Firewall & Security Management

Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT

AI Security Masters
LGTM: Bypassing an LLM Build Gate
When Prompt Injection Fails

What's New in Check Point SASE

Watch Now!

The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses

Watch Now!

CheckMates Go:
Half is Not Enough

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Participant

30899

Cisco port channel member is suspended

30899

Solved

inside

Participant

30799

Apple services not working with HTTPS inspection

30799

inside

Employee Alumnus

30701

Packet Mode, a new way of searching through your security policy in R80.10

30701

Solved

inside

Contributor

30700

WMI Permission denied - From this months Windows Update

30700

inside

Participant

30699

Commvault Installer :CPU Spikes on Checkpoint

30699

inside

Participant

30699

HTTPS inspection certificate question

30699

inside

Collaborator

30697

How to block some https sites?

30697

inside

Employee Alumnus

30694

AW keeps deleting Dameware Service

30694

inside

Explorer

30600

Best practices for inline layers

30600

inside

Contributor

30599

Terrible performance IPHTTPS - Checkpoint SG 15600

30599

inside

Explorer

30501

Policy installation in SmartDashboard fails with: Reason: TCP connectivity failure ( port = 18191 )( IP = X.X.X.X )[ error no. 10 ] Policy installation canceled.

30501

Solved

inside

Mentor

30500

IPS Analyzer Tool - are you running it?

30500

Solved

inside

Contributor

30500

How to add two IP in one interface

30500

Solved

inside

Advisor

30499

objects are locked but there no sessions can be takeover or published

30499

Solved

inside

MVP Silver

30400

White Paper - Integrating Custom IOC Feeds

30299

inside

Participant

30299

Legitimate traffic being blocked - R80.20

30299

inside

Champion

30299

Traffic is originating from a VS with the VSX internal communication address

30299

inside

Advisor

30299

What is the best approach to troubleshoot "slow connections"?

30299

Solved

inside

Contributor

30199

Smartview stuck as loading smartview.. in R80.20

30199

Solved

inside

Explorer

30099

R80 SmartReporter : how to do a report "rule base analysis"? is it possible ?

30099

inside

Collaborator

30098

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

30001

inside

Admin

30000

Check Point R80.20 Demo TechTalk and Q&A

30000

inside

Explorer

29999

How to Check Point upgrade R77.30 to R80

29999

Solved

inside

Mentor

29799

Where did all my IPS Protections go?

29799

Solved

inside

Collaborator

29700

LOM password reset on 5600 and 12400 appliances

29700

Solved

inside

Participant

29699

Difference between Session and Connection??

29699

inside

Employee

29600

Check Point’s First Management Feature Release is now available!

29600

inside

Mentor

29599

GUI client unable to access R80.10 management server behind firewall

29599

inside

Contributor

29599

New Install Security Management Server

29599

Solved

inside

Participant

29499

How to extend and enhance SmartConsole?

29400

Solved

inside

Contributor

29399

Blocking malicious IP addresses (sk103154) in VSX

29399

Solved

inside

Participant

29399

R80 and R80.10 SmartView Monitor VPN List

29399

inside

Advisor

29297

Anti-Bot & Anti-Virus, IPS update error on Standby Member

29201

inside

MVP Gold CHKP

29200

MDS backup too big and slow in R80.10

29200

inside

Advisor

29199

IN /VAR/LOG/messages keep getting Stopping CUL mode

29198

Solved

inside

Contributor

29100

Block WhatsApp Uploads/Downloads

29100

inside

Contributor

29099

Strange issue Checkpoint R77.30 site-to-site VPN with Cisco ASA

29099

inside

MVP Gold CHKP

29099

Difference between log files and log indexes

29000

inside

Champion

29000

VM specifications for the R80.20.M1

29000

inside

Explorer

29000

Home Lab Setup - How are you doing it?

28900

inside

MVP Gold

28899

HTTPS Certificate validation - SK159872

28799

inside

Employee

28703

Lightboard Series: R80.10 High Availability in Multi Domain Environments

28703

Solved

inside

Contributor

28699

How to simulate & virtualize Real life deployments

28699

Solved

inside

Contributor

28500

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

28500

inside

Explorer

28499

At least one DC is currently disconnected

28499

Solved

inside

Explorer

28499

vpn issue since R80.10 - Check Point to Fortigate (behind NAT router)

28299

Solved

inside

Advisor

28200

R81.20 TechTalk webinar - Network Feed Objects

28200

inside

Advisor

28199

Installation & Upgrade problems from R77.x to R80.x

28199

Solved

inside

Participant

28098

Encryption Failure: according to the policy the packet should not have been decrypted

28098

inside

Participant

27999

Maximum number of routing entries checkpoint fw

27999

Solved

inside

Employee

27999

Identity Awareness - Could not connect to AD server

27999

Solved

inside

Participant

27999

CPview and Top-connections in R80.20

27999

Solved

inside

Contributor

27999

I have a question about the LACP (8023AD) Bond interface.

27999

inside

Advisor

27900

Identity Collector: ISE and AD continually over-writing each other on the PDP

27900

inside

Collaborator

27900

Firewall HA status (health check)

27900

Solved

inside

Employee Alumnus

27898

How to export all result for the SmartLog query shows

27898

Solved

inside

Collaborator

27800

Updatable objects - no longer available

27800

inside

Advisor

27800

Block traffic coming from known malicious IP addresses

27800

inside

Explorer

27800

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

27800

inside

Participant

27700

How to monitor bandwidth limit for application control

27699

Solved

inside

Advisor

27699

how to filter traffic log by using CLI ?

