Firewall & Security Management

Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT

AI Security Masters
LGTM: Bypassing an LLM Build Gate
When Prompt Injection Fails

What's New in Check Point SASE

Watch Now!

The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses

Watch Now!

CheckMates Go:
Half is Not Enough

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Explorer

32699

Policy installation failed: TCP connectivity failure port 18191

32699

Solved

inside

MVP Diamond

32399

How can I avoid "Host Port" scan?

32300

Solved

inside

Advisor

32299

Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

32299

Solved

inside

Advisor

32299

IPSec VPN tunnel with Fortinet

32299

Solved

inside

Collaborator

32200

Get SKU, MAC, and Serial Number of Appliance thru CLI

32200

inside

Contributor

32200

Checkpoint endpoint VPN with Microsoft 2-Factor Authentication.

32200

Solved

inside

MVP Gold CHKP

32199

R77.30 VSX appliance upgrade to R80.10

32199

Solved

inside

Champion

32100

Connect Smart-1 Cloud to local Active Directory

32099

Solved

inside

MVP Gold

32097

SmartConsole AD Authentication

32097

Solved

inside

Contributor

31999

Has SmartView Tracker been eliminated?

31999

Solved

inside

Contributor

31900

Checkpoint Management Log Size Problem

31800

Solved

inside

MVP Silver

31799

Check Point Application Control and URL filtering custom applications not behaving like expected

31799

inside

Explorer

31700

First packet isn't Syn; tcp_flags: ACK

31700

Solved

inside

Participant

31699

Change Standby Member to Active Member

31599

Solved

inside

Participant

31500

ClusterXL - standby cannot reach gateway

31500

Solved

inside

Advisor

31499

How to create a custom application with custom services?

31499

inside

Advisor

31400

Exporting Check Point logs over syslog (LogExporter) with Log Server (CP)

31400

inside

Advisor

31399

How to Remove an Interface from Checkpoint Firewall

31399

Solved

inside

Advisor

31299

Gaia build number list including HFAs - does it exist?

31299

Solved

inside

Collaborator

31207

Report Server wont boot, cant get into maintenance mode

31207

Solved

inside

Contributor

31200

Adding an interface in ClusterXL High Availability

31199

Solved

inside

Advisor

31099

SandBlast and links inside email

31099

inside

Contributor

31000

Increasing disk space vg_splat-lv_current

31000

Solved

inside

Participant

31000

Using R80 and need to send logs to a Splunk server. Any idea how?

31000

Solved

inside

Collaborator

30999

what information do we need from the remote site customer when creating site to site VPN?

30999

inside

Participant

30900

Error installing SmartConsole R80

30900

Solved

inside

Advisor

30900

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

30900

Solved

inside

Participant

30899

Cisco port channel member is suspended

30899

Solved

inside

Participant

30799

Apple services not working with HTTPS inspection

30799

inside

Employee Alumnus

30701

Packet Mode, a new way of searching through your security policy in R80.10

30701

Solved

inside

Contributor

30700

WMI Permission denied - From this months Windows Update

30700

inside

Participant

30699

Commvault Installer :CPU Spikes on Checkpoint

30699

inside

Participant

30699

HTTPS inspection certificate question

30699

inside

Collaborator

30697

How to block some https sites?

30697

inside

Employee Alumnus

30694

AW keeps deleting Dameware Service

30694

inside

Explorer

30600

Best practices for inline layers

30600

inside

Contributor

30599

Terrible performance IPHTTPS - Checkpoint SG 15600

30599

inside

Explorer

30501

Policy installation in SmartDashboard fails with: Reason: TCP connectivity failure ( port = 18191 )( IP = X.X.X.X )[ error no. 10 ] Policy installation canceled.

30501

Solved

inside

Mentor

30500

IPS Analyzer Tool - are you running it?

30500

Solved

inside

Contributor

30500

How to add two IP in one interface

30500

Solved

inside

Advisor

30499

objects are locked but there no sessions can be takeover or published

30499

Solved

inside

MVP Silver

30400

White Paper - Integrating Custom IOC Feeds

30299

inside

Participant

30299

Legitimate traffic being blocked - R80.20

30299

inside

Champion

30299

Traffic is originating from a VS with the VSX internal communication address

30299

inside

Advisor

30299

What is the best approach to troubleshoot "slow connections"?

30299

Solved

inside

Contributor

30199

Smartview stuck as loading smartview.. in R80.20

30199

Solved

inside

Explorer

30099

R80 SmartReporter : how to do a report "rule base analysis"? is it possible ?

