Firewall & Security Management

Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT

What's New in Check Point SASE

Watch Now!

The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses

Watch Now!

AI Security Masters
Implementing the AI Security Trifecta

Watch Now!

CheckMates Go:
Half is Not Enough

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Participant

29199

R80 and R80.10 SmartView Monitor VPN List

29199

Solved

inside

Contributor

29099

Blocking malicious IP addresses (sk103154) in VSX

29099

inside

Employee

29099

How to extend and enhance SmartConsole?

29099

inside

Contributor

29098

New Install Security Management Server

29098

inside

Contributor

28999

Strange issue Checkpoint R77.30 site-to-site VPN with Cisco ASA

28999

inside

Contributor

28899

Difference between log files and log indexes

28899

inside

MVP Gold CHKP

28899

Anti-Bot & Anti-Virus, IPS update error on Standby Member

28799

inside

Advisor

28799

Block WhatsApp Uploads/Downloads

28699

Solved

inside

Explorer

28697

Home Lab Setup - How are you doing it?

28697

Solved

inside

Participant

28601

IN /VAR/LOG/messages keep getting Stopping CUL mode

28601

Solved

inside

Advisor

28600

Lightboard Series: R80.10 High Availability in Multi Domain Environments

28600

inside

MVP Gold CHKP

28599

MDS backup too big and slow in R80.10

28599

inside

Champion

28599

VM specifications for the R80.20.M1

28599

Solved

inside

Advisor

28599

HTTPS Certificate validation - SK159872

28599

inside

MVP Gold

28500

At least one DC is currently disconnected

28299

Solved

inside

Contributor

28200

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

28200

Solved

inside

MVP Gold

28199

Maximum number of routing entries checkpoint fw

27999

Solved

inside

Contributor

27901

Encryption Failure: according to the policy the packet should not have been decrypted

27899

inside

Advisor

27899

Installation & Upgrade problems from R77.x to R80.x

27899

Solved

inside

Contributor

27899

vpn issue since R80.10 - Check Point to Fortigate (behind NAT router)

27899

inside

MVP Diamond

27802

How to simulate & virtualize Real life deployments

27800

Solved

inside

Explorer

27798

Block traffic coming from known malicious IP addresses

27699

Solved

inside

Employee

27600

Identity Awareness - Could not connect to AD server

27600

Solved

inside

Employee Alumnus

27600

How to export all result for the SmartLog query shows

27600

inside

Explorer

27599

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

27599

inside

Collaborator

27500

Firewall HA status (health check)

27500

Solved

inside

Collaborator

27499

Updatable objects - no longer available

27499

inside

Participant

27499

CPview and Top-connections in R80.20

27499

inside

Participant

27499

how to filter traffic log by using CLI ?

27499

Solved

inside

Contributor

27499

I have a question about the LACP (8023AD) Bond interface.

27400

Solved

inside

Participant

27399

How to display unsaved changes in R80

27399

Solved

inside

Advisor

27299

R81.20 TechTalk webinar - Network Feed Objects

27298

inside

Advisor

27200

Identity Collector: ISE and AD continually over-writing each other on the PDP

27200

inside

Collaborator

27199

How to monitor bandwidth limit for application control

27199

inside

Contributor

27199

Trying to add hosts in mgmt_cli using csv file

27107

Solved

inside

Collaborator

27099

Service Object - Match for Any

27099

inside

Admin

27099

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

27099

inside

Explorer

26899

TCP Packet out of state, First Packet is not syn

26899

Solved

inside

MVP Silver

26899

Searching Network Objects in R80.xx is crippled

26899

inside

Collaborator

26899

Upgrading Provider-1 MDM from R77.30 to R80.10

26899

Solved

inside

Contributor

26899

NAT Loopback configuration problem in R80.10

26899

inside

Collaborator

26800

Windows Update Services with HTTPS inspection enabled

26800

Solved

inside

Participant

26799

Default route on Standby Member not showing

26799

Solved

inside

Advisor

26799

How to monitor virtual systems on VSX?

26799

Solved

inside

Contributor

26699

cphaprob status showing down cause by routed

26699

Solved

inside

Contributor

26699

Not substituted certificate in browser Https Inspection

26699

Solved

inside

Contributor

26698

Need CLI Command to see Interfaces and Associated IP Information

26600

inside

MVP Diamond

26599

Cipher Configuration Tool (CCT)

26599

inside

Explorer

26500

Installing VSX on on VMware ESXi

26500

inside

Collaborator

26499

Maintenance actions that should be performed by admins

26499

Solved

inside

MVP Diamond

26499

R80.20 HTTPS Inspection Bypass for Office365

26399

Solved

inside

Contributor

26301

Wrong peer gateway for decrypted packet (VPN Error code 01)

26301

Solved

inside

Contributor

26299

MDS Upgrade failing from R80.10 to R80.30 (solved)

26299

inside

Collaborator

26299

VPN problems - Clear text packet should be encrypted

26199

inside

Contributor

26199

Identity Collector Not Collecting dot1x sessions from Cisco ISE

26199

Solved

inside

Participant

26199

Why CP drops RST-ACK packets from client?

26199

inside

Contributor

26100

Subinterface down, results in failover

26099

Solved

inside

Contributor

26099

Threat Prevention policies after R77.30 to R80.10 migration. Is it correct?

26099

Solved

inside

Contributor

26099

Is there SNI support for inbound HTTPS inspection in R80.20?

26099

inside

Collaborator

26099

Checkpoint R81.20 Logging Issue

26000

Solved

inside

Collaborator

25900

HTTPS Inspection and Office 365 - Anyone got it playing nicely?

25900

Solved

inside

Advisor

25899

Error: At least one DC is currently disconnected

25899

inside

Mentor

25898

What are IPS Staging Protections? And how do we clear them?

25898

inside

Advisor

25800

Notify when certificate expired

25799

inside

Advisor

25799

Identity sharing - how to change modes

25799

Solved

inside

Contributor

25799

Restricting Remote Access by IPv4 Address

25799

inside

Contributor

25700

VSX cluster problem - are we alone?