27599

Solved

inside

Contributor

27599

Service Object - Match for Any

27502

inside

Contributor

27500

Identity Collector Not Collecting dot1x sessions from Cisco ISE

27500

Solved

inside

Explorer

27499

Trying to add hosts in mgmt_cli using csv file

27499

inside

Contributor

27499

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

27499

Solved

inside

MVP Diamond

27400

Searching Network Objects in R80.xx is crippled

27399

Solved

inside

Participant

27399

How to display unsaved changes in R80

27399

Solved

inside

Advisor

27300

How to monitor virtual systems on VSX?

27300

Solved

inside

Contributor

27299

NAT Loopback configuration problem in R80.10

27299

inside

Collaborator

27299

Default route on Standby Member not showing

27202

Solved

inside

Contributor

27200

Not substituted certificate in browser Https Inspection

27200

inside

Collaborator

27199

Windows Update Services with HTTPS inspection enabled

27199

inside

Explorer

27001

TCP Packet out of state, First Packet is not syn

27001

Solved

inside

MVP Diamond

26999

MDS Upgrade failing from R80.10 to R80.30 (solved)

26999

inside

Collaborator

26999

Upgrading Provider-1 MDM from R77.30 to R80.10

26999

Solved

inside

Contributor

26999

VPN problems - Clear text packet should be encrypted

26999

Solved

inside

Contributor

26900

Need CLI Command to see Interfaces and Associated IP Information

26900

Solved

inside

Contributor

26899

R80.20 HTTPS Inspection Bypass for Office365

26899

Solved

inside

Contributor

26899

cphaprob status showing down cause by routed

26899

inside

Contributor

26798

Subinterface down, results in failover

26700

inside

Explorer

26700

Installing VSX on on VMware ESXi

26700

Solved

inside

Contributor

26699

Threat Prevention policies after R77.30 to R80.10 migration. Is it correct?

26699

Solved

inside

Contributor

26699

Is there SNI support for inbound HTTPS inspection in R80.20?

26699

inside

Collaborator

26699

Maintenance actions that should be performed by admins

26699

Solved

inside

Advisor

26699

SmartConsole Rule Logs - Display Issue

26699

Solved

inside

Contributor

26694

Checkpoint R81.20 Logging Issue

26694

Solved

inside

Participant

26600

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

26600

inside

Advisor

26599

Cipher Configuration Tool (CCT)

26599

Solved

inside

Contributor

26500

Wrong peer gateway for decrypted packet (VPN Error code 01)

26500

inside

Advisor

26500

Why CP drops RST-ACK packets from client?

26500

inside

Participant

26499

Allow an encrypted communication channel between servers

26499

Solved

inside

Contributor

26488

VPN community routing not working

26488

Solved

inside

Advisor

26400

Error: At least one DC is currently disconnected

26400

inside

Collaborator

26399

HTTPS Inspection and Office 365 - Anyone got it playing nicely?

26300

Solved

inside

Contributor

26299

Restricting Remote Access by IPv4 Address

26299

inside

Contributor

26204

VSX cluster problem - are we alone?

26204

inside

Mentor

26200

What are IPS Staging Protections? And how do we clear them?

26200

inside

Contributor

26200

Notify when certificate expired

26099

inside

Collaborator

26099

How to count objects of a group

26099

Solved

inside

Contributor

25999

Usercheck Block Page is Insecure/Private

25999

inside

Advisor

25999

SecureXL DoS Rate Limiting (samp rules)

25899

inside

Advisor

25899

Identity sharing - how to change modes

25899

inside

Participant

25899

Solutions for backup/restoring individual MDS Domains.

25899

inside

Advisor

25899

Checkpoint to Azure Route based - guide

25899

inside

Collaborator

25899

Cluster XL - Failover due to Fullsync PNOTE ON

25800

inside

Contributor

25800

URL Filtering Troubleshooting Help

25800

Solved

inside

Contributor

25699

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

25699

Solved

inside

Collaborator

25699

URL Filtering Pornography Category not Working - Custom Application Works

25699

inside

Admin

25602

How do I verify Threat Emulation is working?

25602

inside

MVP Gold

25599

Is it advisable to change affinity in my scenario?

25599

Solved

inside

MVP Gold

25599

F5 BIG-IP ICAP and SandBlast (TEX)

25399

inside

Participant

25399

DHCP server configuration on GAIA R80.20

25399

inside

MVP Gold

25399

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

25300

inside

Contributor

25299

R80.10 SmartConsole Gateway & Servers Status

25299

inside

Participant

25299

Displaying transceiver properties

25299

Solved

inside

MVP Diamond CHKP

25200

Certificate and CRL validation fails from March 1, 2026

25200

Solved

inside

Contributor

25199

Error: 'IPS' is not responding

25199

inside

Collaborator

25199

Can't monitor secondary node over IPSec tunnel

25199

Solved

inside

Collaborator

25101

Gaia r80.10 tag vlan 1 and native vlan

25099

inside

Advisor

25000

BGP over VPN between Azure.docx

25000

Solved

inside

Collaborator

24904

Regular Expression in Application And URL Filtering

24900

inside

Contributor

24900

Site to Site Route Based VPN in Checkpoint

24900

inside

Admin

24899

TechTalk: Advanced Threat Prevention Best Practices

24899

inside

Participant

24899

Firemon - Check Point R80.10 API not working.