30099

inside

Collaborator

30098

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

30001

inside

Admin

30000

Check Point R80.20 Demo TechTalk and Q&A

30000

inside

Explorer

29999

How to Check Point upgrade R77.30 to R80

29999

Solved

inside

Collaborator

29799

LOM password reset on 5600 and 12400 appliances

29799

Solved

inside

Contributor

29799

Difference between Session and Connection??

29799

Solved

inside

Mentor

29799

Where did all my IPS Protections go?

29799

Solved

inside

Participant

29699

Check Point’s First Management Feature Release is now available!

29600

inside

Mentor

29599

GUI client unable to access R80.10 management server behind firewall

29599

inside

Contributor

29599

New Install Security Management Server

29599

Solved

inside

Participant

29499

How to extend and enhance SmartConsole?

29400

Solved

inside

Contributor

29399

Blocking malicious IP addresses (sk103154) in VSX

29399

Solved

inside

Participant

29399

R80 and R80.10 SmartView Monitor VPN List

29399

inside

Advisor

29297

Anti-Bot & Anti-Virus, IPS update error on Standby Member

29201

inside

MVP Gold CHKP

29200

MDS backup too big and slow in R80.10

29200

inside

Advisor

29199

IN /VAR/LOG/messages keep getting Stopping CUL mode

29198

Solved

inside

Contributor

29100

Block WhatsApp Uploads/Downloads

29100

inside

Contributor

29099

Strange issue Checkpoint R77.30 site-to-site VPN with Cisco ASA

29099

inside

MVP Gold CHKP

29099

Difference between log files and log indexes

29000

inside

Champion

29000

VM specifications for the R80.20.M1

29000

inside

Explorer

29000

Home Lab Setup - How are you doing it?

28900

inside

MVP Gold

28899

HTTPS Certificate validation - SK159872

28799

inside

Employee

28703

Lightboard Series: R80.10 High Availability in Multi Domain Environments

28703

Solved

inside

Contributor

28699

How to simulate & virtualize Real life deployments

28699

Solved

inside

Contributor

28500

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

28500

inside

Explorer

28499

At least one DC is currently disconnected

28499

Solved

inside

Explorer

28499

vpn issue since R80.10 - Check Point to Fortigate (behind NAT router)

28299

Solved

inside

Advisor

28200

R81.20 TechTalk webinar - Network Feed Objects

28200

inside

Advisor

28199

Installation & Upgrade problems from R77.x to R80.x

28199

Solved

inside

Participant

28098

Encryption Failure: according to the policy the packet should not have been decrypted

28098

inside

Participant

27999

Maximum number of routing entries checkpoint fw

27999

Solved

inside

Employee

27999

Identity Awareness - Could not connect to AD server

27999

Solved

inside

Participant

27999

CPview and Top-connections in R80.20

27999

Solved

inside

Contributor

27999

I have a question about the LACP (8023AD) Bond interface.

27999

inside

Advisor

27900

Identity Collector: ISE and AD continually over-writing each other on the PDP

27900

inside

Collaborator

27900

Firewall HA status (health check)

27900

Solved

inside

Employee Alumnus

27898

How to export all result for the SmartLog query shows

27898

Solved

inside

Collaborator

27800

Updatable objects - no longer available

27800

inside

Advisor

27800

Block traffic coming from known malicious IP addresses

27800

inside

Explorer

27800

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

27800

inside

Participant

27700

How to monitor bandwidth limit for application control

27699

Solved

inside

Advisor

27699

how to filter traffic log by using CLI ?

27599

Solved

inside

Contributor

27599

Service Object - Match for Any

27502

inside

Contributor

27500

Identity Collector Not Collecting dot1x sessions from Cisco ISE

27500

Solved

inside

Explorer

27499

Trying to add hosts in mgmt_cli using csv file

27499

inside

Contributor

27499

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

27499

Solved

inside

MVP Diamond

27400

Searching Network Objects in R80.xx is crippled

27399

Solved

inside

Participant

27399

How to display unsaved changes in R80

27399

Solved

inside

Advisor

27300

How to monitor virtual systems on VSX?

27300

Solved

inside

Contributor

27299

NAT Loopback configuration problem in R80.10

27299

inside

Collaborator

27299

Default route on Standby Member not showing

27202

Solved

inside

Contributor

27200

Not substituted certificate in browser Https Inspection

27200

inside

Collaborator

27199

Windows Update Services with HTTPS inspection enabled

27199

inside

Explorer

27001

TCP Packet out of state, First Packet is not syn

27001

Solved

inside

MVP Diamond

26999

MDS Upgrade failing from R80.10 to R80.30 (solved)

26999

inside

Collaborator

26999

Upgrading Provider-1 MDM from R77.30 to R80.10

26999

Solved

inside

Contributor

26999

VPN problems - Clear text packet should be encrypted

26999

Solved

inside

Contributor

26900

Need CLI Command to see Interfaces and Associated IP Information

26900

Solved

inside

Contributor

26899

R80.20 HTTPS Inspection Bypass for Office365

26899

Solved

inside

Contributor

26899

cphaprob status showing down cause by routed

26899

inside

Contributor

26798

Subinterface down, results in failover

26700

inside

Explorer

26700

Installing VSX on on VMware ESXi

26700

Solved

inside

Contributor

26699

Threat Prevention policies after R77.30 to R80.10 migration. Is it correct?

