Firewall & Security Management

Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT

AI Security Masters
LGTM: Bypassing an LLM Build Gate
When Prompt Injection Fails

What's New in Check Point SASE

Watch Now!

The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses

Watch Now!

CheckMates Go:
Half is Not Enough

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Employee

32699

IPSec VPN tunnel with Fortinet

32599

Solved

inside

MVP Diamond

32399

Checkpoint endpoint VPN with Microsoft 2-Factor Authentication.

32300

inside

Contributor

32300

How can I avoid "Host Port" scan?

32300

Solved

inside

MVP Gold CHKP

32299

R77.30 VSX appliance upgrade to R80.10

32299

Solved

inside

Advisor

32299

Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

32299

Solved

inside

Collaborator

32200

Get SKU, MAC, and Serial Number of Appliance thru CLI

32200

inside

Participant

32199

Connect Smart-1 Cloud to local Active Directory

32199

Solved

inside

Champion

32100

SmartConsole AD Authentication

32097

Solved

inside

Contributor

31999

Has SmartView Tracker been eliminated?

31999

inside

Explorer

31900

First packet isn't Syn; tcp_flags: ACK

31900

Solved

inside

Participant

31800

Checkpoint Management Log Size Problem

31800

Solved

inside

MVP Silver

31799

Check Point Application Control and URL filtering custom applications not behaving like expected

31799

Solved

inside

Participant

31699

Change Standby Member to Active Member

31599

Solved

inside

Participant

31599

ClusterXL - standby cannot reach gateway

31599

inside

Advisor

31500

How to create a custom application with custom services?

31499

inside

Advisor

31400

Exporting Check Point logs over syslog (LogExporter) with Log Server (CP)

31400

Solved

inside

Participant

31400

Adding an interface in ClusterXL High Availability

31400

inside

Participant

31399

How to Remove an Interface from Checkpoint Firewall

31399

Solved

inside

Advisor

31299

Gaia build number list including HFAs - does it exist?

31299

Solved

inside

Collaborator

31207

Report Server wont boot, cant get into maintenance mode

31207

Solved

inside

Contributor

31200

Cisco port channel member is suspended

31099

Solved

inside

Collaborator

31099

SandBlast and links inside email

31099

inside

Contributor

31000

Increasing disk space vg_splat-lv_current

31000

Solved

inside

Participant

31000

Using R80 and need to send logs to a Splunk server. Any idea how?

31000

inside

Participant

30999

what information do we need from the remote site customer when creating site to site VPN?

30999

inside

Participant

30900

Error installing SmartConsole R80

30900

Solved

inside

Advisor

30900

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

30900

Solved

inside

Participant

30899

Apple services not working with HTTPS inspection

30899

inside

Employee Alumnus

30898

Packet Mode, a new way of searching through your security policy in R80.10

30898

inside

Employee Alumnus

30800

AW keeps deleting Dameware Service

30800

Solved

inside

MVP Diamond

30800

HTTPS inspection certificate question

30800

Solved

inside

Contributor

30799

WMI Permission denied - From this months Windows Update

30799

Solved

inside

Mentor

30699

IPS Analyzer Tool - are you running it?

30699

inside

Participant

30699

Commvault Installer :CPU Spikes on Checkpoint

30699

inside

Participant

30699

Terrible performance IPHTTPS - Checkpoint SG 15600

30699

inside

Collaborator

30697

How to block some https sites?

30697

inside

Explorer

30600

Best practices for inline layers

30600

inside

Explorer

30501

Policy installation in SmartDashboard fails with: Reason: TCP connectivity failure ( port = 18191 )( IP = X.X.X.X )[ error no. 10 ] Policy installation canceled.

30501

Solved

inside

Contributor

30500

How to add two IP in one interface

30500

Solved

inside

Advisor

30499

objects are locked but there no sessions can be takeover or published

30499

Solved

inside

MVP Silver

30400

White Paper - Integrating Custom IOC Feeds

30299

inside

Participant

30299

Legitimate traffic being blocked - R80.20

30299

inside

Champion

30299

Traffic is originating from a VS with the VSX internal communication address

30299

inside

Advisor

30299

What is the best approach to troubleshoot "slow connections"?

30299

Solved

inside

Contributor

30199

Smartview stuck as loading smartview.. in R80.20

30199

Solved

inside

Explorer

30099

R80 SmartReporter : how to do a report "rule base analysis"? is it possible ?