25700

Solved

inside

Participant

25699

Usercheck Block Page is Insecure/Private

25699

inside

Mentor

25601

How to count objects of a group

25599

Solved

inside

Contributor

25500

SecureXL DoS Rate Limiting (samp rules)

25500

inside

Advisor

25500

Checkpoint to Azure Route based - guide

25500

inside

Contributor

25499

Cluster XL - Failover due to Fullsync PNOTE ON

25499

inside

Explorer

25400

Allow an encrypted communication channel between servers

25400

inside

Participant

25399

Solutions for backup/restoring individual MDS Domains.

25399

inside

Advisor

25300

How do I verify Threat Emulation is working?

25299

inside

Participant

25299

DHCP server configuration on GAIA R80.20

25299

inside

Contributor

25299

URL Filtering Troubleshooting Help

25299

Solved

inside

Contributor

25298

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

25298

Solved

inside

Advisor

25199

SmartConsole Rule Logs - Display Issue

25199

Solved

inside

Collaborator

25199

F5 BIG-IP ICAP and SandBlast (TEX)

25099

Solved

inside

Contributor

25099

VPN community routing not working

25099

inside

Advisor

25099

Displaying transceiver properties

25099

inside

Contributor

24900

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

24900

Solved

inside

Collaborator

24809

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

24809

inside

MVP Gold

24805

Is it advisable to change affinity in my scenario?

24805

inside

Contributor

24801

Bypass HTTPS Inspection for a custom URL

24801

Solved

inside

Advisor

24800

Regular Expression in Application And URL Filtering

24800

inside

Contributor

24800

R80.10 SmartConsole Gateway & Servers Status

24800

Solved

inside

Contributor

24799

Gaia r80.10 tag vlan 1 and native vlan

24799

inside

Collaborator

24799

Can't monitor secondary node over IPSec tunnel

24799

Solved

inside

Collaborator

24799

Error: 'IPS' is not responding

24699

inside

Advisor

24699

BGP over VPN between Azure.docx

24699

inside

Contributor

24699

TechTalk: Advanced Threat Prevention Best Practices

24699

Solved

inside

Collaborator

24600

URL Filtering Pornography Category not Working - Custom Application Works

24600

inside

Collaborator

24599

Firemon - Check Point R80.10 API not working.

24599

inside

Participant

24499

'TCP packet out of state' drops

24499

Solved

inside

Collaborator

24499

Site to Site Route Based VPN in Checkpoint

24300

Solved

inside

MVP Gold

24299

How to debug Policy Installation Errors

24299

Solved

inside

Explorer

24299

Searching for Address Spoofing Logs in R80

24299

inside

Employee Alumnus

24200

Custom HotFix Installation Procedure

24199

inside

Participant

24199

Low bandwidth when checkpoint is connected

24199

Solved

inside

MVP Diamond

24199

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

24199

Solved

inside

Collaborator

24199

Exporting/Importing of Objects (R80.20)

24199

inside

Collaborator

24100

High cpu utilization on RAD Process

24100

inside

Participant

24099

Password hashes, sha512 and the expert password

24099

Solved

inside

Participant

24099

Block Only YouTube not Google Applications

24099

Solved

inside

Contributor

24099

Lightboard Series: High Availability Architecture with R80.10

24099

inside

Participant

24099

Allow Office 365 services in Application Control & Url Filtering

24099

Solved

inside

Participant

23999

checkpoint Firewall audit for configuration change

23999

Solved

inside

Participant

23999

R80 SmartConsole Unable to connect to server

23999

Solved

inside

Advisor

23998

Identity Agent - Auto Detecting gateway

23998

Solved

inside

Mentor

23904

IPS issue (R80.20) - cannot remove IPS blade from GW object

23904

Solved

inside

Participant

23900

Test bandwidth/speed from Gaia

23900

inside

Advisor

23899

Finding main IP of any managed gateway

23899

inside

Participant

23893

Checkpoint Advanced OSPF Capability

23893

inside

Participant

23800

How ping works with a ClusterXL?

23800

Solved

inside

Contributor

23800

Firewall Log Archive and Import in R80.10/ R77.30

23800

Solved

inside

Contributor

23800

VOIP with H323 over remote access VPN not working on R80.10

23800

Solved

inside

Explorer

23799

TCP connection failure port=18191 [error no. 10]

23799

inside

Participant

23799

R81 - SmartUpdate Package Repository

23799

inside

MVP Silver

23700

CPUSE Deployment Agent install script

23700

Solved

inside

Collaborator

23700

High Cpu utilization - Internet Speed drops to very low level

23700

inside

Collaborator

23699

Private to Private NAT on IPSEC VPN

23699

Solved

inside

Advisor

23600

Log Exporter and Elasticsearch

23599

Solved

inside

Advisor

23599

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

23499

inside

Contributor

23499

Document related to OPSEC configuration

23499

inside

Contributor

23499

VPN connection with a DAIP gateway

23499

Solved

inside

Contributor

23499

SSL Certificate Cannot Be Trusted (vulnerability)

23499

inside

Participant

23499

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

23493

Solved

inside

MVP Diamond CHKP

23399

Certificate and CRL validation fails from March 1, 2026

23399

inside

MVP Gold CHKP

23390

Policy Install Failed - Problem With The Commit Function

23300

inside

Contributor

23299

Slow performance when Antivrus enabled.

23299

Solved

inside

Explorer

23299

Check Point Gateway CLI Uptime vs last reboot command output Not Matched (Doubt)

23299

Solved

inside

Advisor

23299

Add Interfaces To VSX Bond Group?

23299

inside

Advisor

23299

UDP Port Mapping? - Cisco Meraki VPN issue

23199

inside

Collaborator

23100

IPsec VPN [NATting intresting traffic] config help

23100

inside

Participant

23099

How to store logs? Focus on time range instead of disk space.

23099

Solved

inside

Explorer

23000

Log Exporter LEEF Field Mappings

22999

inside

Explorer

22999

MIGRATE R75 or R77.30 to R80.1 possible ?