26699

Solved

inside

Contributor

26699

Is there SNI support for inbound HTTPS inspection in R80.20?

26699

inside

Collaborator

26699

Maintenance actions that should be performed by admins

26699

Solved

inside

Advisor

26699

SmartConsole Rule Logs - Display Issue

26699

Solved

inside

Contributor

26694

Checkpoint R81.20 Logging Issue

26694

Solved

inside

Participant

26600

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

26600

inside

Advisor

26599

Cipher Configuration Tool (CCT)

26599

Solved

inside

Contributor

26599

VPN community routing not working

26599

Solved

inside

Contributor

26500

Wrong peer gateway for decrypted packet (VPN Error code 01)

26500

inside

Advisor

26500

Why CP drops RST-ACK packets from client?

26500

inside

Participant

26499

Allow an encrypted communication channel between servers

26499

Solved

inside

Advisor

26400

Error: At least one DC is currently disconnected

26400

inside

Collaborator

26399

HTTPS Inspection and Office 365 - Anyone got it playing nicely?

26300

Solved

inside

Contributor

26299

Restricting Remote Access by IPv4 Address

26299

inside

Contributor

26204

VSX cluster problem - are we alone?

26204

inside

Mentor

26200

What are IPS Staging Protections? And how do we clear them?

26200

inside

Contributor

26200

Notify when certificate expired

26099

inside

Collaborator

26099

How to count objects of a group

26099

Solved

inside

Contributor

25999

Usercheck Block Page is Insecure/Private

25999

inside

Advisor

25999

SecureXL DoS Rate Limiting (samp rules)

25899

inside

Advisor

25899

Identity sharing - how to change modes

25899

inside

Participant

25899

Solutions for backup/restoring individual MDS Domains.

25899

inside

Advisor

25899

Checkpoint to Azure Route based - guide

25899

inside

Collaborator

25899

Cluster XL - Failover due to Fullsync PNOTE ON

25800

inside

Contributor

25800

URL Filtering Troubleshooting Help

25800

Solved

inside

Contributor

25699

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

25699

Solved

inside

Collaborator

25699

URL Filtering Pornography Category not Working - Custom Application Works

25699

inside

Admin

25602

How do I verify Threat Emulation is working?

25602

inside

MVP Gold

25599

Is it advisable to change affinity in my scenario?

25599

Solved

inside

MVP Gold

25599

F5 BIG-IP ICAP and SandBlast (TEX)

25399

inside

Participant

25399

DHCP server configuration on GAIA R80.20

25399

inside

MVP Gold

25399

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

25300

inside

Contributor

25299

R80.10 SmartConsole Gateway & Servers Status

25299

inside

Participant

25299

Displaying transceiver properties

25299

inside

Advisor

25200

BGP over VPN between Azure.docx

25200

Solved

inside

MVP Diamond CHKP

25200

Certificate and CRL validation fails from March 1, 2026

25200

Solved

inside

Contributor

25199

Error: 'IPS' is not responding

25199

inside

Collaborator

25199

Can't monitor secondary node over IPSec tunnel

25199

Solved

inside

Collaborator

25101

Gaia r80.10 tag vlan 1 and native vlan

25099

Solved

inside

Collaborator

24904

Regular Expression in Application And URL Filtering

24900

inside

Contributor

24900

Site to Site Route Based VPN in Checkpoint

24900

inside

Admin

24899

TechTalk: Advanced Threat Prevention Best Practices

24899

inside

Participant

24899

Firemon - Check Point R80.10 API not working.