30099

inside

Collaborator

30098

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

30001

inside

Admin

30000

Check Point R80.20 Demo TechTalk and Q&A

30000

inside

Explorer

29999

How to Check Point upgrade R77.30 to R80

29999

Solved

inside

Mentor

29905

Where did all my IPS Protections go?

29905

Solved

inside

Collaborator

29799

LOM password reset on 5600 and 12400 appliances

29799

Solved

inside

Contributor

29799

Difference between Session and Connection??

29799

Solved

inside

Participant

29699

Check Point’s First Management Feature Release is now available!

29600

inside

Mentor

29599

GUI client unable to access R80.10 management server behind firewall

29599

inside

Contributor

29599

New Install Security Management Server

29599

Solved

inside

Participant

29499

How to extend and enhance SmartConsole?

29400

Solved

inside

Contributor

29399

Blocking malicious IP addresses (sk103154) in VSX

29399

Solved

inside

Participant

29399

R80 and R80.10 SmartView Monitor VPN List

29399

inside

Contributor

29299

Strange issue Checkpoint R77.30 site-to-site VPN with Cisco ASA

29299

inside

Advisor

29297

Anti-Bot & Anti-Virus, IPS update error on Standby Member

29201

inside

MVP Gold CHKP

29200

MDS backup too big and slow in R80.10

29200

inside

Advisor

29199

IN /VAR/LOG/messages keep getting Stopping CUL mode

29198

Solved

inside

Contributor

29100

Block WhatsApp Uploads/Downloads

29100

inside

Contributor

29099

Difference between log files and log indexes

29099

Solved

inside

Advisor

29099

VM specifications for the R80.20.M1

29000

inside

Explorer

29000

Home Lab Setup - How are you doing it?

28900

inside

MVP Gold

28899

HTTPS Certificate validation - SK159872

28899

Solved

inside

Contributor

28799

Lightboard Series: R80.10 High Availability in Multi Domain Environments

28703

inside

Participant

28699

How to simulate & virtualize Real life deployments

28699

Solved

inside

Contributor

28600

At least one DC is currently disconnected

28600

Solved

inside

Contributor

28500

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

28500

inside

MVP Diamond

28500

Installation & Upgrade problems from R77.x to R80.x

28399

Solved

inside

Contributor

28303

vpn issue since R80.10 - Check Point to Fortigate (behind NAT router)

28299

Solved

inside

Advisor

28200

R81.20 TechTalk webinar - Network Feed Objects

28200

Solved

inside

Employee Alumnus

28099

How to export all result for the SmartLog query shows

28099

Solved

inside

Participant

28098

Encryption Failure: according to the policy the packet should not have been decrypted

28098

inside

Participant

27999

Maximum number of routing entries checkpoint fw

27999

Solved

inside

Employee

27999

Identity Awareness - Could not connect to AD server

27999

Solved

inside

Participant

27999

CPview and Top-connections in R80.20

27999

Solved

inside

Contributor

27999

I have a question about the LACP (8023AD) Bond interface.

27999

inside

Advisor

27900

Identity Collector: ISE and AD continually over-writing each other on the PDP

27900

inside

Collaborator

27900

Firewall HA status (health check)

27900

inside

Advisor

27899

Block traffic coming from known malicious IP addresses

27899

Solved

inside

Collaborator

27800

Updatable objects - no longer available

27800

inside

Explorer

27800

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

27800

inside

Collaborator

27799

How to monitor bandwidth limit for application control

27799

inside

Participant

27700

how to filter traffic log by using CLI ?

27700

Solved

inside

Advisor

27699

Trying to add hosts in mgmt_cli using csv file

27599

Solved

inside

Participant

27599

How to display unsaved changes in R80

27599

Solved

inside

Contributor

27599

Service Object - Match for Any

27502

inside

Contributor

27500

Identity Collector Not Collecting dot1x sessions from Cisco ISE

27500

inside

Contributor

27499

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

27499

Solved

inside

MVP Diamond

27499

Searching Network Objects in R80.xx is crippled

27399

inside

Collaborator

27399

How to monitor virtual systems on VSX?