24899

inside

Contributor

24801

Bypass HTTPS Inspection for a custom URL

24801

inside

Participant

24800

'TCP packet out of state' drops

24800

inside

Contributor

24800

Searching for Address Spoofing Logs in R80

24599

inside

Contributor

24599

R81 - SmartUpdate Package Repository

24496

Solved

inside

Participant

24401

Block Only YouTube not Google Applications

24401

Solved

inside

Explorer

24400

IPS issue (R80.20) - cannot remove IPS blade from GW object

24400

inside

Advisor

24400

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

24400

inside

Explorer

24400

checkpoint Firewall audit for configuration change

24399

inside

Employee Alumnus

24399

How to debug Policy Installation Errors

24399

inside

Participant

24399

Low bandwidth when checkpoint is connected

24399

inside

Collaborator

24398

Identity Agent - Auto Detecting gateway

24307

Solved

inside

Contributor

24301

Custom HotFix Installation Procedure

24300

Solved

inside

Contributor

24300

VOIP with H323 over remote access VPN not working on R80.10

24300

inside

Collaborator

24300

High cpu utilization on RAD Process

24300

Solved

inside

Collaborator

24300

Exporting/Importing of Objects (R80.20)

24300

inside

Participant

24299

Password hashes, sha512 and the expert password

24299

inside

Participant

24299

Allow Office 365 services in Application Control & Url Filtering

24299

inside

Participant

24206

Checkpoint Advanced OSPF Capability

24206

inside

Contributor

24202

Lightboard Series: High Availability Architecture with R80.10

24200

inside

Advisor

24200

R80 SmartConsole Unable to connect to server

24200

Solved

inside

Participant

24199

Test bandwidth/speed from Gaia

24199

Solved

inside

Collaborator

24199

High Cpu utilization - Internet Speed drops to very low level

24199

inside

Collaborator

24100

Private to Private NAT on IPSEC VPN

24100

inside

Participant

24099

How ping works with a ClusterXL?

24099

Solved

inside

MVP Gold

24099

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

24099

inside

Contributor

24099

Finding main IP of any managed gateway

24099

inside

Participant

24000

TCP connection failure port=18191 [error no. 10]

23999

inside

Employee

23899

Log Exporter and Elasticsearch

23899

Solved

inside

Advisor

23899

Firewall Log Archive and Import in R80.10/ R77.30

23898

inside

Collaborator

23898

IPsec VPN [NATting intresting traffic] config help

23898

Solved

inside

Advisor

23799

Policy Install Failed - Problem With The Commit Function

23799

Solved

inside

Advisor

23799

Add Interfaces To VSX Bond Group?

23799

inside

Participant

23799

Document related to OPSEC configuration

23798

Solved

inside

Explorer

23798

Check Point Gateway CLI Uptime vs last reboot command output Not Matched (Doubt)

23798

inside

MVP Silver

23700

CPUSE Deployment Agent install script

23700

inside

MVP Gold CHKP

23700

VPN connection with a DAIP gateway

23700

Solved

inside

Contributor

23700

SSL Certificate Cannot Be Trusted (vulnerability)

23700

Solved

inside

Contributor

23699

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

23699

inside

Contributor

23699

Slow performance when Antivrus enabled.

23699

Solved

inside

Advisor

23699

Checkpoint Policy Installation Failed in Checkpoint Mangement Server

23600

Solved

inside

Collaborator

23599

Inject license failed, on some blade security gateway

23599

inside

Authority

23598

dynamic balancing, VSX and core affinity

23598

inside

Participant

23500

How to store logs? Focus on time range instead of disk space.

23500

inside

Explorer

23499

Newbie question - Exporting from logfiles from old dates

23499

Solved

inside

Contributor

23401

R81.10 VPN site-2-site to Cisco C8500-12X IOS XE (not Palo Alto as previously stated)

23401

inside

Participant

23401

Restrict VPN access by GEO location

23401

Solved

inside

Participant

23399

UDP Port Mapping? - Cisco Meraki VPN issue

23399

Solved

inside

Explorer

23399

Concurrent Connections - R80.40

23399

inside

Advisor

23398

CPview and DiagnosticsView TechTalk: Video, Q&A, and Slides

23301

inside

Not applicable

23299

Log Exporter LEEF Field Mappings

23299

inside

Collaborator

23299

Command Line Arguments to R80.10 SmartConsole.exe

23299

inside

Employee Alumnus

23200

Firewall allowing traffic without Access Policy

23200

inside

Contributor

23200

GAIA R80.20 Release Date And New Features?

23200

Solved

inside

Employee

23200

R80.40+ and GNAT. How to clear the NAT-table ?

23199

inside

MVP Diamond

23100

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

23100

Solved

inside

Participant

23100

Identity Collector - Cisco ISE SXP mappings support

23100

inside

Explorer

23100

MIGRATE R75 or R77.30 to R80.1 possible ?

23100

Solved

inside

Advisor

23099

Identity Collector Exclusion List

23099

Solved

inside

Contributor

23099

Difference between clean install and upgrade via CPUSE

23099

Solved

inside

Explorer

23099

Check Point LDAPS connection breaks everytime AD certificate is renewed

23099

Solved

inside

Contributor

22999

Filter option in R80.10 show-access-rulebase API

22999

Solved

inside

Participant

22999

To block 18264 on CheckPoint External Firewall

22999

inside

Collaborator

22900

How to allow ssh to DMZ web server?

