable several hundred IPS protections that do apply to our environment

40598

Solved

inside

Participant

40300

Difference between HTTPS Inspection and Categorize HTTPS websites settings

40300

Solved

inside

Employee

40299

Review the changes in your current session in SmartConsole

40299

Solved

inside

MVP Diamond

40283

CyberArk - PSM Connection Component - SmartConsole + Gaia

40000

Solved

inside

MVP Diamond

40000

O365 access filtering in R80.10

40000

Solved

inside

Contributor

39899

How to check interfaces operation failure(down) log with GUI

39899

Solved

inside

Participant

39799

How to disable Gaia access from the Internet

39799

inside

Employee

39599

A simple way to keep your Security Gateway up-to-date – we want to hear what you think!

39599

inside

Contributor

39499

Halting RAD requests handling / RAD reached maximum allowed concurrent request

39499

inside

Participant

39499

Message seen on /var/log/messages - "simi_reorder_enqueue_packet"

39499

inside

Advisor

39400

Check Point Security Gateway freezes, crashes, or reboots randomly, core dump files are not created

39400

inside

Contributor

39400

Checkpoint gateway Memory Usage

39400

inside

Participant

39299

Unable to install R80.10 on VMware workstation

39299

inside

MVP Gold CHKP

39199

sk83520 how to check connectivity to CP

39199

inside

Contributor

39099

Resizing Disk After Increasing Disk Size in VMware on Gaia

38902

Solved

inside

MVP Silver

38800

Intermittent VOIP One Way Audio

38399

Solved

inside

Advisor

38399

policy migration from standalone to distributed

38399

Solved

inside

Participant

38299

Can't connect to management server via SmartDashboard

37900

inside

MVP Diamond

37899

FQDN and Domain Objects in R80.10 when DNS server fail?

37800

Solved

inside

Advisor

37605

Questions on upgrading from R80.10 to R80.40 or R81

37605

Solved

inside

Contributor

37600

rtmd Demon causing high utilization (99% CPU)

37600

inside

Participant

37500

Move security gateways from different separated sms to an existing remote mds

37500

inside

Explorer

37499

IKE failure - no response from peer

37499

inside

Advisor

37399

'Invalid segment retransmission. Packet dropped.'

37200

inside

Contributor

37101

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

37101

inside

Champion

36899

Command to show the number of permitted cores

36799

inside

Advisor

36599

Anti-spoofing; network defined by routes with overlapping spaces

36599

Solved

inside

Participant

36299

How to know which cluster member is active?

36299

Solved

inside

Contributor

36199

FQDN in R80 Policy Access rule

36199

Solved

inside

Participant

35999

Disable "Local interface address spoofing"

35999

inside

MVP Gold CHKP

35699

ICAP Server on Sandblast Appliance (TEX)

35600

Solved

inside

Contributor

35600

Having problem with my clusterXL: Error message "HA module not started" after cphaprob stat.

35600

inside

Participant

35599

ClusterXL active/standby interchange command?

35599

inside

Collaborator

35599

MUH Identity Awareness Agent on Citrix randomly disconnects

35599

Solved

inside

Explorer

35399

tcpdump for site to site vpn traffic

35399

inside

Advisor

35299

Connection with 'xxxxx' is lost

35299

inside

Participant

35299

Allow file download and block file upload with wetransfer

35299

Solved

inside

Contributor

35200

Check SIC status without SmartConsole on Management

35200

Solved

inside

Advisor

35199

SmartLog only look back 14 days - how to reindex 90 days back?

35199

Solved

inside

Participant

34899

IPSec VPN Site to Site_Checkpoint send wrong Proxy-ID in proposal phase 2

34899

inside

Explorer

34799

IPSec VPN tunnel stuck at phase 1 ESP traffic dropped

34799

inside

Employee Alumnus

34700

viewing LOG - filter on NAT rule #

34700

inside

Contributor

34599

Expired Accounts view in R80.10 SmartConsole

34500

Solved

inside

MVP Diamond

34500

Export of rules with zero hits in dashboard

34500

Solved

inside

Contributor

34299

High CPU usage on management server [r81.10]

34200

inside

Advisor

34099

Troubleshooting policy installation

34099

inside

MVP Silver

33999

SmartConsole object problem on Windows 1903

33801

inside

Contributor

33800

Security Management and Gateway Same Host?