27300

Solved

inside

Contributor

27299

NAT Loopback configuration problem in R80.10

27299

Solved

inside

Participant

27202

Default route on Standby Member not showing

27202

Solved

inside

Contributor

27200

Not substituted certificate in browser Https Inspection

27200

inside

Collaborator

27199

Windows Update Services with HTTPS inspection enabled

27199

Solved

inside

Contributor

27100

TCP Packet out of state, First Packet is not syn

27001

Solved

inside

MVP Diamond

26999

MDS Upgrade failing from R80.10 to R80.30 (solved)

26999

inside

Collaborator

26999

Upgrading Provider-1 MDM from R77.30 to R80.10

26999

Solved

inside

Contributor

26999

VPN problems - Clear text packet should be encrypted

26999

Solved

inside

Contributor

26900

Need CLI Command to see Interfaces and Associated IP Information

26900

inside

Participant

26899

R80.20 HTTPS Inspection Bypass for Office365

26899

Solved

inside

Contributor

26899

cphaprob status showing down cause by routed

26899

inside

Contributor

26899

Installing VSX on on VMware ESXi

26800

Solved

inside

Contributor

26799

Threat Prevention policies after R77.30 to R80.10 migration. Is it correct?

26799

Solved

inside

Advisor

26799

SmartConsole Rule Logs - Display Issue

26799

inside

Contributor

26700

Subinterface down, results in failover

26700

Solved

inside

Participant

26699

Is there SNI support for inbound HTTPS inspection in R80.20?

26699

inside

Collaborator

26699

Maintenance actions that should be performed by admins

26699

Solved

inside

Contributor

26699

VPN community routing not working

26699

Solved

inside

Contributor

26694

Checkpoint R81.20 Logging Issue

26694

inside

Contributor

26600

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

26600

Solved

inside

Participant

26600

Why CP drops RST-ACK packets from client?

26600

inside

Advisor

26599

Cipher Configuration Tool (CCT)

26599

inside

Collaborator

26500

Wrong peer gateway for decrypted packet (VPN Error code 01)

26500

inside

Advisor

26500

Allow an encrypted communication channel between servers

26499

Solved

inside

Advisor

26400

Error: At least one DC is currently disconnected

26400

Solved

inside

Contributor

26399

HTTPS Inspection and Office 365 - Anyone got it playing nicely?

26300

Solved

inside

Contributor

26299

Restricting Remote Access by IPv4 Address

26299

inside

Contributor

26204

VSX cluster problem - are we alone?

26204

inside

Mentor

26200

What are IPS Staging Protections? And how do we clear them?

26200

inside

Contributor

26200

Notify when certificate expired

26099

inside

Collaborator

26099

How to count objects of a group

26099

Solved

inside

Collaborator

26099

Usercheck Block Page is Insecure/Private

25999

inside

Contributor

25999

SecureXL DoS Rate Limiting (samp rules)

25899

inside

Advisor

25899

Identity sharing - how to change modes

25899

inside

Participant

25899

Solutions for backup/restoring individual MDS Domains.

25899

inside

Advisor

25899

Checkpoint to Azure Route based - guide

25899

inside

Contributor

25899

URL Filtering Troubleshooting Help

25899

inside

Collaborator

25800

Cluster XL - Failover due to Fullsync PNOTE ON

25800

Solved

inside

Collaborator

25799

URL Filtering Pornography Category not Working - Custom Application Works

25799

Solved

inside

Contributor

25699

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

25699

inside

Admin

25602

How do I verify Threat Emulation is working?

25602

inside

MVP Gold

25599

Is it advisable to change affinity in my scenario?

25599

Solved

inside

MVP Gold

25599

Certificate and CRL validation fails from March 1, 2026

25403

Solved

inside

Collaborator

25400

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

25400

inside

Contributor

25399

F5 BIG-IP ICAP and SandBlast (TEX)

25399

inside

Participant

25399

DHCP server configuration on GAIA R80.20

25399

inside

MVP Gold

25399

Error: 'IPS' is not responding

25300

inside

Contributor

25299

R80.10 SmartConsole Gateway & Servers Status

25299

inside

Participant

25299

Displaying transceiver properties

25299

Solved

inside

Contributor

25200

Gaia r80.10 tag vlan 1 and native vlan

25200

inside

Advisor

25200

BGP over VPN between Azure.docx

25200

Solved

inside

Collaborator

25200

Can't monitor secondary node over IPSec tunnel

25199

Solved

inside

Collaborator

25101

Regular Expression in Application And URL Filtering

24900

inside

Contributor

24900

Site to Site Route Based VPN in Checkpoint

24900

inside

Admin

24899

TechTalk: Advanced Threat Prevention Best Practices

24899

inside

Participant

24899

Firemon - Check Point R80.10 API not working.