22999

inside

Contributor

22998

GAIA R80.20 Release Date And New Features?

22998

inside

Admin

22900

CPview and DiagnosticsView TechTalk: Video, Q&A, and Slides

22900

inside

Employee Alumnus

22899

Firewall allowing traffic without Access Policy

22899

Solved

inside

Collaborator

22899

Command Line Arguments to R80.10 SmartConsole.exe

22899

Solved

inside

Participant

22802

Concurrent Connections - R80.40

22800

inside

MVP Diamond

22799

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

22799

Solved

inside

Collaborator

22799

Inject license failed, on some blade security gateway

22799

inside

MVP Gold

22799

dynamic balancing, VSX and core affinity

22799

Solved

inside

MVP Silver

22796

R80.40+ and GNAT. How to clear the NAT-table ?

22796

Solved

inside

Contributor

22700

Difference between clean install and upgrade via CPUSE

22700

Solved

inside

Participant

22700

Identity Collector - Cisco ISE SXP mappings support

22700

Solved

inside

Advisor

22699

Identity Collector Exclusion List

22699

Solved

inside

Employee

22699

How to view published changes in R80

22699

Solved

inside

Explorer

22699

How to properly logoff web api session without leaving session open

22699

inside

Collaborator

22699

How to allow ssh to DMZ web server?

22699

inside

Participant

22699

Restrict VPN access by GEO location

22699

Solved

inside

Explorer

22698

Check Point LDAPS connection breaks everytime AD certificate is renewed

22698

Solved

inside

Explorer

22601

To block 18264 on CheckPoint External Firewall

22601

Solved

inside

Contributor

22599

R81.10 VPN site-2-site to Cisco C8500-12X IOS XE (not Palo Alto as previously stated)

22599

inside

Participant

22599

Troubleshooting performance issues

22599

Solved

inside

Advisor

22599

Newbie question - Exporting from logfiles from old dates

22597

Solved

inside

Participant

22499

Checkpoint device does not establish VPN tunnel

22499

inside

Contributor

22496

Checkpoint Policy Installation Failed in Checkpoint Mangement Server

22496

Solved

inside

Contributor

22399

Filter option in R80.10 show-access-rulebase API

22399

Solved

inside

Collaborator

22399

Limit speed of internet to some hosts

22399

inside

Collaborator

22399

Snapshots are not created after installing HFA Take66 for R81.10

22303

Solved

inside

Explorer

22299

Script to run migrate export backup

22299

Solved

inside

Contributor

22299

"more fw.log" does not show clear data. How do I solve this?

22200

Solved

inside

Participant

22200

Uploading file works on cloud but not local gateway

22200

Solved

inside

Advisor

22199

How to block Psiphon anomolyser

22199

Solved

inside

Advisor

22199

Policy installation failures with Error code: 0-2000183-27

22199

Solved

inside

Collaborator

22099

Check Point VSX Cluster - Virtual Systems down after upgrade from R80.20 to R81.10

22099

Solved

inside

Participant

22099

Migrating cluster from old to new hardware

22099

inside

Collaborator

22097

Outbound https inspection and SNI on R80.20

22097

Solved

inside

Advisor

22001

Error on updating - Internal error in a hook script: bin/hook_cvpn_HOTFIX_R80_40_JUMBO_

22000

inside

Participant

21999

Does R80.40 support HP DL380 G10 ?

21999

inside

Explorer

21900

Why are some of IPS signatures showing as inactive in R80.10?

21899

inside

Contributor

21899

NAT Rules for multiple IP Addresses?

21899

Solved

inside

Participant

21898

Firewall rule for any tcp and udp port

21896

Solved

inside

Explorer

21804

SMS server showing error and can't see policy

21804

inside

Explorer

21800

HTTPS Weak Ciphers and other vulnerabilities

21800

Solved

inside

Advisor

21800

Clearing disk space on R80.40 Management Server

21800

Solved

inside

Advisor

21800

How to decrease a usage of /dev/mapper/vg_splat_lv-log

21800

inside

Employee

21799

* NEW in R81: Accelerated Access Install Policy *

21799

Solved

inside

Contributor

21799

Site to Site VPN (policy based) and routing behavior

21799

Solved

inside

Collaborator

21799

Web SmartConsole service is not available.

21799

Solved

inside

Explorer

21799

Certificate Revoked error on smartconsole

21799

inside

Participant

21798

Checkpoint R81.10 API not running, Also SmartConsole showing "Serious problem and needs to Relaunch"

21798

Solved

inside

Advisor

21701

Inconsistent behavior in SmartConsole | Not showing last matched rule number & name in logs

21701

inside

Advisor

21700

Exporting data from SmartConsole: How do I select columns?

21700

inside

Contributor

21700

Unable to export 10000+ records in SmartView in R81

21700

Solved

inside

Contributor

21699

Automatic Configuration of Appliance on boot

21699

inside

Champion

21699

Default DNS Trap and malware detection?

21699

Solved

inside

Participant

21698

ClusterXL Different Subnet Configuration

21698

inside

Admin

21600

How do I test if Anti-Bot and/or Anti-Virus is Working?

21600

Solved

inside

Explorer

21600

Checkpoint to ASA VPN traffic selection issue

21600

inside

Collaborator

21599

Migrating R75 Management Server to New Release

21599

inside

Participant

21599

'No valid licens found on server' even though I've attached licens and contracts

21598

Solved

inside

MVP Silver

21504

IPS updates on R77.30 & R77.20.80 GWs not reflected in Dashboard

21504

Solved

inside

Collaborator

21500

No Traffic Logs after Take 121 + Smack Update

21500

inside

Advisor

21500

R80 Management API tips and tricks - "show-objects" command

21500

Solved

inside

Contributor

21500

Sending syslog from CheckPoint R81 to SIEM

21500

Solved

inside

Collaborator

21499

Port scan from external network

21499

inside

Collaborator

21499

Combining all interfaces in one bond, how bad is this practice?