33800

inside

Participant

33799

HowTo Set Up Certificate Based VPNs with Check Point Appliances – R80.x edition

33799

Solved

inside

Participant

33798

SmartConsole: Multiple ReadWrite sessions for same administrator

33699

Solved

inside

Participant

33698

Troubleshooting dropped packets in Checkpoint using zdebug

33698

inside

Explorer

33600

PBR configuration is missing on Audit log

33600

Solved

inside

Advisor

33599

VPN Check Point - Palo Alto issue

33399

Solved

inside

Contributor

33200

Custom view for getting Remote Access User Stats

33200

inside

MVP Silver

33200

Remote Access VPN Authentication Failure

33200

inside

Participant

33199

RSA secure ID authentication for checkpoint gateways and Management

33199

Solved

inside

Advisor

33099

Virtual Standby member cannot reach internal DNS or Internet

33099

Solved

inside

Explorer

33099

Identity Awareness using Azure AD

33099

Solved

inside

Advisor

33099

R80.20: Administrators cannot log into Web Smartview GUI

33099

inside

Not applicable

33000

Unified Policy Column-based Rule Matching

33000

Solved

inside

Participant

33000

Blocking list of domain names (FQDN) with R80.10

33000

Solved

inside

MVP Gold

32899

AD-query failed with Microsoft Windows Server 2022

32899

inside

Employee Alumnus

32899

Updatable SmartConsole Early Availability

32899

inside

Participant

32799

ISP Redundancy - 2 default route pointing to different ISP

32799

Solved

inside

Champion

32700

Behavior of the subscription blade policies after expiration

32700

Solved

inside

Participant

32698

SMS Server R80.10 Extremely Slow and Cannot login

32698

inside

Contributor

32593

How to block traffic coming from known malicious IP addresses R81.10

32593

inside

Employee

32499

UserCheck Block Page Times Out

32400

Solved

inside

Advisor

32200

Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

32200

Solved

inside

MVP Diamond

32198

Get SKU, MAC, and Serial Number of Appliance thru CLI

31999

inside

Participant

31999

Checkpoint endpoint VPN with Microsoft 2-Factor Authentication.

31999

inside

Contributor

31999

How can I avoid "Host Port" scan?

31999

inside

Explorer

31999

Policy installation failed: TCP connectivity failure port 18191

31999

Solved

inside

MVP Gold

31899

SmartConsole AD Authentication

31899

Solved

inside

MVP Gold CHKP

31799

R77.30 VSX appliance upgrade to R80.10

31799

Solved

inside

Advisor

31799

IPSec VPN tunnel with Fortinet

31799

Solved

inside

Explorer

31699

Checkpoint Management Log Size Problem

31699

Solved

inside

Contributor

31699

Has SmartView Tracker been eliminated?

31699

Solved

inside

Champion

31599

Connect Smart-1 Cloud to local Active Directory

31500

Solved

inside

Participant

31499

Change Standby Member to Active Member

31499

inside

Explorer

31400

First packet isn't Syn; tcp_flags: ACK

31400

inside

Advisor

31299

Exporting Check Point logs over syslog (LogExporter) with Log Server (CP)

31299

inside

Participant

31199

How to Remove an Interface from Checkpoint Firewall

31199

Solved

inside

MVP Silver

31199

Check Point Application Control and URL filtering custom applications not behaving like expected

31199

Solved

inside

Advisor

31100

Gaia build number list including HFAs - does it exist?

31100

Solved

inside

Advisor

31099

How to create a custom application with custom services?

31099

Solved

inside

MVP Platinum

1026

Security Group Tag from Cisco ISE not assigned to Access Role

1026

inside

Participant

291

Creating a report based on anti-spoofing drops

291

Solved

inside

Employee

241

MLM Server Virtual Machine Disk Volume Shrink?