22900

inside

Collaborator

22899

Outbound https inspection and SNI on R80.20

22899

inside

Explorer

22899

How to view published changes in R80

22899

Solved

inside

Explorer

22799

How to properly logoff web api session without leaving session open

22799

Solved

inside

Participant

22799

Snapshots are not created after installing HFA Take66 for R81.10

22799

inside

MVP Gold

22799

Limit speed of internet to some hosts

22701

inside

Advisor

22699

Troubleshooting performance issues

22699

Solved

inside

Collaborator

22699

Error on updating - Internal error in a hook script: bin/hook_cvpn_HOTFIX_R80_40_JUMBO_

22699

Solved

inside

Contributor

22699

Check Point VSX Cluster - Virtual Systems down after upgrade from R80.20 to R81.10

22698

Solved

inside

Collaborator

22600

Checkpoint device does not establish VPN tunnel

22600

Solved

inside

Explorer

22599

Certificate Revoked error on smartconsole

22599

inside

Contributor

22599

Checkpoint R81.10 API not running, Also SmartConsole showing "Serious problem and needs to Relaunch"

22599

inside

Contributor

22597

"more fw.log" does not show clear data. How do I solve this?

22597

Solved

inside

Advisor

22500

Script to run migrate export backup

22500

inside

Participant

22500

Does R80.40 support HP DL380 G10 ?

22499

Solved

inside

Advisor

22499

Inconsistent behavior in SmartConsole | Not showing last matched rule number & name in logs

22499

Solved

inside

Advisor

22401

How to block Psiphon anomolyser

22401

inside

Explorer

22400

SMS server showing error and can't see policy

22400

Solved

inside

Participant

22399

Uploading file works on cloud but not local gateway

22399

Solved

inside

Advisor

22399

Many-to-One NAT from VPN to Internal

22399

Solved

inside

Collaborator

22398

Web SmartConsole service is not available.

22398

Solved

inside

Participant

22300

Migrating cluster from old to new hardware

22300

inside

Employee

22299

* NEW in R81: Accelerated Access Install Policy *

22299

Solved

inside

Advisor

22299

Policy installation failures with Error code: 0-2000183-27

22299

Solved

inside

Advisor

22299

web_api_show_package.sh - Script stopped running due to severe error!

746

inside

Advisor

2056

Endpoint client - Confusing input prompts

2056

inside

Participant

6073

how to mount windows file share on gaia r80.10 ?

6073

inside

Advisor

836

Wrong SmartConsole update package

836

inside

Collaborator

1679

root filesystem disk space and /run/podman/logs/events.log

1679

Solved

inside

Employee

8160

Harden Now: Preparing Check Point Gateways & Management for AI‑Driven Threats like Mythos

8160

inside

Contributor

554

CPSEMD low disk space - disk space left

554

inside

MVP Gold

441

VSX R82 Virtual Router creation fails: “The certificate is not valid”

735

inside

MVP Silver

1274

web site times out when going through firewall

1274

inside

Collaborator

434

MTA didn't send Non-Delevery-Report

434

inside

MVP Silver

420

Check Point Disk Troubleshooting - df and du Commands Explained

420

inside

Contributor

1742

R81.20 Take 127 to R82 T779 MDS HA Secondary upgrade fails: “Upgrade to this version is prohibited.

1742

inside

Collaborator

236

MTA TE: Cannot retrieve original password-protected PDF via UserCheck (Blocked by Policy)

236

Solved

inside

Collaborator

1215

SmartConsole Administrator external authentication

473

inside

Explorer

330

How to view the list of banned IPs in VPN SNX

330

inside

Contributor

523

[MANAGEMENT] - High Consumption

523

inside

Explorer

324

"Interface leads to DMZ" setting

701

Solved

inside

Collaborator

1594

Primary SMS upgrade from R81.10 to R82 fail

1594

inside

MVP Gold

852

The Scalable Platform Migration Tool - Refresh question

852

inside

MVP Diamond

4428

HTTPS Inspection Is Not “Just Decryption”: It Is a TLS Enforcement Pipeline

4428

inside

Admin

845

Identity Awareness Best Practices May 2026: Video and Slides

845

inside

Collaborator

542

VSNext on ElasticXL (R82+) with Shared External/Campus vSwitches and Internal Transit vSwitch

542

inside

MVP Gold

1182

List of CVE and half a solution

1182

Solved

inside

MVP Silver

2720

Post-Migration Issue: Lost HTTPS and External SSH Access to Cluster Member

1350

inside

Participant

398

Compatible Smart Console version for Security Gateway with version 80.40

3526

Solved

inside

Explorer

410

Check Point 3900 – Using SFP+ ports (eth10/eth11) for Cluster Sync instead of default eth9

500

inside

Advisor

366

Large File download emulation responses

366

Solved

inside

Contributor

28082

I have a question about the LACP (8023AD) Bond interface.

28082

Solved

inside

Participant

446

Cluster XL Load sharing unicast mode Traffic forwarding interface

446

inside

Explorer

841

Performance Limitations of Virtual Switches in a VSX Environment

14263

Solved

inside

Collaborator

761

Why Standby SMS show No communication ?