24899

inside

Contributor

24801

Bypass HTTPS Inspection for a custom URL

24801

inside

Participant

24800

'TCP packet out of state' drops

24800

inside

Contributor

24800

Searching for Address Spoofing Logs in R80

24599

inside

Collaborator

24499

High cpu utilization on RAD Process

24499

Solved

inside

Participant

24498

Block Only YouTube not Google Applications

24498

Solved

inside

Collaborator

24496

R81 - SmartUpdate Package Repository

24496

Solved

inside

Explorer

24400

IPS issue (R80.20) - cannot remove IPS blade from GW object

24400

inside

Advisor

24400

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

24400

inside

Explorer

24400

Password hashes, sha512 and the expert password

24399

Solved

inside

Participant

24399

checkpoint Firewall audit for configuration change

24399

inside

Employee Alumnus

24399

How to debug Policy Installation Errors

24399

Solved

inside

Contributor

24399

VOIP with H323 over remote access VPN not working on R80.10

24399

inside

Participant

24399

Low bandwidth when checkpoint is connected

24399

Solved

inside

Advisor

24398

Identity Agent - Auto Detecting gateway

24398

inside

Collaborator

24398

Lightboard Series: High Availability Architecture with R80.10

24302

Solved

inside

Contributor

24301

Custom HotFix Installation Procedure

24300

Solved

inside

Collaborator

24300

Exporting/Importing of Objects (R80.20)

24300

inside

Participant

24299

Allow Office 365 services in Application Control & Url Filtering

24299

inside

Contributor

24299

Finding main IP of any managed gateway

24299

Solved

inside

Collaborator

24299

High Cpu utilization - Internet Speed drops to very low level

24299

inside

Participant

24206

Checkpoint Advanced OSPF Capability

24206

inside

Contributor

24202

R80 SmartConsole Unable to connect to server

24200

Solved

inside

Participant

24199

Test bandwidth/speed from Gaia

24199

inside

Participant

24100

Private to Private NAT on IPSEC VPN

24100

inside

Participant

24099

How ping works with a ClusterXL?

24099

Solved

inside

MVP Gold

24099

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

24099

Solved

inside

Explorer

23999

TCP connection failure port=18191 [error no. 10]

23999

inside

Employee

23899

Log Exporter and Elasticsearch

23899

Solved

inside

Advisor

23899

Firewall Log Archive and Import in R80.10/ R77.30

23898

inside

Collaborator

23898

IPsec VPN [NATting intresting traffic] config help

23898

Solved

inside

Advisor

23799

Policy Install Failed - Problem With The Commit Function

23799

Solved

inside

Contributor

23799

SSL Certificate Cannot Be Trusted (vulnerability)

23799

Solved

inside

Advisor

23799

Add Interfaces To VSX Bond Group?

23799

inside

Participant

23799

Document related to OPSEC configuration

23798

Solved

inside

Participant

2013

Log Exporter Sends Only a Few Syslog Blade Events to FortiAnalyzer and Exported Messages differ

2013

inside

Contributor

338

Sessions dropping : fw_handle_old_conn_recovery on long-lived UDP flows

338

Solved

inside

Advisor

2547

Repeated debug error messages in fwk.elg

2547

Solved

inside

Explorer

1575

Confused in VSX CoreXL instance configuration

1575

Solved

inside

Collaborator

663

Threat Prevention Custom Policy

663

inside

Advisor

528

Threat Extraction in ElasticXL / Maestro – handling of original files?

283

Solved

inside

Contributor

3435

it is not possible to directly request information about groups and Active Directory

1407

Solved

inside

Contributor

469

Changing ElasticXL Distribution Mode

469

Solved

inside

MVP Diamond

41349

Mac standalone Endpoint VPN - Negotiation with site failed

878

inside

Collaborator

392

NMSAAA9999 Invalid NAS IP address

392

inside

MVP Silver

409

About "CPNotEnoughDataForRuleMatch" and connection reset

10986

inside

MVP Diamond

1116

Policy Install Failed? Start Thinking in Processes, Not Only in Rules

1116

Solved

inside

Contributor

873

sk170857 - How to identify potential segmentations affected by VPN EDPC?