24899

inside

Contributor

24801

Bypass HTTPS Inspection for a custom URL

24801

inside

Participant

24800

'TCP packet out of state' drops

24800

inside

Contributor

24800

Searching for Address Spoofing Logs in R80

24599

inside

Contributor

24599

R81 - SmartUpdate Package Repository

24496

Solved

inside

Participant

24401

Block Only YouTube not Google Applications

24401

Solved

inside

Explorer

24400

IPS issue (R80.20) - cannot remove IPS blade from GW object

24400

inside

Advisor

24400

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

24400

inside

Explorer

24400

checkpoint Firewall audit for configuration change

24399

inside

Employee Alumnus

24399

How to debug Policy Installation Errors

24399

inside

Participant

24399

Low bandwidth when checkpoint is connected

24399

inside

Collaborator

24398

Identity Agent - Auto Detecting gateway

24307

Solved

inside

Contributor

24301

Custom HotFix Installation Procedure

24300

Solved

inside

Contributor

24300

VOIP with H323 over remote access VPN not working on R80.10

24300

inside

Collaborator

24300

High cpu utilization on RAD Process

24300

Solved

inside

Collaborator

24300

Exporting/Importing of Objects (R80.20)

24300

inside

Participant

24299

Password hashes, sha512 and the expert password

24299

inside

Participant

24299

Allow Office 365 services in Application Control & Url Filtering

24299

inside

Participant

24206

Checkpoint Advanced OSPF Capability

24206

inside

Contributor

24202

Lightboard Series: High Availability Architecture with R80.10

24200

inside

Advisor

24200

R80 SmartConsole Unable to connect to server

24200

Solved

inside

Participant

24199

Test bandwidth/speed from Gaia

24199

Solved

inside

Collaborator

24199

High Cpu utilization - Internet Speed drops to very low level

24199

inside

Collaborator

24100

Private to Private NAT on IPSEC VPN

24100

inside

Participant

24099

How ping works with a ClusterXL?

24099

Solved

inside

MVP Gold

24099

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

24099

inside

Contributor

24099

Finding main IP of any managed gateway

24099

inside

Participant

24000

TCP connection failure port=18191 [error no. 10]

23999

inside

Employee

23899

Log Exporter and Elasticsearch

23899

Solved

inside

Advisor

23899

Firewall Log Archive and Import in R80.10/ R77.30

23898

inside

Collaborator

23898

IPsec VPN [NATting intresting traffic] config help

23898

Solved

inside

Advisor

23799

Policy Install Failed - Problem With The Commit Function

23799

Solved

inside

Advisor

23799

Add Interfaces To VSX Bond Group?

23799

inside

Participant

23799

Document related to OPSEC configuration

23798

Solved

inside

Explorer

23798

Check Point Gateway CLI Uptime vs last reboot command output Not Matched (Doubt)

23798

inside

Contributor

334

Sessions dropping : fw_handle_old_conn_recovery on long-lived UDP flows

334

Solved

inside

Advisor

2541

Repeated debug error messages in fwk.elg

2541

Solved

inside

Explorer

1561

Confused in VSX CoreXL instance configuration

1561

Solved

inside

Collaborator

650

Threat Prevention Custom Policy

650

inside

Advisor

525

Threat Extraction in ElasticXL / Maestro – handling of original files?

281

Solved

inside

Contributor

3422

it is not possible to directly request information about groups and Active Directory

1381

Solved

inside

Contributor

462

Changing ElasticXL Distribution Mode

462

Solved

inside

MVP Diamond

41248

Mac standalone Endpoint VPN - Negotiation with site failed

873

inside

Collaborator

389

NMSAAA9999 Invalid NAS IP address

389

inside

MVP Silver

402

About "CPNotEnoughDataForRuleMatch" and connection reset

10935

inside

MVP Diamond

1111

Policy Install Failed? Start Thinking in Processes, Not Only in Rules

1111

Solved

inside

Contributor

858

sk170857 - How to identify potential segmentations affected by VPN EDPC?

858

Solved

inside

MVP Silver

1471

Python reverse shell communicating over ports 80 or 443

642

inside

Participant

23465

Restrict VPN access by GEO location

23465

inside

Collaborator

1506

ElasticXL with VSNext Deployment – Secondary Appliance Initial Configuration Clarification

1506

inside

Collaborator

409

VoIP Traffic Application Control Objects vs Port Objects

409

Solved

inside

Participant

1160

Error "You cannot activate both the Firewall and Endpoint Policy Management on the same sever"

1160

Solved

inside

Collaborator

562

R82: What is the need of different SSL certificates by gateway

562

Solved

inside

Collaborator

704

Removing member from ClusterXL

553

inside

Authority

1450

Site to Site VPN fails after installing the new hotfix for VPN auth bybass

909

inside

Participant

449

Is SG3600 suitable for upgrading to R82 ?

744

inside

Explorer

289

chekpoint and zscaler ipsec issue

289

Solved

inside

Participant

399

ElasticXL VSNext - Where Are VSwitches Created and Managed?

337

Solved

inside

Contributor

3205

R82.10 smartconsole: Evaluation License Expired

3205

inside

Explorer

282

Domain logserver locked for editing by fwm_user

282

inside

Contributor

7951

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

1630

inside

Contributor

747

web_api_show_package.sh - Script stopped running due to severe error!