761

inside

Collaborator

342

Web Access PT content-security-policy header issues

342

inside

MVP Gold

983

Disk usage and cleanup audit report

983

inside

Explorer

609

Limit the version of Check Point Mobile for Windows

609

inside

MVP Gold

326

identity awareness agent over site to site vpn

326

Solved

inside

Explorer

622

Two interoperable devices with same encryption domain for VPN failover?

622

inside

Participant

1441

DR Scenario - ClusterXL Split Brain Mode

1441

inside

Employee

1671

Introducing Agentic Network Security Orchestration - The Future of Network Security Is Here

1671

inside

MVP Silver

1339

Adding Zscaler cloud IP addresses as updatable object

2401

inside

MVP Diamond

1136

Smart-1 6000-L: Installation Recovery Using VGA Access

1136

inside

Contributor

2409

Recommended IPS “Additional Activation” Categories for Banking/Financial Environments?

757

inside

MVP Silver

558

Impact when disabling DES/3DES for Endpoint VPN clients?

904

Solved

inside

Participant

7673

Export a huge amount of logs to CSV file

7673

inside

Admin

1903

Web Filtering Best Practices May 2026: Video and Slides

1903

Solved

inside

Participant

802

Go to Threat Wiki (link) > Check Point Research = error 404

802

inside

MVP Silver

810

ElasticXL: From single site Active/Active to dual site Active/Standby

810

inside

MVP Silver

1113

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

1113

inside

Collaborator

10935

Help with disk space issue - Checkpoint support not helping

10935

inside

Contributor

427

VSX Cluster R81.20 with Virtual Router: Best Practice for Dual ISP / Multi-WAN Configuration

427

inside

Explorer

749

Check Point ElasticXL integration with FortiGate firewall

749

inside

Contributor

1527

SmartConsole shows No License and Contract is expired messages for IPS, AV, Application

1527

Solved

inside

MVP Gold

1696

R82 MDM/MLM on XL-6000 Appliances SmartConsole slowness

1633

inside

Explorer

1076

Microsoft Teams - QoS setup on firewall

1076

inside

Participant

390

Migration of Rules from Smart-1 Cloud to on-premises management system

390

Solved

inside

Contributor

4535

Checkpoint VSX with Both L2 (Bridge mode) VS and L3 VS

473

Solved

inside

MVP Diamond

6725

ElasticXL (R82) vs ClusterXL Load Sharing — what changes in practice (architecture, traffic, sync, a

6725

Solved

inside

Explorer

1126

CP Standalone Remote Access VPN Client for macOS Tahoe 26.3

1126

inside

MVP Diamond

508

Threat Emulation in production: how to run “zero-day control” without becoming a bottleneck

508

inside

MVP Diamond

2030

How to Roll Out IPS Updates Safely

2030

inside

Collaborator

523

R81.20 Local TE - Constant 10-minute delay on MTA/MFP scans

523

inside

MVP Diamond

948

Management-HA: Address spoofing error for FW_Log when gateway sends logs cross-site

948

inside

Advisor

600

AIOps alerts and penalty box configuration

600

inside

Explorer

702

Gaia WebUI / Admin Login Page Not Opening After Configuration on Check Point R77.20 VMware Lab

702

inside

MVP Diamond

533

Missing Undo (Crtl-Z) in SmartConsole

533

inside

MVP Gold

917

hping/netcat removal from R82.10

917

Solved

inside

Contributor

786

Restrict Access to Gaia Web Interface When RAVPN is in use

786

inside

Participant

1239

Issues with 19200 Appliance migration: ICMP over VPN (UPPAK) and Driver Incompatibility (KPPAK)

1239

Solved

inside

Collaborator

647

IPS Global Exceptions and Custom Policy

647

inside

Explorer

385

Vulnerability scanner shows port 80 unsecured on 9100 gateway

385

Solved

inside

Participant

1789

HTTPS Inspection is always bypassed - "Inspection is not Required"

1789

inside

MVP Platinum

1285

Step by step guide for penalty box R82 and R81.20

1285

Solved

inside

Collaborator

6392

Check point vulnerable to CVE-2026-31431?

6392

Solved

inside

Explorer

476

Prohibit the use of SSLv1, SSLv2, SSLv1 and TLSv1.0, TLSv1 protocols.1. Use TLSv1 protocols.2 and TL

476

inside

Advisor

771

[Action Required] – Important notification to Customer with Threat Emulation blade enabled – An Upda

771

inside

Collaborator

1422

Gaia Portal recognized a non-valid values

1422

inside

MVP Diamond CHKP

1321

How to Understand and Approach IPv8 if It Becomes a Standard?

1321

inside

MVP Diamond CHKP

614

ClusterXL and Some Options to verify on ElasticXL

614

inside

Participant

336

Remote and local backups failing or not running

336

Solved

inside

Contributor

1802

Fresh Install of R82 into VMWare - ERR_CONNECTION_REFUSED before First Time Wizard started

1802

inside

Contributor

414

Some users experienced an immediate logout from Mobile Access

687

inside

Contributor

266

Logs failing to send from firewall to remote SMS logger

266

Solved

inside

Explorer

413

The requirement to adjust the Information Security Regulator

413

inside

Participant

563

Remote Access VPN - identity sources- username format

563

inside

Admin

2026

Troubleshooting 101 April 2026: Video and Slides

2026

Solved

inside

Explorer

2247

R82.10 fail to install on xcp-NG no drive detected

2247

Solved

inside

Advisor

1099

VSX Migration 6400 → 9700 with Bond Redesign (4→2 Interfaces) – vsx_util Reconfigure Limitations?