873

Solved

inside

MVP Silver

1483

Python reverse shell communicating over ports 80 or 443

652

inside

Participant

23503

Restrict VPN access by GEO location

23503

inside

Collaborator

1547

ElasticXL with VSNext Deployment – Secondary Appliance Initial Configuration Clarification

1547

inside

Collaborator

414

VoIP Traffic Application Control Objects vs Port Objects

414

Solved

inside

Participant

1181

Error "You cannot activate both the Firewall and Endpoint Policy Management on the same sever"

1181

Solved

inside

Collaborator

587

R82: What is the need of different SSL certificates by gateway

587

Solved

inside

Collaborator

713

Removing member from ClusterXL

562

inside

Authority

1453

Site to Site VPN fails after installing the new hotfix for VPN auth bybass

920

inside

Participant

455

Is SG3600 suitable for upgrading to R82 ?

754

inside

Explorer

294

chekpoint and zscaler ipsec issue

294

Solved

inside

Participant

405

ElasticXL VSNext - Where Are VSwitches Created and Managed?

343

Solved

inside

Contributor

3229

R82.10 smartconsole: Evaluation License Expired

3229

inside

Explorer

283

Domain logserver locked for editing by fwm_user

283

inside

Contributor

7990

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

1644

inside

Contributor

761

web_api_show_package.sh - Script stopped running due to severe error!

761

inside

Advisor

2073

Endpoint client - Confusing input prompts

2073

inside

Participant

6082

how to mount windows file share on gaia r80.10 ?

6082

inside

Advisor

847

Wrong SmartConsole update package

847

inside

Collaborator

1689

root filesystem disk space and /run/podman/logs/events.log

1689

Solved

inside

Employee

8177

Harden Now: Preparing Check Point Gateways & Management for AI‑Driven Threats like Mythos

8177

inside

Contributor

558

CPSEMD low disk space - disk space left

558

inside

MVP Gold

448

VSX R82 Virtual Router creation fails: “The certificate is not valid”

743

inside

MVP Silver

1290

web site times out when going through firewall

1290

inside

Collaborator

440

MTA didn't send Non-Delevery-Report

440

inside

MVP Silver

424

Check Point Disk Troubleshooting - df and du Commands Explained

424

inside

Contributor

1793

R81.20 Take 127 to R82 T779 MDS HA Secondary upgrade fails: “Upgrade to this version is prohibited.

1793

inside

Collaborator

245

MTA TE: Cannot retrieve original password-protected PDF via UserCheck (Blocked by Policy)

245

Solved

inside

Collaborator

1222

SmartConsole Administrator external authentication

488

inside

Explorer

337

How to view the list of banned IPs in VPN SNX

337

inside

Contributor

530

[MANAGEMENT] - High Consumption

530

inside

Explorer

327

"Interface leads to DMZ" setting

711

Solved

inside

Collaborator

1612

Primary SMS upgrade from R81.10 to R82 fail

1612

inside

MVP Gold

860

The Scalable Platform Migration Tool - Refresh question

860

inside

MVP Diamond

4454

HTTPS Inspection Is Not “Just Decryption”: It Is a TLS Enforcement Pipeline

4454

inside

Admin

847

Identity Awareness Best Practices May 2026: Video and Slides

847

inside

Collaborator

549

VSNext on ElasticXL (R82+) with Shared External/Campus vSwitches and Internal Transit vSwitch

549

inside

MVP Gold

1188

List of CVE and half a solution

1188

Solved

inside

MVP Silver

2749

Post-Migration Issue: Lost HTTPS and External SSH Access to Cluster Member

1364

inside

Participant

402

Compatible Smart Console version for Security Gateway with version 80.40

3541

Solved

inside

Explorer

414

Check Point 3900 – Using SFP+ ports (eth10/eth11) for Cluster Sync instead of default eth9

503

inside

Advisor

372

Large File download emulation responses

372

Solved

inside

Contributor

28154

I have a question about the LACP (8023AD) Bond interface.

28154

Solved

inside

Participant

458

Cluster XL Load sharing unicast mode Traffic forwarding interface

458

inside

Explorer

856

Performance Limitations of Virtual Switches in a VSX Environment

14307

Solved

inside

Collaborator

776

Why Standby SMS show No communication ?