747

inside

Advisor

2063

Endpoint client - Confusing input prompts

2063

inside

Participant

6073

how to mount windows file share on gaia r80.10 ?

6073

inside

Advisor

836

Wrong SmartConsole update package

836

inside

Collaborator

1679

root filesystem disk space and /run/podman/logs/events.log

1679

Solved

inside

Employee

8165

Harden Now: Preparing Check Point Gateways & Management for AI‑Driven Threats like Mythos

8165

inside

Contributor

555

CPSEMD low disk space - disk space left

555

inside

MVP Gold

442

VSX R82 Virtual Router creation fails: “The certificate is not valid”

737

inside

MVP Silver

1277

web site times out when going through firewall

1277

inside

Collaborator

435

MTA didn't send Non-Delevery-Report

435

inside

MVP Silver

423

Check Point Disk Troubleshooting - df and du Commands Explained

423

inside

Contributor

1745

R81.20 Take 127 to R82 T779 MDS HA Secondary upgrade fails: “Upgrade to this version is prohibited.

1745

inside

Collaborator

236

MTA TE: Cannot retrieve original password-protected PDF via UserCheck (Blocked by Policy)

236

Solved

inside

Collaborator

1215

SmartConsole Administrator external authentication

473

inside

Explorer

332

How to view the list of banned IPs in VPN SNX

332

inside

Contributor

524

[MANAGEMENT] - High Consumption

524

inside

Explorer

324

"Interface leads to DMZ" setting

704

Solved

inside

Collaborator

1597

Primary SMS upgrade from R81.10 to R82 fail

1597

inside

MVP Gold

853

The Scalable Platform Migration Tool - Refresh question

853

inside

MVP Diamond

4430

HTTPS Inspection Is Not “Just Decryption”: It Is a TLS Enforcement Pipeline

4430

inside

Admin

845

Identity Awareness Best Practices May 2026: Video and Slides

845

inside

Collaborator

544

VSNext on ElasticXL (R82+) with Shared External/Campus vSwitches and Internal Transit vSwitch

544

inside

MVP Gold

1182

List of CVE and half a solution

1182

Solved

inside

MVP Silver

2723

Post-Migration Issue: Lost HTTPS and External SSH Access to Cluster Member

1353

inside

Participant

400

Compatible Smart Console version for Security Gateway with version 80.40

3527

Solved

inside

Explorer

410

Check Point 3900 – Using SFP+ ports (eth10/eth11) for Cluster Sync instead of default eth9

500

inside

Advisor

367

Large File download emulation responses

367

Solved

inside

Contributor

28086

I have a question about the LACP (8023AD) Bond interface.

28086

Solved

inside

Participant

447

Cluster XL Load sharing unicast mode Traffic forwarding interface

447

inside

Explorer

842

Performance Limitations of Virtual Switches in a VSX Environment

14263

Solved

inside

Collaborator

763

Why Standby SMS show No communication ?

763

inside

Collaborator

343

Web Access PT content-security-policy header issues

343

inside

MVP Gold

984

Disk usage and cleanup audit report

984

inside

Explorer

610

Limit the version of Check Point Mobile for Windows

610

inside

MVP Gold

326

identity awareness agent over site to site vpn

326

Solved

inside

Explorer

623

Two interoperable devices with same encryption domain for VPN failover?

623

inside

Participant

1442

DR Scenario - ClusterXL Split Brain Mode

1442

inside

Employee

1671

Introducing Agentic Network Security Orchestration - The Future of Network Security Is Here

1671

inside

MVP Silver

1340

Adding Zscaler cloud IP addresses as updatable object

2401

inside

MVP Diamond

1138

Smart-1 6000-L: Installation Recovery Using VGA Access

1138

inside

Contributor

2410

Recommended IPS “Additional Activation” Categories for Banking/Financial Environments?

757

inside

MVP Silver

559

Impact when disabling DES/3DES for Endpoint VPN clients?

904

Solved

inside

Participant

7673

Export a huge amount of logs to CSV file

7673

inside

Admin

1904

Web Filtering Best Practices May 2026: Video and Slides

1904

Solved

inside

Participant

802

Go to Threat Wiki (link) > Check Point Research = error 404

802

inside

MVP Silver

811

ElasticXL: From single site Active/Active to dual site Active/Standby

811

inside

MVP Silver

1115

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

1115

inside

Collaborator

10940

Help with disk space issue - Checkpoint support not helping

10940

inside

Contributor

428

VSX Cluster R81.20 with Virtual Router: Best Practice for Dual ISP / Multi-WAN Configuration

428

inside

Explorer

750

Check Point ElasticXL integration with FortiGate firewall

750

inside

Contributor

1530

SmartConsole shows No License and Contract is expired messages for IPS, AV, Application