21499

inside

Advisor

21499

Proper Definition & Use of "ALL_DCE_RPC"

21499

inside

Collaborator

21401

Number of connections depending on dst addresses

21399

Solved

inside

Participant

21399

Anti-Virus log prompt: "background classification mode was set"

21399

inside

Advisor

21399

Many-to-One NAT from VPN to Internal

21399

Solved

inside

Contributor

21398

Checkpoint Publish and Install difference

21398

Solved

inside

Explorer

21398

How to Renew Certificate on Security Gateway.

21398

inside

Participant

21300

Why doesn't Checkpoint failover without manual interaction in Azure?

21300

inside

Contributor

21299

R80.10 -> R80.20/30 Management upgrade issues

21299

inside

Employee

21200

Migrating from R77.30 to R80.10 Using Advanced Upgrade Procedure

21200

inside

Contributor

21200

Externally Mananged VPN Gateway Setup

21200

inside

Participant

21199

Grafana and Prometheus for monitoring Check Point firewalls

21199

inside

Participant

21199

Packet is dropped. I do not know why is reason.

21199

Solved

inside

Participant

21199

Policy Changes - How to see what changes you have made

21199

Solved

inside

Advisor

21099

Format of csv file to add object in group

21099

inside

MVP Gold

21099

USFW enablement not clear (SK needed)

21099

inside

Employee

21099

Introduction to RESTful APIs and JSON format

21099

Solved

inside

Contributor

21099

Log Indexer crashing - SmartLog not working

21099

inside

Authority

21098

Traffic not accelerated by Secure XL

21000

inside

Employee Alumnus

21000

Understanding Threat Emulation logs

21000

inside

Explorer

20999

block port 443 and 80 and 18264 on checkpoint external firewall

20900

inside

Participant

20899

R80.20 Identity Tags and Updatable Objects

20899

inside

Collaborator

20899

Site-to-Site VPN and 'packet should not have been decrypted'

20800

inside

Collaborator

20799

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

20799

inside

Explorer

20799

R80.10 Gateways drops traffic after policy Install

20799

inside

Advisor

20798

Disable TLS 1.0/1.1 for https inspection

20798

inside

Participant

20797

Cannot access Web GUI checkpoint firewall in cluster

20797

inside

MVP Silver

20796

Creating reports with tracking "per connection"

20701

inside

Admin

20699

Check Point Threat Prevention Packet Flow and Architecture

20699

inside

Contributor

20699

IPS Core protection - I need help to better understand

20599

Solved

inside

Contributor

20599

Gaia Portal recognized a non-valid values

1232

inside

MVP Diamond

1120

How to Understand and Approach IPv8 if It Becomes a Standard?

1120

inside

MVP Diamond

536

ClusterXL and Some Options to verify on ElasticXL

536

inside

Participant

292

Remote and local backups failing or not running

292

Solved

inside

Contributor

1517

Fresh Install of R82 into VMWare - ERR_CONNECTION_REFUSED before First Time Wizard started

1517

inside

Contributor

361

Some users experienced an immediate logout from Mobile Access

562

inside

Contributor

216

Logs failing to send from firewall to remote SMS logger

216

Solved

inside

Explorer

350

The requirement to adjust the Information Security Regulator

350

inside

Participant

474

Remote Access VPN - identity sources- username format

474

inside

Admin

1935

Troubleshooting 101 April 2026: Video and Slides

1935

Solved

inside

Explorer

1953

R82.10 fail to install on xcp-NG no drive detected

1953

Solved

inside

Advisor

923

VSX Migration 6400 → 9700 with Bond Redesign (4→2 Interfaces) – vsx_util Reconfigure Limitations?

923

inside

Collaborator

2828

ChatGPT / HTTP2 parsing error / HTTPS Inspection

2828

inside

Collaborator

745

Block Firewall Rule matched but still able to access page ?

745

Solved

inside

MVP Silver

780

sk156072 - Domain migration - SMS to DMS

780

inside

Collaborator

2492

Sync Status: Off - SIC failure

2492

inside

Contributor

1052

IP Reputation exception is not working

1052

inside

Participant

513

Rules Migration from Smart-1 Cloud Management to Onpremise Management

513

inside

Explorer

724

On premise Datacenter objects within smart 1 cloud

724

inside

MVP Silver

425

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

425

Solved

inside

Explorer

1607

Recommended Jumbo Hotfix for R82 Recommended

1607

inside

Collaborator

666

First Time Access Issue- AWS Checkpoint Management Server

324

inside

Contributor

859

Identity propagation ClusterXl members

859

inside

Collaborator

1967

Email notification when backup fails

1967

Solved

inside

MVP Gold

739

Blink answers.xml and ElasticXL

512

inside

Employee

260

HTTPS Inspection Troubleshooting Evidence-Driven Runbook (Gateway CA, QUIC, pinning, proxy, and ws

9485

Solved

inside

MVP Diamond CHKP

23536

Certificate and CRL validation fails from March 1, 2026

23536

inside

Explorer

811

ISP Redundancy Load Sharing Issue w/ 2 BGP Peers (inactive route from one peer)

811

Solved

inside

Participant

7018

Data received before SYN was acknowledged. Stripping all packet data

7018

Solved

inside

Participant

455

Upgrade to R81.20 from R81.10 - VSX Environment - is VSLS required?