1099

inside

Collaborator

905

Block Firewall Rule matched but still able to access page ?

905

Solved

inside

MVP Silver

949

sk156072 - Domain migration - SMS to DMS

949

inside

Advisor

2644

Sync Status: Off - SIC failure

2644

inside

Contributor

1228

IP Reputation exception is not working

1228

inside

Participant

586

Rules Migration from Smart-1 Cloud Management to Onpremise Management

586

inside

Explorer

815

On premise Datacenter objects within smart 1 cloud

815

inside

MVP Silver

485

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

485

Solved

inside

Explorer

1737

Recommended Jumbo Hotfix for R82 Recommended

1737

inside

Collaborator

748

First Time Access Issue- AWS Checkpoint Management Server

376

inside

Contributor

991

Identity propagation ClusterXl members

991

inside

Collaborator

2058

Email notification when backup fails

2058

Solved

inside

Authority

853

Blink answers.xml and ElasticXL

615

inside

Employee

301

HTTPS Inspection Troubleshooting Evidence-Driven Runbook (Gateway CA, QUIC, pinning, proxy, and ws

9994

Solved

inside

MVP Diamond CHKP

25244

Certificate and CRL validation fails from March 1, 2026

25244

inside

Explorer

911

ISP Redundancy Load Sharing Issue w/ 2 BGP Peers (inactive route from one peer)

911

Solved

inside

Contributor

7212

Data received before SYN was acknowledged. Stripping all packet data

7212

Solved

inside

Participant

521

Upgrade to R81.20 from R81.10 - VSX Environment - is VSLS required?

521

inside

Contributor

3223

VPN Redundancy without using Dynamic Routing

3223

inside

Participant

614

DNS Resolution Issue for Spoke Firewalls over MPLS (Using External IP Instead of Internal)

614

inside

Contributor

884

Web Application Not Working whin using SSL VPN

884

inside

Participant

1219

VSNext and TACACS+ authentication - defining TACP-15 for non-local Gaia admin user

1219

Solved

inside

MVP Diamond

3206

SIC Redundancy in Deployments with Internet-Based Management – Design Question

3206

inside

Contributor

596

SSL VPN WITH STATICALLY NATED IP

596

Solved

inside

MVP Diamond

54973

Check Point Packet Trace Utility

54973

inside

Contributor

475

Smart1-Cloud Policy install fails on R82 SPARK gateways on first run or when running in parallel

475

inside

Collaborator

8085

Funny IP on show configuration

8085

Solved

inside

Participant

1354

Maintenance and Upgrades Best Practices Americas May 2025 Video and Slides

2729

inside

Contributor

829

DynamicID integration with Internal SMTP Relay

829

inside

MVP Silver

1587

Updatable Geo Objects categorize IP as from the wrong country

1587

Solved

inside

Explorer

3190

It is necessary to select certain SNMP traps when working internal_snmp_trap

3190

inside

Advisor

809

SNX not working after portal certificate change

809

Solved

inside

Contributor

751

Unable to Boot R82 ISO in VMWare

751

inside

Participant

1140

Identity awareness - Linux bastion users

1140

Solved

inside

Participant

3553

Quantum spark ipsec tunnel using vti interface

3553

inside

Contributor

541

Core protection "SMTP STARTTLS Command"

541

Solved

inside

Contributor

1674

Configuring DynamicID to use Internal SMTP server

1674

inside

Participant

345

Handling Log Exporter in Management HA with dual "Primary" log servers.

345

inside

Participant

757

Cannot establish SIC between VSX gateway and SMS in ElasticXL VSNext setup R82

757

inside

Explorer

726

Manual NAT with Port Forwarding on Check Point Virtual GW

726

inside

MVP Silver

605

Check Point ISP Redundancy Explained | Dual Internet Setup + Failover Demo

605

inside

Contributor

838

Services don't work on Quantum Spark 1600

838

Solved

inside

Contributor

9891

Zero Phishing and IOS 18.4: Captive Portal Problem

9891

inside

Collaborator

3255

Change interfaces of a bonding group

1068

inside

Contributor

361

Issue with routing based on ABR/PBR

361

inside

Participant

609

Different compliance check rules can be set up for SSL VPN

609

inside

Participant

750

What's New in R82.10 April 2026

3736

inside

Collaborator

1856

Export Objects - Applications / Categories and Network Objects

1856

inside

Explorer

2130

Help on process to export historical VPN users

2130

inside

Participant

1600

Packet Loss and Traffic Drops Caused by ARP Table Overflow in Layer 2 Core Topology

1600

Solved

inside

Explorer

1849

Unable to find reason for RX_DRP

1849

inside

Employee

2246

Introducing LogHub: Unified Log Aggregation for Quantum Gateways

2246

Solved

inside

Contributor

1173

Issue with mobile access client connecting to 3rd party ipsec vpn servers

1173

Solved

inside

Advisor

1691

Issue running management via Harmony SASE

1691

Solved

inside

Participant

5452

LDAPS connections from the gateway will be downgraded to the legacy certificate validation.