1530

Solved

inside

MVP Gold

1698

R82 MDM/MLM on XL-6000 Appliances SmartConsole slowness

1633

inside

Explorer

1076

Microsoft Teams - QoS setup on firewall

1076

inside

Participant

390

Migration of Rules from Smart-1 Cloud to on-premises management system

390

Solved

inside

Contributor

4536

Checkpoint VSX with Both L2 (Bridge mode) VS and L3 VS

473

Solved

inside

MVP Diamond

6728

ElasticXL (R82) vs ClusterXL Load Sharing — what changes in practice (architecture, traffic, sync, a

6728

Solved

inside

Explorer

1127

CP Standalone Remote Access VPN Client for macOS Tahoe 26.3

1127

inside

MVP Diamond

509

Threat Emulation in production: how to run “zero-day control” without becoming a bottleneck

509

inside

MVP Diamond

2030

How to Roll Out IPS Updates Safely

2030

inside

Collaborator

523

R81.20 Local TE - Constant 10-minute delay on MTA/MFP scans

523

inside

MVP Diamond

948

Management-HA: Address spoofing error for FW_Log when gateway sends logs cross-site

948

inside

Advisor

601

AIOps alerts and penalty box configuration

601

inside

Explorer

703

Gaia WebUI / Admin Login Page Not Opening After Configuration on Check Point R77.20 VMware Lab

703

inside

MVP Diamond

533

Missing Undo (Crtl-Z) in SmartConsole

533

inside

MVP Gold

918

hping/netcat removal from R82.10

918

Solved

inside

Contributor

787

Restrict Access to Gaia Web Interface When RAVPN is in use

787

inside

Participant

1240

Issues with 19200 Appliance migration: ICMP over VPN (UPPAK) and Driver Incompatibility (KPPAK)

1240

Solved

inside

Collaborator

650

IPS Global Exceptions and Custom Policy

650

inside

Explorer

385

Vulnerability scanner shows port 80 unsecured on 9100 gateway

385

Solved

inside

Participant

1790

HTTPS Inspection is always bypassed - "Inspection is not Required"

1790

inside

MVP Platinum

1287

Step by step guide for penalty box R82 and R81.20

1287

Solved

inside

Collaborator

6403

Check point vulnerable to CVE-2026-31431?

6403

Solved

inside

Explorer

476

Prohibit the use of SSLv1, SSLv2, SSLv1 and TLSv1.0, TLSv1 protocols.1. Use TLSv1 protocols.2 and TL

476

inside

Advisor

771

[Action Required] – Important notification to Customer with Threat Emulation blade enabled – An Upda

771

inside

Collaborator

1422

Gaia Portal recognized a non-valid values

1422

inside

MVP Diamond CHKP

1323

How to Understand and Approach IPv8 if It Becomes a Standard?

1323

inside

MVP Diamond CHKP

614

ClusterXL and Some Options to verify on ElasticXL

614

inside

Participant

336

Remote and local backups failing or not running

336

Solved

inside

Contributor

1811

Fresh Install of R82 into VMWare - ERR_CONNECTION_REFUSED before First Time Wizard started

1811

inside

Contributor

414

Some users experienced an immediate logout from Mobile Access

689

inside

Contributor

266

Logs failing to send from firewall to remote SMS logger

266

Solved

inside

Explorer

413

The requirement to adjust the Information Security Regulator

413

inside

Participant

563

Remote Access VPN - identity sources- username format

563

inside

Admin

2026

Troubleshooting 101 April 2026: Video and Slides

2026

Solved

inside

Explorer

2250

R82.10 fail to install on xcp-NG no drive detected

2250

Solved

inside

Advisor

1099

VSX Migration 6400 → 9700 with Bond Redesign (4→2 Interfaces) – vsx_util Reconfigure Limitations?

1099

inside

Collaborator

906

Block Firewall Rule matched but still able to access page ?

906

Solved

inside

MVP Silver

949

sk156072 - Domain migration - SMS to DMS

949

inside

Advisor

2644

Sync Status: Off - SIC failure

2644

inside

Contributor

1230

IP Reputation exception is not working

1230

inside

Participant

586

Rules Migration from Smart-1 Cloud Management to Onpremise Management

586

inside

Explorer

815

On premise Datacenter objects within smart 1 cloud

815

inside

MVP Silver

487

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

487

Solved

inside

Explorer

1739

Recommended Jumbo Hotfix for R82 Recommended

1739

inside

Collaborator

749

First Time Access Issue- AWS Checkpoint Management Server

376

inside

Contributor

991

Identity propagation ClusterXl members

991

inside

Collaborator

2058

Email notification when backup fails

2058

Solved

inside

Authority

853

Blink answers.xml and ElasticXL

615

inside

Employee

302

HTTPS Inspection Troubleshooting Evidence-Driven Runbook (Gateway CA, QUIC, pinning, proxy, and ws

9994

Solved

inside

MVP Diamond CHKP

25275

Certificate and CRL validation fails from March 1, 2026

25275

inside

Explorer

912

ISP Redundancy Load Sharing Issue w/ 2 BGP Peers (inactive route from one peer)

912

Solved

inside

Contributor

7212

Data received before SYN was acknowledged. Stripping all packet data

7212

Solved

inside

Participant

521

Upgrade to R81.20 from R81.10 - VSX Environment - is VSLS required?