455

inside

Contributor

2889

VPN Redundancy without using Dynamic Routing

2889

inside

Participant

546

DNS Resolution Issue for Spoke Firewalls over MPLS (Using External IP Instead of Internal)

546

inside

Contributor

778

Web Application Not Working whin using SSL VPN

778

inside

Participant

1115

VSNext and TACACS+ authentication - defining TACP-15 for non-local Gaia admin user

1115

Solved

inside

MVP Diamond

2995

SIC Redundancy in Deployments with Internet-Based Management – Design Question

2995

inside

Contributor

498

SSL VPN WITH STATICALLY NATED IP

498

Solved

inside

MVP Diamond

54229

Check Point Packet Trace Utility

54229

inside

Contributor

398

Smart1-Cloud Policy install fails on R82 SPARK gateways on first run or when running in parallel

398

inside

Collaborator

7837

Funny IP on show configuration

7837

Solved

inside

Participant

1175

Maintenance and Upgrades Best Practices Americas May 2025 Video and Slides

2532

inside

Contributor

700

DynamicID integration with Internal SMTP Relay

700

inside

MVP Silver

1533

Updatable Geo Objects categorize IP as from the wrong country

1533

Solved

inside

Explorer

3044

It is necessary to select certain SNMP traps when working internal_snmp_trap

3044

inside

Advisor

604

SNX not working after portal certificate change

604

Solved

inside

Contributor

646

Unable to Boot R82 ISO in VMWare

646

inside

Participant

1017

Identity awareness - Linux bastion users

1017

Solved

inside

Participant

3376

Quantum spark ipsec tunnel using vti interface

3376

inside

Contributor

473

Core protection "SMTP STARTTLS Command"

473

Solved

inside

Contributor

1412

Configuring DynamicID to use Internal SMTP server

1412

inside

Participant

303

Handling Log Exporter in Management HA with dual "Primary" log servers.

303

inside

Participant

651

Cannot establish SIC between VSX gateway and SMS in ElasticXL VSNext setup R82

651

inside

Explorer

647

Manual NAT with Port Forwarding on Check Point Virtual GW

647

inside

MVP Silver

527

Check Point ISP Redundancy Explained | Dual Internet Setup + Failover Demo

527

inside

Contributor

715

Services don't work on Quantum Spark 1600

715

Solved

inside

Contributor

9166

Zero Phishing and IOS 18.4: Captive Portal Problem

9166

inside

Collaborator

3060

Change interfaces of a bonding group

893

inside

Contributor

320

Issue with routing based on ABR/PBR

320

inside

Participant

525

Different compliance check rules can be set up for SSL VPN

525

inside

Participant

683

What's New in R82.10 April 2026

3577

inside

Collaborator

1592

Export Objects - Applications / Categories and Network Objects

1592

inside

Explorer

1812

Help on process to export historical VPN users

1812

inside

Participant

1396

Packet Loss and Traffic Drops Caused by ARP Table Overflow in Layer 2 Core Topology

1396

Solved

inside

Explorer

1621

Unable to find reason for RX_DRP

1621

inside

Employee

2139

Introducing LogHub: Unified Log Aggregation for Quantum Gateways

2139

Solved

inside

Contributor

970

Issue with mobile access client connecting to 3rd party ipsec vpn servers

970

Solved

inside

Advisor

1481

Issue running management via Harmony SASE

1481

Solved

inside

Participant

5012

LDAPS connections from the gateway will be downgraded to the legacy certificate validation.

5012

inside

Explorer

533

Issue faces in integrating Open ldap v3 in checkpoint firewall

533

Solved

inside

Advisor

1516

Export Specific Rules to CSV for a given object

6002

inside

Contributor

323

MANUAL-NAT ON CHECKPOINT VIRTUAL GW

323

Solved

inside

Contributor

1055

Block MobileAccess/VPN Client Access from unwanted countries

1055

inside

Contributor

714

SMS & Security Gateway Upgrade

714

inside

Participant

1221

Recommended method of Upgrade of Management Server from R81.20 to R82 - VSX

1221

Solved

inside

Participant

2364

SmartConsole Unknown Error (0x2ee2) and Gaia Login Stuck

2364

inside

MVP Gold

549

R82, VSX Main, Maestro, and MLM logging - sanity check

320

inside

Admin

970

Check Point plans for TLS Certificate Lifetime Reduction

970

Solved

inside

Participant

2864

The IP quantity limit of a NetworkFeed

2864

inside

Participant

972

Quantum Spark 2560 failover after every configuration change

972

inside

MVP

771

🚀 Web SmartConsole – Take 164, 165 & 167 Updates + What’s Coming Next

771

Solved

inside

Advisor

1297

GAIA WebUI Login Events Not Visible in SmartConsole Audit Logs

6579

Solved

inside

Participant

1654

Unexpected fwFullyUtilizedDrops with low CPU – how to identify the source?

1654

Solved

inside

Participant

901

Persistent fwFullyUtilizedDrops on 26000 appliances (R81.20) – Is disabling SMT a valid next step?

901

inside

Collaborator

450

Management Network for remote site (dark fiber)

450

Solved

inside

Participant

2986

Can we use Dell R760 as Open Server?

2986

inside

MVP Diamond

392

How to Mass Create Users, Groups, and Policies on Linux – Step by Step Script Walkthrough

392

Solved

inside

Advisor

16002

Disable expert mode audit log/notification nagware/adware

16002

inside

MVP Diamond

398

How to Automatically Backup Device Configurations – Step by Step Script Walkthrough

398

inside

MVP Diamond

336

Creating Interoperable Devices via CLI with an Interactive bash

336

inside

MVP Diamond

323

Simplifying Meshed VPN Community Creation with an Interactive Bash

323

inside

MVP Silver

727

Automating Static Route Redistribution into BGP with an Interactive Workflow

292

inside

Participant

277

Starlink High Performance Integration

277

inside

MVP Diamond

246

Check Point Host Batch Creator for Efficient Object Management

246

inside

Explorer

838

A Practical Quantum Approach to Automation: Built, Tested, and Shared

278

inside

MVP Diamond

286

Simplifying Interface Configuration on GWs Quantum

286

inside

Contributor

783

R81.20 Failed to resolve VPN MEP gateway

783

inside

Explorer

331

🚀 Web SmartConsole Take 155 - Coming This Week!

6455

inside

MVP Diamond

681

IPS: How to Filter Events by CVE/Protection and Troubleshoot Signatures (Real-Time + Historical)

681

inside

Explorer

1432

Why the IPS blade prevent Checkpoint update.

1432

Solved

inside

Contributor

575

Compliance poor security - VPN114

575

inside

Participant

350

After upgrading management to R82, nat hitcount does not work on gateway on R81.20

350

Solved

inside

Participant

833

BankBot banking trojan got into Google Play again, this time embedded in a game called ‘Jewels Star Classic’.