241

inside

MVP Diamond

1085

CVE-2026-16232: Exploração Ativa Exige Remediação Imediata do Plano de Gerenciamento

1085

Solved

inside

Advisor

276

IPsec VPN Certificate-Based Authentication Failed – Authentication Failed

318

inside

Explorer

214

SMS migration and IP change on VMware R82.10

214

inside

Contributor

206

ldap communication has stop to work

230

Solved

inside

MVP Gold

2095

MEP still active after disable

435

inside

Explorer

5988

ABR (Application Based Routing): "PBR_" rules don't show up on firewalls

5988

inside

Explorer

224

How to unload a specific policy in smart1 cloud to a specific site?

224

inside

MVP Gold

1141

ElasticXL switch configuration for data interfaces ?

1141

inside

MVP Gold CHKP

228

Why do we need Zero Trust today more then ever before?

228

inside

Explorer

792

Some sites not working with HTTPS Inspection enabled

792

Solved

inside

Collaborator

307

ElasticXL R82.x Licensing Clarification – Single License or Per Appliance?

307

Solved

inside

Participant

4525

VPN with Two GWs Managed by One SMS - One GW is in AWS

4525

Solved

inside

Explorer

194

Migrate secondary management to new hardware

194

inside

Advisor

166

Recommended way to update Firewall 3920

663

inside

Explorer

151

Problem with Capsule on 3900 R82.10 Take 24

151

Solved

inside

Explorer

3035

Infinity Cloud Rest API Container loop

3035

inside

Contributor

731

ClusterXL R81.20 SmartConsole display different cluster configuration

443

inside

MVP Diamond

4382

Upgrade Software - Check Point How-To

4382

Solved

inside

MVP Diamond

7507

Converting Tool - ClusterXL to ElasticXL

7507

inside

Explorer

264

Certificate cannot be validated. Reason: Could not retrieve CRL." with External CA

264

Solved

inside

Collaborator

628

IPSec Tunnel (Center - Sattelite) not comming up anymore

628

inside

Explorer

194

Interoperability Device Object for Dynamic IP

194

inside

Contributor

6629

R82 - vpn accel is deprecated?

492

inside

Advisor

5335

Policy Push Time. Accelerated Policy Install. Global Objects

5335

Solved

inside

Contributor

5621

Site-2-Site VPN with Cisco Cloud (Cisco Secure Acccess)

3409

inside

Contributor

10270

IPS - HTTP parsing error detected

10270

inside

MVP Silver

2072

Check Point Firewall: Policy-Based Routing (PBR) | Dual ISP Configuration Guide

2072

Solved

inside

Collaborator

407

R81.20 JHFA update from 119 to 146, gateway looses connectivity during update at 14%

407

inside

MVP Diamond

424

Policy Auditor: Turning Access Control Policy Review into Intent-Based Segmentation Validation

424

inside

Explorer

189

File sdconf.rec in VSX Gateway Cluster

613

Solved

inside

Collaborator

403

Is there any API or CLI command to automate External CA (.p12) certificate replacement on Gateways?

inside

MVP Diamond

1635

Web SmartConsole - Global Properties still not available

516

inside

Collaborator

404

Management Interface Setup with PBR

404

inside

Advisor

15614

Traffic dropped with message information: "Rulebase Internal Error"

15614

inside

MVP Diamond

18851

R82 DynamicID via Email (SMTP) – Configuration Tips and Key Considerations

1170

inside

MVP Diamond

963

IPS Performance in R82/R82+: Why SND, CoreXL, SecureXL, PXL, PSL and Multi-Queue Matter More Than “I

963

Solved

inside

Participant

19452

Configure Checkpoint as NTP server

19452

inside

Advisor

694

Office Mode traffic hitting Cleanup Rule despite correct Identity Awareness

694

inside

MVP Diamond

677

[TIP] Check Point Migration Backup: Collecting Relevant Files Before a Clean Install

677

inside

MVP Diamond

626

[INFO] Why Can Gaia Configure LOM If LOM Is Supposed to Be Independent?

626

inside

Contributor

275

3900 series with R82.10:jumbo hotfix Take19 does not install properly and breaks firewall

1224

Solved

inside

Employee

175957

112

CPViewer - visualize your cpview/cpinfo files in 5 minutes

175957

112

inside

Collaborator

426

Can a Temporary SMS VM Be Migrated to a Production Smart-1 700S?