776

inside

Collaborator

346

Web Access PT content-security-policy header issues

346

inside

MVP Gold

989

Disk usage and cleanup audit report

989

inside

Explorer

617

Limit the version of Check Point Mobile for Windows

617

inside

MVP Gold

329

identity awareness agent over site to site vpn

329

Solved

inside

Explorer

629

Two interoperable devices with same encryption domain for VPN failover?

629

inside

Participant

1459

DR Scenario - ClusterXL Split Brain Mode

1459

inside

Employee

1677

Introducing Agentic Network Security Orchestration - The Future of Network Security Is Here

1677

inside

MVP Silver

1353

Adding Zscaler cloud IP addresses as updatable object

2420

inside

MVP Diamond

1164

Smart-1 6000-L: Installation Recovery Using VGA Access

1164

inside

Contributor

2420

Recommended IPS “Additional Activation” Categories for Banking/Financial Environments?

768

inside

MVP Silver

562

Impact when disabling DES/3DES for Endpoint VPN clients?

911

Solved

inside

Participant

7684

Export a huge amount of logs to CSV file

7684

inside

Admin

1910

Web Filtering Best Practices May 2026: Video and Slides

1910

Solved

inside

Participant

835

Go to Threat Wiki (link) > Check Point Research = error 404

835

inside

MVP Silver

835

ElasticXL: From single site Active/Active to dual site Active/Standby

835

inside

MVP Silver

1120

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

1120

inside

Collaborator

11032

Help with disk space issue - Checkpoint support not helping

11032

inside

Contributor

440

VSX Cluster R81.20 with Virtual Router: Best Practice for Dual ISP / Multi-WAN Configuration

440

inside

Explorer

759

Check Point ElasticXL integration with FortiGate firewall

759

inside

Contributor

1556

SmartConsole shows No License and Contract is expired messages for IPS, AV, Application

1556

Solved

inside

MVP Gold

1711

R82 MDM/MLM on XL-6000 Appliances SmartConsole slowness

1641

inside

Explorer

1084

Microsoft Teams - QoS setup on firewall

1084

inside

Participant

392

Migration of Rules from Smart-1 Cloud to on-premises management system

392

Solved

inside

Contributor

4569

Checkpoint VSX with Both L2 (Bridge mode) VS and L3 VS

478

Solved

inside

MVP Diamond

6825

ElasticXL (R82) vs ClusterXL Load Sharing — what changes in practice (architecture, traffic, sync, a

6825

Solved

inside

Explorer

1139

CP Standalone Remote Access VPN Client for macOS Tahoe 26.3

1139

inside

MVP Diamond

513

Threat Emulation in production: how to run “zero-day control” without becoming a bottleneck

513

inside

MVP Diamond

2041

How to Roll Out IPS Updates Safely

2041

inside

Collaborator

530

R81.20 Local TE - Constant 10-minute delay on MTA/MFP scans

530

inside

MVP Diamond

955

Management-HA: Address spoofing error for FW_Log when gateway sends logs cross-site

955

inside

Advisor

605

AIOps alerts and penalty box configuration

605

inside

Explorer

709

Gaia WebUI / Admin Login Page Not Opening After Configuration on Check Point R77.20 VMware Lab

709

inside

MVP Diamond

537

Missing Undo (Crtl-Z) in SmartConsole

537

inside

MVP Gold

924

hping/netcat removal from R82.10

924

Solved

inside

Contributor

799

Restrict Access to Gaia Web Interface When RAVPN is in use

799

inside

Participant

1262

Issues with 19200 Appliance migration: ICMP over VPN (UPPAK) and Driver Incompatibility (KPPAK)

1262

Solved

inside

Collaborator

667

IPS Global Exceptions and Custom Policy

667

inside

Explorer

386

Vulnerability scanner shows port 80 unsecured on 9100 gateway

386

Solved

inside

Participant

1814

HTTPS Inspection is always bypassed - "Inspection is not Required"

1814

inside

MVP Platinum

1291

Step by step guide for penalty box R82 and R81.20

1291

Solved

inside

Collaborator

6440

Check point vulnerable to CVE-2026-31431?

6440

Solved

inside

Explorer

483

Prohibit the use of SSLv1, SSLv2, SSLv1 and TLSv1.0, TLSv1 protocols.1. Use TLSv1 protocols.2 and TL

483

inside

Advisor

775

[Action Required] – Important notification to Customer with Threat Emulation blade enabled – An Upda

775

inside

Collaborator

1435

Gaia Portal recognized a non-valid values

1435

inside

MVP Diamond CHKP

1327

How to Understand and Approach IPv8 if It Becomes a Standard?