2090

inside

Explorer

414

SIC error 325 on Install Policy — R82.10 Cross-AZ Cluster in AWS

1566

inside

Advisor

1957

Sending Syslog to logging server pt 2

1957

inside

MVP Diamond

549

DynamicID with email OTP not sending OTP

856

inside

Collaborator

572

Customize Field/Column Suggestions for Log Search?

825

Solved

inside

Collaborator

1155

Threat Emulation policy action "Send"

1155

inside

Collaborator

3116

Checkpoint Backup using SolarWind NCM

3116

inside

Collaborator

1331

Multi-Domain (MDS/DMS) — HA, Sync, and Advanced Troubleshooting (Field Runbook)

595

inside

Employee

442

Bash script for IP Address Report Generator

442

inside

Employee

357

Bash application to copy CMA policy with the MDS command line

357

inside

Explorer

359

Adding Exception Source have multiple IP

359

inside

Explorer

323

Question regarding cloning Microsoft_AD profile to limit impact of SupportOldSchema parameter

323

inside

MVP Diamond

1316

Can't route another network to my site to site VPN tunnel

1721

inside

Explorer

1024

Restrict external access to the Management Server

951

inside

Explorer

807

HTTPS Inspection Best Practices March 2026: Video and Slides

769

inside

MVP Diamond

304

Passo a Pasos da instalação de um Multi Domain Checkpoint R81.20

304

inside

Explorer

532

Unable to bypass Non Compliant HTTP protection over VPN on R82.10

532

Solved

inside

Explorer

862

Need guidance on requesting All-in-One Evaluation license in User Center

862

inside

Collaborator

502

Identical R82.10 GWs with different options for set ssh server mac and set ssh server kex

502

inside

MVP Diamond

2548

Practical Advanced VPN Troubleshooting (Check Point)

2548

Solved

inside

Advisor

547

Gaia WebUI becomes inaccessible when URL Filtering is enabled (SMS without internet access)

802

inside

Participant

351

Migrate single cluster and policy to new domain (CMA)

351

Solved

inside

Contributor

952

Enabling 2FA on Remote Access VPN Gateway for Vendors

952

Solved

inside

Advisor

2731

Logging for GAIA portal and SSH access

2731

inside

Participant

567

Checking for usage of global objects in local policies

567

Solved

inside

MVP Diamond

13944

Changing ssh port on CP firewall

13944

inside

MVP Silver

691

Simple eBGP Configuration Between Cisco Router and Check Point Firewall

691

inside

Contributor

650

R82 Smart Console Extensions - install Fails

650

inside

Advisor

1965

Smart-1 Cloud and Enterprise vs SPARK licensing equivalents (need product mgmt insight)

1965

inside

MVP Gold

1626

29000 NIC Slot Population Guidelines

1626

Solved

inside

MVP Diamond

606

Automating Object Creation in Check Point SMS Using Available Services

606

Solved

inside

MVP

3909

🚀 This Month’s Spotlight - 3 Features You Should Start Using Today - September 2025

3909

Solved

inside

Contributor

1917

R82 - ElasticXL 3920 Appliance - Member Join Issue

1917

Solved

inside

Participant

1571

Running First Time Wizard in CLI for Secondary SMS

739

inside

Explorer

769

NAT Help: How to NAT to "Remote" internal subnets (not directly connected) on a 2500 Appliance?

769

inside

MVP Diamond

340

Migrating Trunk from SMS on CheckPoint Quantum

340

inside

Contributor

3839

Disaster after Management Server Upgrade from R80.20 to R80.40

3839

inside

Advisor

1053

Grouping multiple Access Roles into a single object

1053

inside

MVP Diamond

789

GW Password Recovery with SmartConsole Script

789

inside

Explorer

594

Update failed. Gateway can not access internet

594

inside

Collaborator

304

Blink upgrade Smart-1 appliance from R81.20 to R82 fails

8157

inside

Participant

1213

ElasticXL (R82) vs ClusterXL Load Sharing — o que muda na prática (arquitetura, tráfego, sync e oper

292

inside

Contributor

1167

R81.20 IPS Log Parsing Bug: Multiple Real Source IPS Displayed as 0.0.127.190

1167

Solved

inside

MVP Gold CHKP

74872

How to manually delete an entry from the Connections Table

74872

inside

Explorer

1115

Extended logging info in log export

1115

Solved

inside

Explorer

872

Default policy installation failed in vsx gatewa

795

Solved

inside

Explorer

1050

Migration Plan from 5100 series HA using Smart-1 410 to 9100 series HA using Smart-1 700 series

1050

inside

MVP Diamond

5623

FULL TIPS for VOIP Passing Through Check Point

5623

inside

Contributor

379

sk105239 article not working when ISP redundancy configured in load sharing mode.

5163

inside

Contributor

3484

Filter by DNS query the DNS requests

3484

inside

MVP Diamond

453

Creation of a Gateway user with SHA-256/SHA-512 hash and verification in SmartConsole

453

inside

Participant

3314

VMSS Azure – Is it possible to customize or replace default Load Balancer?

323

Solved

inside

MVP Gold

1215

Remotely Activating Locator Beacon LED

1215

Solved

inside

Advisor

3251

Sending email from GAIA Gateway to Office365

770

Solved

inside

Advisor

8398

Difference between CPSB-VS-10-VSLS and CPSB-VS-10 blades

8398

Solved

inside

MVP Gold

2889

application control categories

2889

inside

Explorer

860

how to import bulk ip addresses or domains to spark 1900 using smartconsole ?