521

inside

Contributor

3223

VPN Redundancy without using Dynamic Routing

3223

inside

Participant

614

DNS Resolution Issue for Spoke Firewalls over MPLS (Using External IP Instead of Internal)

614

inside

Contributor

884

Web Application Not Working whin using SSL VPN

884

inside

Participant

1219

VSNext and TACACS+ authentication - defining TACP-15 for non-local Gaia admin user

1219

Solved

inside

MVP Diamond

3208

SIC Redundancy in Deployments with Internet-Based Management – Design Question

3208

inside

Contributor

597

SSL VPN WITH STATICALLY NATED IP

597

Solved

inside

MVP Diamond

54981

Check Point Packet Trace Utility

54981

inside

Contributor

476

Smart1-Cloud Policy install fails on R82 SPARK gateways on first run or when running in parallel

476

inside

Collaborator

8086

Funny IP on show configuration

8086

Solved

inside

Participant

1355

Maintenance and Upgrades Best Practices Americas May 2025 Video and Slides

2729

inside

Contributor

830

DynamicID integration with Internal SMTP Relay

830

inside

MVP Silver

1587

Updatable Geo Objects categorize IP as from the wrong country

1587

Solved

inside

Explorer

3191

It is necessary to select certain SNMP traps when working internal_snmp_trap

3191

inside

Advisor

810

SNX not working after portal certificate change

810

Solved

inside

Contributor

752

Unable to Boot R82 ISO in VMWare

752

inside

Participant

1140

Identity awareness - Linux bastion users

1140

Solved

inside

Participant

3553

Quantum spark ipsec tunnel using vti interface

3553

inside

Contributor

542

Core protection "SMTP STARTTLS Command"

542

Solved

inside

Contributor

1675

Configuring DynamicID to use Internal SMTP server

1675

inside

Participant

346

Handling Log Exporter in Management HA with dual "Primary" log servers.

346

inside

Participant

758

Cannot establish SIC between VSX gateway and SMS in ElasticXL VSNext setup R82

758

inside

Explorer

727

Manual NAT with Port Forwarding on Check Point Virtual GW

727

inside

MVP Silver

605

Check Point ISP Redundancy Explained | Dual Internet Setup + Failover Demo

605

inside

Contributor

838

Services don't work on Quantum Spark 1600

838

Solved

inside

Contributor

9898

Zero Phishing and IOS 18.4: Captive Portal Problem

9898

inside

Collaborator

3258

Change interfaces of a bonding group

1068

inside

Contributor

361

Issue with routing based on ABR/PBR

361

inside

Participant

610

Different compliance check rules can be set up for SSL VPN

610

inside

Participant

751

What's New in R82.10 April 2026

3737

inside

Collaborator

1857

Export Objects - Applications / Categories and Network Objects

1857

inside

Explorer

2130

Help on process to export historical VPN users

2130

inside

Participant

1603

Packet Loss and Traffic Drops Caused by ARP Table Overflow in Layer 2 Core Topology

1603

Solved

inside

Explorer

1849

Unable to find reason for RX_DRP

1849

inside

Employee

2247

Introducing LogHub: Unified Log Aggregation for Quantum Gateways

2247

Solved

inside

Contributor

1174

Issue with mobile access client connecting to 3rd party ipsec vpn servers

1174

Solved

inside

Advisor

1693

Issue running management via Harmony SASE

1693

Solved

inside

Participant

5457

LDAPS connections from the gateway will be downgraded to the legacy certificate validation.