5452

inside

Explorer

620

Issue faces in integrating Open ldap v3 in checkpoint firewall

620

Solved

inside

Advisor

1749

Export Specific Rules to CSV for a given object

6158

inside

Contributor

373

MANUAL-NAT ON CHECKPOINT VIRTUAL GW

373

Solved

inside

Contributor

1217

Block MobileAccess/VPN Client Access from unwanted countries

1217

inside

Contributor

802

SMS & Security Gateway Upgrade

802

inside

Participant

1403

Recommended method of Upgrade of Management Server from R81.20 to R82 - VSX

1403

Solved

inside

Participant

2997

SmartConsole Unknown Error (0x2ee2) and Gaia Login Stuck

2997

inside

MVP Gold

619

R82, VSX Main, Maestro, and MLM logging - sanity check

356

inside

Admin

1082

Check Point plans for TLS Certificate Lifetime Reduction

1082

Solved

inside

Participant

3198

The IP quantity limit of a NetworkFeed

3198

inside

Participant

1114

Quantum Spark 2560 failover after every configuration change

1114

inside

MVP

835

🚀 Web SmartConsole – Take 164, 165 & 167 Updates + What’s Coming Next

835

Solved

inside

Advisor

1484

GAIA WebUI Login Events Not Visible in SmartConsole Audit Logs

7123

Solved

inside

Participant

1864

Unexpected fwFullyUtilizedDrops with low CPU – how to identify the source?

1864

Solved

inside

Participant

1007

Persistent fwFullyUtilizedDrops on 26000 appliances (R81.20) – Is disabling SMT a valid next step?

1007

inside

Collaborator

536

Management Network for remote site (dark fiber)

536

Solved

inside

Participant

3190

Can we use Dell R760 as Open Server?

3190

inside

MVP Diamond CHKP

441

How to Mass Create Users, Groups, and Policies on Linux – Step by Step Script Walkthrough

441

Solved

inside

Advisor

16629

Disable expert mode audit log/notification nagware/adware

16629

inside

MVP Diamond CHKP

442

How to Automatically Backup Device Configurations – Step by Step Script Walkthrough

442

inside

MVP Diamond CHKP

382

Creating Interoperable Devices via CLI with an Interactive bash

382

inside

MVP Diamond CHKP

371

Simplifying Meshed VPN Community Creation with an Interactive Bash

371

inside

MVP Silver

851

Automating Static Route Redistribution into BGP with an Interactive Workflow

338

inside

Participant

319

Starlink High Performance Integration

319

inside

MVP Diamond CHKP

285

Check Point Host Batch Creator for Efficient Object Management

285

inside

Explorer

1031

A Practical Quantum Approach to Automation: Built, Tested, and Shared

333

inside

MVP Diamond CHKP

332

Simplifying Interface Configuration on GWs Quantum

332

inside

Contributor

935

R81.20 Failed to resolve VPN MEP gateway

935

inside

Explorer

390

🚀 Web SmartConsole Take 155 - Coming This Week!

6925

inside

MVP Diamond

776

IPS: How to Filter Events by CVE/Protection and Troubleshoot Signatures (Real-Time + Historical)

776

inside

Explorer

1651

Why the IPS blade prevent Checkpoint update.

1651

Solved

inside

Contributor

666

Compliance poor security - VPN114

666

inside

Participant

404

After upgrading management to R82, nat hitcount does not work on gateway on R81.20

404

Solved

inside

Participant

942

BankBot banking trojan got into Google Play again, this time embedded in a game called ‘Jewels Star Classic’.

2165

inside

Explorer

464

SIC error 325 on Install Policy — R82.10 Cross-AZ Cluster in AWS

1739

inside

Advisor

2198

Sending Syslog to logging server pt 2

2198

inside

MVP Diamond CHKP

618

DynamicID with email OTP not sending OTP

976

inside

Collaborator

661

Customize Field/Column Suggestions for Log Search?

927

Solved

inside

Collaborator

1314

Threat Emulation policy action "Send"

1314

inside

Collaborator

3196

Checkpoint Backup using SolarWind NCM

3196

inside

Collaborator

1499

Multi-Domain (MDS/DMS) — HA, Sync, and Advanced Troubleshooting (Field Runbook)

650

inside

Employee

488

Bash script for IP Address Report Generator

488

inside

Employee

407

Bash application to copy CMA policy with the MDS command line

407

inside

Explorer

423

Adding Exception Source have multiple IP

423

inside

Explorer

374

Question regarding cloning Microsoft_AD profile to limit impact of SupportOldSchema parameter

374

inside

MVP Diamond

1461

Can't route another network to my site to site VPN tunnel

1931

inside

Explorer

1197

Restrict external access to the Management Server

1137

inside

Explorer

914

HTTPS Inspection Best Practices March 2026: Video and Slides

821

inside

MVP Diamond

346

Passo a Pasos da instalação de um Multi Domain Checkpoint R81.20

346

inside

Explorer

572

Unable to bypass Non Compliant HTTP protection over VPN on R82.10

572

Solved

inside

Explorer

965

Need guidance on requesting All-in-One Evaluation license in User Center

965

inside

Collaborator

595

Identical R82.10 GWs with different options for set ssh server mac and set ssh server kex

595

inside

MVP Diamond

2814

Practical Advanced VPN Troubleshooting (Check Point)

2814

Solved

inside

Advisor

627

Gaia WebUI becomes inaccessible when URL Filtering is enabled (SMS without internet access)

922

inside

Participant

395

Migrate single cluster and policy to new domain (CMA)