860

Solved

inside

Advisor

541

snmpd: checkLowVoltageTrap: error parsing current voltage of sensor VCC 5V [artificial trap sent]

541

Solved

inside

Participant

2148

Connections to Checkpoint native services do not encrypt within the VPN for firewall management

2148

inside

Admin

1056

Identity Awareness Best Practices March 2026: Video and Slides

1056

Solved

inside

Collaborator

2876

R82 Mgmt Server Updated to HF-60 Cannot Renew Cluster/Gateway IPSEC Certs

2876

inside

Explorer

1183

Migration from old firewall to new firewall

1183

inside

Collaborator

1703

Enhanced Link Selection Route Based IPSEC VPN

1703

Solved

inside

MVP Gold

566

Smart-1 cloud and gateway behind WebProxy

566

Solved

inside

Participant

1548

The updatable object HTTPS services - optional bypass not found

1548

inside

Participant

716

Access Remote Network over Remote Access VPN

716

Solved

inside

Collaborator

2814

Checkpoint Firewall R82.10 - Simplified Route-Based VPN

1076

inside

Collaborator

917

On-Prem SMS. New firewall in Azure. How to connect?

1667

Solved

inside

Contributor

5134

Slow page loading issues and errors Internal system error in HTTPS Inspection due to categorization

5134

Solved

inside

Contributor

5737

CheckPoint GAIA - Cisco ISE - TACACS+

1241

inside

Explorer

1351

Gateway is natting using interface IP for GTW to MGMT communication

1351

inside

Collaborator

4557

Check Point Update Services down? -- Connection Error, FDT - Unexpected error code

4557

inside

Collaborator

1087

Web Filtering Best Practices March 2026: Video and Slides

746

inside

Participant

1555

Checkpoint Security Gateway R82.10 // Lokal PBX Issues with RTP Traffic

1555

inside

Participant

2938

HTTPS Ispection - Certificate Validation Failure

2938

Solved

inside

Contributor

6197

Ordered Layers vs In-Line Layers

6197

inside

Contributor

1850

Inbound NAT to a server in DMZ with GW public IP

1850

inside

Advisor

806

SmartConsole Change Report Printouts - Any tips?

806

Solved

inside

Contributor

1309

Can we do mix and match between 5000 and 9000

1309

Solved

inside

Explorer

6352

Upgrade Experience: Log Server & Management Server from 81.20 → R82.00

6352

inside

MVP Diamond

681

Check and to enable Memory/CPU Resources in VSX Environment

681

Solved

inside

MVP Silver

547

HTTPS Inspection and Multiple Ingress Interfaces

547

inside

MVP Diamond

2442

Whitespace characters in object names

2442

Solved

inside

Explorer

481

Replacing a disk that was part of a RAID

481

Solved

inside

Contributor

1170

Detect and prevent NTLM traffic

1170

inside

Contributor

3428

Necessary Rules for IPv6 Basic Networking

3428

Solved

inside

Contributor

38046

Exchange Online networks - Is there an Updateable Object for these?

1936

inside

MVP Gold

588

File transfer from Management Server

14134

inside

MVP Silver

575

High CPU usage on VSNext - solved

575

inside

MVP Diamond

2183

CoreXL in a VSX Cluster, tips, activation, and verification

2183

inside

Contributor

1223

VPn Remote Access. Issue with implied rule

1223

Solved

inside

Advisor

1584

R82 SmartConsole (1063) won't start - "Could not load file or assembly..."

1584

inside

Explorer

1036

App & URL Filtering - OSCP Responder Failure

1036

Solved

inside

Advisor

2507

Need to close port 80 and 443 on external interface

2507

Solved

inside

Participant

1643

PPPoE is not supported with SecureXL User Space mode on 3950, R82.10?

1643

Solved

inside

MVP Silver

1163

Check Point Firewall: Certificate-Based Site-to-Site VPN

489

inside

Participant

1009

Move from MDS to Smart-1 Cloud

1009

inside

MVP Diamond

439

VSX provisioning tool as support for VPN services

439

inside

Explorer

3578

Difference between "Well-known Update Services" and "HTTPS services - recommended bypass"

1885

inside

MVP Gold

541

user.def file missed during upgrade

541

inside

Contributor

1795

Managing DAIP Gateway, automatic policy fetch not working

1795

Solved

inside

Collaborator

1068

Is RADsec (RADIUS over TLS) not natively supported in R82?

1068

Solved

inside

Collaborator

2908

Local gateway license generation in usercenter

2908

inside

Contributor

2057

Geo Policy failed to block a country

2057

inside

MVP Gold

447

question regarding transceiver CPAC-TR-10T-D (10G copper)

447

inside

Admin

1025

Getting started with Infinity Identity - Recording

1025

Solved

inside

Participant

2233

Smartview Logs Export Takes Too Long

2233

Solved

inside

Collaborator

8021

How to actually configure Identity Collectors and Identity Sharing

8021

Solved

inside

Contributor

2380

Completely erasing config without doing factory reset

2380

Solved

inside

Contributor

1512

Eval license for Management Server managing 100 Gateways

1512

inside

Explorer

2124

Rulabese matching mechanism column/row

1575

inside

MVP Silver

581

ClusterXL to VSNext - Changing VS core count

581

inside

MVP Silver

477

R82 – Filters Pane Missing in SmartConsole

1207

inside

Advisor

747

Centrally Managed Spark Issues

747

Solved

inside

Contributor

1273

AWS Security Management In-Place Upgrade

1273

Solved

inside

MVP Diamond

1605

Gateway IPS, AV, AB, Contract updating directly while proxy configured

3446

Solved

inside

Contributor

1109

Geo Protection-Exception for Remote VPN Users

929

inside

Participant

712

Backup of Gateways not working anymore since R82 Management with CDT and cron

712

Solved

inside

Contributor

6735

R82 + Windows Server 2025 – LDAPS Connection Fails

6735

Solved

inside

Advisor

3651

Replacing 5800 HA ClusterXL with 9200s. Should I convert to ElasticXL?

3651

inside

Advisor

8468

"Check Point" does not recommend using global objects?

8468

inside

Contributor

1691

scp backup fails NMBCK9999, ERROR_HOST_BASE_AUTH errors, but manual scp copy works

1691

inside

Collaborator

1532

firewall policy is not configured

1661

inside

MVP Diamond

702

Argument whether to use any any bypass or any any inspect at the bottom of https inspection policy

702

Solved

inside

Advisor

976

Did R81.20 get an extension till 05/27?