1327

inside

MVP Diamond CHKP

618

ClusterXL and Some Options to verify on ElasticXL

618

inside

Participant

340

Remote and local backups failing or not running

340

Solved

inside

Contributor

1825

Fresh Install of R82 into VMWare - ERR_CONNECTION_REFUSED before First Time Wizard started

1825

inside

Contributor

421

Some users experienced an immediate logout from Mobile Access

703

inside

Contributor

268

Logs failing to send from firewall to remote SMS logger

268

Solved

inside

Explorer

417

The requirement to adjust the Information Security Regulator

417

inside

Participant

570

Remote Access VPN - identity sources- username format

570

inside

Admin

2035

Troubleshooting 101 April 2026: Video and Slides

2035

Solved

inside

Explorer

2267

R82.10 fail to install on xcp-NG no drive detected

2267

Solved

inside

Advisor

1117

VSX Migration 6400 → 9700 with Bond Redesign (4→2 Interfaces) – vsx_util Reconfigure Limitations?

1117

inside

Collaborator

919

Block Firewall Rule matched but still able to access page ?

919

Solved

inside

MVP Silver

957

sk156072 - Domain migration - SMS to DMS

957

inside

Advisor

2645

Sync Status: Off - SIC failure

2645

inside

Contributor

1242

IP Reputation exception is not working

1242

inside

Participant

588

Rules Migration from Smart-1 Cloud Management to Onpremise Management

588

inside

Explorer

821

On premise Datacenter objects within smart 1 cloud

821

inside

MVP Silver

490

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

490

Solved

inside

Explorer

1749

Recommended Jumbo Hotfix for R82 Recommended

1749

inside

Collaborator

753

First Time Access Issue- AWS Checkpoint Management Server

386

inside

Contributor

1001

Identity propagation ClusterXl members

1001

inside

Collaborator

2063

Email notification when backup fails

2063

Solved

inside

Authority

858

Blink answers.xml and ElasticXL

623

inside

Employee

305

HTTPS Inspection Troubleshooting Evidence-Driven Runbook (Gateway CA, QUIC, pinning, proxy, and ws

10019

Solved

inside

MVP Diamond CHKP

25404

Certificate and CRL validation fails from March 1, 2026

25404

inside

Explorer

939

ISP Redundancy Load Sharing Issue w/ 2 BGP Peers (inactive route from one peer)

939

Solved

inside

Contributor

7221

Data received before SYN was acknowledged. Stripping all packet data

7221

Solved

inside

Participant

527

Upgrade to R81.20 from R81.10 - VSX Environment - is VSLS required?

527

inside

Contributor

3231

VPN Redundancy without using Dynamic Routing

3231

inside

Participant

620

DNS Resolution Issue for Spoke Firewalls over MPLS (Using External IP Instead of Internal)

620

inside

Contributor

890

Web Application Not Working whin using SSL VPN

890

inside

Participant

1225

VSNext and TACACS+ authentication - defining TACP-15 for non-local Gaia admin user

1225

Solved

inside

MVP Diamond

3267

SIC Redundancy in Deployments with Internet-Based Management – Design Question

3267

inside

Contributor

603

SSL VPN WITH STATICALLY NATED IP

603

Solved

inside

MVP Diamond

55047

Check Point Packet Trace Utility

55047

inside

Contributor

484

Smart1-Cloud Policy install fails on R82 SPARK gateways on first run or when running in parallel

484

inside

Collaborator

8095

Funny IP on show configuration

8095

Solved

inside

Participant

1372

Maintenance and Upgrades Best Practices Americas May 2025 Video and Slides

2738

inside

Contributor

837

DynamicID integration with Internal SMTP Relay

837

inside

MVP Silver

1595

Updatable Geo Objects categorize IP as from the wrong country

1595

Solved

inside

Explorer

3203

It is necessary to select certain SNMP traps when working internal_snmp_trap

3203

inside

Advisor

815

SNX not working after portal certificate change

815

Solved

inside

Contributor

759

Unable to Boot R82 ISO in VMWare

759

inside

Participant

1152

Identity awareness - Linux bastion users

1152

Solved

inside

Participant

3565

Quantum spark ipsec tunnel using vti interface

3565

inside

Contributor

549

Core protection "SMTP STARTTLS Command"

549

Solved

inside

Contributor

1696

Configuring DynamicID to use Internal SMTP server

1696

inside

Participant

351

Handling Log Exporter in Management HA with dual "Primary" log servers.