5457

inside

Explorer

620

Issue faces in integrating Open ldap v3 in checkpoint firewall

620

Solved

inside

Advisor

1749

Export Specific Rules to CSV for a given object

6158

inside

Contributor

373

MANUAL-NAT ON CHECKPOINT VIRTUAL GW

373

Solved

inside

Contributor

1218

Block MobileAccess/VPN Client Access from unwanted countries

1218

inside

Contributor

803

SMS & Security Gateway Upgrade

803

inside

Participant

1403

Recommended method of Upgrade of Management Server from R81.20 to R82 - VSX

1403

Solved

inside

Participant

3005

SmartConsole Unknown Error (0x2ee2) and Gaia Login Stuck

3005

inside

MVP Gold

619

R82, VSX Main, Maestro, and MLM logging - sanity check

356

inside

Admin

1082

Check Point plans for TLS Certificate Lifetime Reduction

1082

Solved

inside

Participant

3199

The IP quantity limit of a NetworkFeed

3199

inside

Participant

1114

Quantum Spark 2560 failover after every configuration change

1114

inside

MVP

835

🚀 Web SmartConsole – Take 164, 165 & 167 Updates + What’s Coming Next

835

Solved

inside

Advisor

1484

GAIA WebUI Login Events Not Visible in SmartConsole Audit Logs

7123

Solved

inside

Participant

1865

Unexpected fwFullyUtilizedDrops with low CPU – how to identify the source?

1865

Solved

inside

Participant

1007

Persistent fwFullyUtilizedDrops on 26000 appliances (R81.20) – Is disabling SMT a valid next step?

1007

inside

Collaborator

536

Management Network for remote site (dark fiber)

536

Solved

inside

Participant

3193

Can we use Dell R760 as Open Server?

3193

inside

MVP Diamond CHKP

441

How to Mass Create Users, Groups, and Policies on Linux – Step by Step Script Walkthrough

441

Solved

inside

Advisor

16633

Disable expert mode audit log/notification nagware/adware

16633

inside

MVP Diamond CHKP

442

How to Automatically Backup Device Configurations – Step by Step Script Walkthrough

442

inside

MVP Diamond CHKP

382

Creating Interoperable Devices via CLI with an Interactive bash

382

inside

MVP Diamond CHKP

371

Simplifying Meshed VPN Community Creation with an Interactive Bash

371

inside

MVP Silver

851

Automating Static Route Redistribution into BGP with an Interactive Workflow

338

inside

Participant

319

Starlink High Performance Integration

319

inside

MVP Diamond CHKP

286

Check Point Host Batch Creator for Efficient Object Management

286

inside

Explorer

1031

A Practical Quantum Approach to Automation: Built, Tested, and Shared

334

inside

MVP Diamond CHKP

332

Simplifying Interface Configuration on GWs Quantum

332

inside

Contributor

936

R81.20 Failed to resolve VPN MEP gateway

936

inside

Explorer

390

🚀 Web SmartConsole Take 155 - Coming This Week!

6925

inside

MVP Diamond

776

IPS: How to Filter Events by CVE/Protection and Troubleshoot Signatures (Real-Time + Historical)

776

inside

Explorer

1652

Why the IPS blade prevent Checkpoint update.

1652

Solved

inside

Contributor

667

Compliance poor security - VPN114

667

inside

Participant

404

After upgrading management to R82, nat hitcount does not work on gateway on R81.20

404

Solved

inside

Participant

943

BankBot banking trojan got into Google Play again, this time embedded in a game called ‘Jewels Star Classic’.

2167

inside

Explorer

464

SIC error 325 on Install Policy — R82.10 Cross-AZ Cluster in AWS

1741

inside

Advisor

2201

Sending Syslog to logging server pt 2

2201

inside

MVP Diamond CHKP

619

DynamicID with email OTP not sending OTP

977

inside

Collaborator

661

Customize Field/Column Suggestions for Log Search?

927

Solved

inside

Collaborator

1314

Threat Emulation policy action "Send"

1314

inside

Collaborator

3196

Checkpoint Backup using SolarWind NCM

3196

inside

Collaborator

1499

Multi-Domain (MDS/DMS) — HA, Sync, and Advanced Troubleshooting (Field Runbook)

650

inside

Employee

488

Bash script for IP Address Report Generator

488

inside

Employee

407

Bash application to copy CMA policy with the MDS command line

407

inside

Explorer

424

Adding Exception Source have multiple IP

424

inside

Explorer

375

Question regarding cloning Microsoft_AD profile to limit impact of SupportOldSchema parameter

375

inside

MVP Diamond

1461

Can't route another network to my site to site VPN tunnel

1931

inside

Explorer

1198

ISP Redundancy Load Sharing

1198

No messages.

Firewall & Security Management

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800/2000/2500), see the Spark Firewall space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

Virtual

Wed 07 Oct 2026 @ 11:00 AM (EDT)

TechTalk: Scaling Check Point Automation with Arodonata

Virtual

Thu 08 Oct 2026 @ 11:00 AM (EDT)

Under the Hood: Check Point SASE | Zero Trust Network Access, Step by Step

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

In-Person

Wed 21 Oct 2026 @ 09:00 AM (BST)

AI Security Workshop - Glasgow

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?