976

inside

Explorer

1398

Technical clarification: ClusterXL HA failover behavior and ICMP source IP

1398

Solved

inside

MVP Diamond

979

Unable to install updates via cpuse in the lab with eval license

979

inside

Explorer

905

Migrate Mangement Server R80.40 to R81.20

905

inside

MVP Diamond

1045

bond/interface error messages in vsx_util reconfigure after clean install of vsx(vsls) members

411

inside

Explorer

888

problem upgrade our Secure Management server from R82 take 60 to R82.10_T464_GiaA_Install_Upgrade

888

Solved

inside

Contributor

1123

VSNext Bond configuration and connection with Cisco VPCs

1123

Solved

inside

MVP Diamond

1225

Cannot establish connection with the Check Point cloud.

1225

inside

Contributor

3748

Route-based vpn with FortiGate not passing traffic - “no MSPI for MSA”

3748

inside

Collaborator

1246

ElasticXL and VIP not belonging on an interface

894

inside

MVP Diamond

37526

Looking for CIS Benchmark reviewers.

570

inside

Admin

885

Troubleshooting 101 for Check Point Firewalls February 2026: Video and Slides

885

inside

MVP Diamond

2111

ElasticXL Cluster (R82): What Changed vs. ClusterXL (R81.20) — SMO, Auto-Sync, and Operational Scale

2111

inside

MVP Diamond

1771

Avoid a failover during the VSX rebuild process

1771

inside

MVP Diamond

344

No direct log forwarding to third party syslog server for Checkpoint Firewall v81.20

538

inside

Explorer

534

How to check Advance DNS security Logs

534

Solved

inside

Contributor

4865

Smart Console filesystem expansion

4865

inside

Explorer

3342

Unwanted web proxy traffic *chckp.ctmail.com

1524

inside

Contributor

681

Near constant problem with TED interface. Connection issue?

681

Solved

inside

Participant

1021

Quantum Spark 1575 log denied packets

1021

inside

MVP Silver

1777

Command to show all the gateways managed by the management server

1067

Solved

inside

Participant

5144

Basic application control question

1982

inside

MVP Silver

459

Secondary firewall is not accessible through 443 or not accessible through IPSEC tunnel

459

Solved

inside

MVP Silver

5964

Web SmartConsole - Take 163 - New 🚀

3785

Solved

inside

Advisor

805

Logs Exporter - Will the traffic bytes value include in the logs when sending to SIEM?

1447

Solved

inside

Collaborator

769

Checkpoint SMB Traffic shaping/QOS

769

inside

Collaborator

1744

IKEv2 Site-to-Site VPN with Cisco ASA failing at Phase 2 - "No proposal chosen"

1744

Solved

inside

Advisor

2298

Understanding a kernel vpn debug

8296

inside

Participant

2365

Central Deployment of Hotfixes fails on 1555 Cluster

2633

inside

Explorer

3101

Cluster member showing ACTIVE(!) state

3101

Solved

inside

Explorer

3434

HCL update? HPE Gen 11 support

3434

Solved

inside

MVP Gold

657

Managing firewalls behind externaly managed NAT?

657

Solved

inside

Contributor

989

Adding Snort Protections to MDS

989

inside

Contributor

2874

Check Point Firewalls Connection Table

2874

Solved

inside

Contributor

4353

Checkpoint Gateway with Dynamic Public IP from ISP

1216

Solved

inside

Participant

3854

Autonomous Threat Prevention; How to disable Threat Emulation and Threat Extraction for NGTP Gateway

15786

Solved

inside

Collaborator

646

SMS audit search queries in logviewer

646

inside

Explorer

751

IPSec tunnel down time for a specific peer IP

751

Solved

inside

MVP Silver

3147

Check Point Identity Awareness – Secure LDAPS with Enterprise CA

1415

No messages.

Firewall & Security Management

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800/2000/2500), see the Spark Firewall space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 15 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live BeLux - AI Security Workshop

In-Person

Tue 15 Sep 2026 @ 12:00 PM (MDT)

Lone Tree, CO: Workspace Security and Exposure Management

Virtual

Thu 17 Sep 2026 @ 10:00 AM (CEST)

The Cloud Architects Series: Check Point Cloud Firewall Architectures - AWS, Azure & GCP

Virtual

Thu 17 Sep 2026 @ 05:00 PM (CEST)

Under the Hood: Unified Hybrid Mesh Management across AWS Firewalls, SASE and SD-WAN

Virtual

Thu 17 Sep 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Troubleshooting 101 for Check Point Firewalls

Virtual

Wed 23 Sep 2026 @ 10:00 AM (CEST)

Inside Check Point Spark R82.00.11 -EMEA

Virtual

Thu 17 Sep 2026 @ 10:00 AM (CEST)

The Cloud Architects Series: Check Point Cloud Firewall Architectures - AWS, Azure & GCP

Virtual

Thu 17 Sep 2026 @ 05:00 PM (CEST)

Under the Hood: Unified Hybrid Mesh Management across AWS Firewalls, SASE and SD-WAN

Virtual

Thu 17 Sep 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Troubleshooting 101 for Check Point Firewalls

Virtual

Wed 23 Sep 2026 @ 10:00 AM (CEST)

Inside Check Point Spark R82.00.11 -EMEA

Virtual

Wed 23 Sep 2026 @ 05:00 PM (CEST)

Inside Check Point Spark R82.00.11 - AMER

Virtual

Mon 28 Sep 2026 @ 03:00 PM (CEST)

La nouvelle réalité des attaques DDoS: autonomie, échelle et avenir de la défense

In-Person

Tue 15 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live BeLux - AI Security Workshop

In-Person

Tue 15 Sep 2026 @ 12:00 PM (MDT)

Lone Tree, CO: Workspace Security and Exposure Management

In-Person

Wed 23 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live Belgrade - AI Security Workshop

In-Person

Wed 23 Sep 2026 @ 06:00 PM (EDT)

Santo Domingo: Workspace Security and SASE Live: Protección Total del Usuario Email, Endpoint y SASE

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

CheckMates Events

Are you a member of CheckMates?