426

Solved

inside

Collaborator

916

MVC (Multi Version Cluster) state reset (off) after upgrade

916

Solved

inside

Contributor

3658

I have a question about Cluster XL error messages

3658

inside

Contributor

1267

An error occurred while adding a user to the Access-role.

1267

inside

Contributor

680

SmartConsole has experienced a serious problem and needs to relaunch.

680

inside

Advisor

410

Question About Anti-Spoofing Configuration

410

Solved

inside

Participant

554

Upgrade Management HA while migrating to new server

554

inside

Contributor

292

How to force VPN users to change password on next login

292

Solved

inside

MVP Diamond

1011307

473

322

R8x Ports Used for Communication by Various Check Point Modules (new version 2.2 - R82.10)

1011307

473

322

inside

Contributor

255

SmartCenter on NUTANIX – Increase Disk Space

255

inside

Contributor

259

Migration of R81.20 SmartCenter and SmartEvent ESX VMs to NUTANIX

259

inside

Admin

4016

What's New in R82.10 June 2026: Video, Slides, and Q&A

4016

Solved

inside

Participant

1684

Log Exporter Sends Only a Few Syslog Blade Events to FortiAnalyzer and Exported Messages differ

1684

inside

Contributor

289

Sessions dropping : fw_handle_old_conn_recovery on long-lived UDP flows

289

Solved

inside

Advisor

2452

Repeated debug error messages in fwk.elg

2452

Solved

inside

Explorer

1393

Confused in VSX CoreXL instance configuration

1393

Solved

inside

Collaborator

575

Threat Prevention Custom Policy

575

inside

Advisor

450

Threat Extraction in ElasticXL / Maestro – handling of original files?

257

Solved

inside

Contributor

3333

it is not possible to directly request information about groups and Active Directory

1212

Solved

inside

Contributor

404

Changing ElasticXL Distribution Mode

404

Solved

inside

MVP Diamond

40073

Mac standalone Endpoint VPN - Negotiation with site failed

758

inside

Collaborator

333

NMSAAA9999 Invalid NAS IP address

333

inside

MVP Silver

365

About "CPNotEnoughDataForRuleMatch" and connection reset

10477

inside

MVP Diamond

1016

Policy Install Failed? Start Thinking in Processes, Not Only in Rules

1016

Solved

inside

Contributor

768

sk170857 - How to identify potential segmentations affected by VPN EDPC?

768

Solved

inside

MVP Silver

1337

Python reverse shell communicating over ports 80 or 443

565

inside

Participant

22944

Restrict VPN access by GEO location

22944

inside

Collaborator

1290

ElasticXL with VSNext Deployment – Secondary Appliance Initial Configuration Clarification

1290

inside

Collaborator

317

VoIP Traffic Application Control Objects vs Port Objects

317

Solved

inside

Participant

984

Error "You cannot activate both the Firewall and Endpoint Policy Management on the same sever"

984

Solved

inside

Collaborator

485

R82: What is the need of different SSL certificates by gateway

485

Solved

inside

Collaborator

609

Apple MacOS Rosetta 2 EOL - Identity Agent for Apple Silicon

2237

Solved

inside

Participant

484

Removing member from ClusterXL

484

inside

MVP Gold

1388

Site to Site VPN fails after installing the new hotfix for VPN auth bybass

840

inside

Participant

401

Is SG3600 suitable for upgrading to R82 ?

645

inside

Explorer

254

chekpoint and zscaler ipsec issue

254

Solved

inside

Participant

325

ElasticXL VSNext - Where Are VSwitches Created and Managed?

299

Solved

inside

Contributor

3018

R82.10 smartconsole: Evaluation License Expired

3018

inside

MVP Diamond

65560

HowTo - Creating an scpuser account on Gaia Clish

65560

inside

Explorer

225

Domain logserver locked for editing by fwm_user

225

inside

Contributor

7493

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

1539

Solved

inside

Participant

738

web_api_show_package.sh - Script stopped running due to severe error!

629

inside

Advisor

1861

Endpoint client - Confusing input prompts

1861

inside

Participant

6006

how to mount windows file share on gaia r80.10 ?