395

Solved

inside

Contributor

1078

Enabling 2FA on Remote Access VPN Gateway for Vendors

1078

Solved

inside

Advisor

3154

Logging for GAIA portal and SSH access

3154

inside

Participant

643

Checking for usage of global objects in local policies

643

Solved

inside

MVP Diamond

14227

Changing ssh port on CP firewall

14227

inside

MVP Silver

777

Simple eBGP Configuration Between Cisco Router and Check Point Firewall

777

inside

Contributor

773

R82 Smart Console Extensions - install Fails

773

inside

Advisor

2066

Smart-1 Cloud and Enterprise vs SPARK licensing equivalents (need product mgmt insight)

2066

inside

MVP Gold

1704

29000 NIC Slot Population Guidelines

1704

Solved

inside

MVP Diamond CHKP

671

Automating Object Creation in Check Point SMS Using Available Services

671

Solved

inside

MVP

4121

🚀 This Month’s Spotlight - 3 Features You Should Start Using Today - September 2025

4121

Solved

inside

Contributor

2161

R82 - ElasticXL 3920 Appliance - Member Join Issue

2161

Solved

inside

Participant

1794

Running First Time Wizard in CLI for Secondary SMS

806

inside

Explorer

873

NAT Help: How to NAT to "Remote" internal subnets (not directly connected) on a 2500 Appliance?

873

inside

MVP Diamond CHKP

382

Migrating Trunk from SMS on CheckPoint Quantum

382

inside

Contributor

4029

Disaster after Management Server Upgrade from R80.20 to R80.40

4029

inside

Advisor

1209

Grouping multiple Access Roles into a single object

1209

inside

MVP Diamond CHKP

908

GW Password Recovery with SmartConsole Script

908

inside

Explorer

670

Update failed. Gateway can not access internet

670

inside

Collaborator

338

Blink upgrade Smart-1 appliance from R81.20 to R82 fails

8725

inside

Participant

1377

ElasticXL (R82) vs ClusterXL Load Sharing — o que muda na prática (arquitetura, tráfego, sync e oper

324

inside

Contributor

1387

R81.20 IPS Log Parsing Bug: Multiple Real Source IPS Displayed as 0.0.127.190

1387

Solved

inside

MVP Gold CHKP

75605

How to manually delete an entry from the Connections Table

75605

inside

Explorer

1331

Extended logging info in log export

1331

Solved

inside

Explorer

1010

Default policy installation failed in vsx gatewa

928

Solved

inside

Explorer

1245

Migration Plan from 5100 series HA using Smart-1 410 to 9100 series HA using Smart-1 700 series

1245

inside

MVP Diamond

5780

FULL TIPS for VOIP Passing Through Check Point

5780

inside

Contributor

442

sk105239 article not working when ISP redundancy configured in load sharing mode.

5249

inside

Contributor

3657

Filter by DNS query the DNS requests

3657

inside

MVP Diamond CHKP

508

Creation of a Gateway user with SHA-256/SHA-512 hash and verification in SmartConsole

508

inside

Participant

3576

VMSS Azure – Is it possible to customize or replace default Load Balancer?

351

Solved

inside

MVP Gold

1352

Remotely Activating Locator Beacon LED

1352

Solved

inside

Advisor

3706

Sending email from GAIA Gateway to Office365

852

Solved

inside

Advisor

8890

Difference between CPSB-VS-10-VSLS and CPSB-VS-10 blades

8890

Solved

inside

MVP Gold

3134

application control categories

3134

inside

Explorer

950

how to import bulk ip addresses or domains to spark 1900 using smartconsole ?

950

Solved

inside

Advisor

633

snmpd: checkLowVoltageTrap: error parsing current voltage of sensor VCC 5V [artificial trap sent]

633

Solved

inside

Participant

2322

Connections to Checkpoint native services do not encrypt within the VPN for firewall management

2322

inside

Admin

1171

Identity Awareness Best Practices March 2026: Video and Slides

1171

Solved

inside

Collaborator

3258

R82 Mgmt Server Updated to HF-60 Cannot Renew Cluster/Gateway IPSEC Certs

3258

inside

Explorer

1350

Migration from old firewall to new firewall

1350

inside

Collaborator

1893

Enhanced Link Selection Route Based IPSEC VPN

1893

Solved

inside

Authority

626

Smart-1 cloud and gateway behind WebProxy

626

Solved

inside

Participant

1717

The updatable object HTTPS services - optional bypass not found

1717

inside

Participant

797

Access Remote Network over Remote Access VPN

797

Solved

inside

Collaborator

3217

Checkpoint Firewall R82.10 - Simplified Route-Based VPN

1170

inside

Collaborator

1073

On-Prem SMS. New firewall in Azure. How to connect?

1898

Solved

inside

Collaborator

5492

Slow page loading issues and errors Internal system error in HTTPS Inspection due to categorization

5492

Solved

inside

Contributor

6213

NAT changes in R82?

6213

No messages.

Firewall & Security Management

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800/2000/2500), see the Spark Firewall space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

Virtual

Wed 07 Oct 2026 @ 11:00 AM (EDT)

TechTalk: Scaling Check Point Automation with Arodonata

Virtual

Thu 08 Oct 2026 @ 11:00 AM (EDT)

Under the Hood: Check Point SASE | Zero Trust Network Access, Step by Step

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

In-Person

Wed 21 Oct 2026 @ 09:00 AM (BST)

AI Security Workshop - Glasgow

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?