6006

inside

Collaborator

749

Wrong SmartConsole update package

749

inside

Collaborator

1587

root filesystem disk space and /run/podman/logs/events.log

1587

Solved

inside

Employee

8023

Harden Now: Preparing Check Point Gateways & Management for AI‑Driven Threats like Mythos

8023

inside

Contributor

493

CPSEMD low disk space - disk space left

493

inside

MVP Gold

393

VSX R82 Virtual Router creation fails: “The certificate is not valid”

649

inside

MVP Silver

1123

web site times out when going through firewall

1123

inside

Collaborator

368

MTA didn't send Non-Delevery-Report

368

inside

MVP Silver

386

Check Point Disk Troubleshooting - df and du Commands Explained

386

inside

Contributor

1508

R81.20 Take 127 to R82 T779 MDS HA Secondary upgrade fails: “Upgrade to this version is prohibited.

1508

inside

Collaborator

214

MTA TE: Cannot retrieve original password-protected PDF via UserCheck (Blocked by Policy)

214

Solved

inside

Collaborator

1124

SmartConsole Administrator external authentication

399

inside

Explorer

292

How to view the list of banned IPs in VPN SNX

292

inside

Contributor

451

[MANAGEMENT] - High Consumption

451

inside

Explorer

285

"Interface leads to DMZ" setting

575

Solved

inside

Collaborator

1454

Primary SMS upgrade from R81.10 to R82 fail

1454

inside

MVP Gold

756

The Scalable Platform Migration Tool - Refresh question

756

inside

MVP Diamond

4123

HTTPS Inspection Is Not “Just Decryption”: It Is a TLS Enforcement Pipeline

4123

inside

Admin

808

Identity Awareness Best Practices May 2026: Video and Slides

808

inside

Collaborator

484

VSNext on ElasticXL (R82+) with Shared External/Campus vSwitches and Internal Transit vSwitch

484

inside

MVP Gold

1000

List of CVE and half a solution

1000

inside

Advisor

1211

Post-Migration Issue: Lost HTTPS and External SSH Access to Cluster Member

1231

No messages.

Firewall & Security Management

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800/2000/2500), see the Spark Firewall space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 17 Sep 2026 @ 10:00 AM (CEST)

The Cloud Architects Series: Check Point Cloud Firewall Architectures - AWS, Azure & GCP

Virtual

Thu 17 Sep 2026 @ 05:00 PM (CEST)

Under the Hood: Unified Hybrid Mesh Management across AWS Firewalls, SASE and SD-WAN

Virtual

Thu 17 Sep 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Troubleshooting 101 for Check Point Firewalls

Virtual

Wed 23 Sep 2026 @ 10:00 AM (CEST)

Inside Check Point Spark R82.00.11 -EMEA

In-Person

Wed 23 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live Belgrade - AI Security Workshop

Virtual

Wed 23 Sep 2026 @ 05:00 PM (CEST)

Inside Check Point Spark R82.00.11 - AMER

Virtual

Thu 17 Sep 2026 @ 10:00 AM (CEST)

The Cloud Architects Series: Check Point Cloud Firewall Architectures - AWS, Azure & GCP

Virtual

Thu 17 Sep 2026 @ 05:00 PM (CEST)

Under the Hood: Unified Hybrid Mesh Management across AWS Firewalls, SASE and SD-WAN

Virtual

Thu 17 Sep 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Troubleshooting 101 for Check Point Firewalls

Virtual

Wed 23 Sep 2026 @ 10:00 AM (CEST)

Inside Check Point Spark R82.00.11 -EMEA

Virtual

Wed 23 Sep 2026 @ 05:00 PM (CEST)

Inside Check Point Spark R82.00.11 - AMER

Virtual

Mon 28 Sep 2026 @ 03:00 PM (CEST)

La nouvelle réalité des attaques DDoS: autonomie, échelle et avenir de la défense

In-Person

Wed 23 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live Belgrade - AI Security Workshop

In-Person

Wed 23 Sep 2026 @ 06:00 PM (EDT)

Santo Domingo: Workspace Security and SASE Live: Protección Total del Usuario Email, Endpoint y SASE

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

In-Person

Wed 21 Oct 2026 @ 09:00 AM (BST)

AI Security Workshop - Glasgow

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?