351

inside

Participant

764

Cannot establish SIC between VSX gateway and SMS in ElasticXL VSNext setup R82

764

inside

Explorer

731

Manual NAT with Port Forwarding on Check Point Virtual GW

731

inside

MVP Silver

610

Check Point ISP Redundancy Explained | Dual Internet Setup + Failover Demo

610

inside

Contributor

845

Services don't work on Quantum Spark 1600

845

Solved

inside

Contributor

9967

Zero Phishing and IOS 18.4: Captive Portal Problem

9967

inside

Collaborator

3274

Change interfaces of a bonding group

1088

inside

Contributor

371

Issue with routing based on ABR/PBR

371

inside

Participant

633

Different compliance check rules can be set up for SSL VPN

633

inside

Participant

765

What's New in R82.10 April 2026

3744

inside

Collaborator

1865

Export Objects - Applications / Categories and Network Objects

1865

inside

Explorer

2150

Help on process to export historical VPN users

2150

inside

Participant

1610

Packet Loss and Traffic Drops Caused by ARP Table Overflow in Layer 2 Core Topology

1610

Solved

inside

Explorer

1859

Unable to find reason for RX_DRP

1859

inside

Employee

2249

Introducing LogHub: Unified Log Aggregation for Quantum Gateways

2249

Solved

inside

Contributor

1194

Issue with mobile access client connecting to 3rd party ipsec vpn servers

1194

Solved

inside

Advisor

1705

Issue running management via Harmony SASE

1705

Solved

inside

Participant

5489

LDAPS connections from the gateway will be downgraded to the legacy certificate validation.

5489

inside

Explorer

627

Issue faces in integrating Open ldap v3 in checkpoint firewall

627

Solved

inside

Advisor

1762

Export Specific Rules to CSV for a given object

6167

inside

Contributor

377

MANUAL-NAT ON CHECKPOINT VIRTUAL GW

377

Solved

inside

Contributor

1225

Block MobileAccess/VPN Client Access from unwanted countries

1225

inside

Contributor

806

SMS & Security Gateway Upgrade

806

inside

Participant

1419

Recommended method of Upgrade of Management Server from R81.20 to R82 - VSX

1419

Solved

inside

Participant

3071

SmartConsole Unknown Error (0x2ee2) and Gaia Login Stuck

3071

inside

MVP Gold

624

R82, VSX Main, Maestro, and MLM logging - sanity check

361

inside

Admin

1113

Check Point plans for TLS Certificate Lifetime Reduction

1113

Solved

inside

Participant

3227

The IP quantity limit of a NetworkFeed

3227

inside

Participant

1126

Quantum Spark 2560 failover after every configuration change

1126

inside

MVP

841

🚀 Web SmartConsole – Take 164, 165 & 167 Updates + What’s Coming Next

841

Solved

inside

Advisor

1498

GAIA WebUI Login Events Not Visible in SmartConsole Audit Logs

7147

Solved

inside

Participant

1884

Unexpected fwFullyUtilizedDrops with low CPU – how to identify the source?

1884

Solved

inside

Participant

1018

Persistent fwFullyUtilizedDrops on 26000 appliances (R81.20) – Is disabling SMT a valid next step?

1018

inside

Collaborator

541

Management Network for remote site (dark fiber)

541

Solved

inside

Participant

3201

Can we use Dell R760 as Open Server?

3201

inside

MVP Diamond CHKP

444

How to Mass Create Users, Groups, and Policies on Linux – Step by Step Script Walkthrough

444

Solved

inside

Advisor

16653

Disable expert mode audit log/notification nagware/adware

16653

inside

MVP Diamond CHKP

445

How to Automatically Backup Device Configurations – Step by Step Script Walkthrough

445

inside

MVP Diamond CHKP

386

Creating Interoperable Devices via CLI with an Interactive bash

386

inside

MVP Diamond CHKP

377

Simplifying Meshed VPN Community Creation with an Interactive Bash

377

inside

MVP Silver

857

Automating Static Route Redistribution into BGP with an Interactive Workflow

340

inside

Participant

321

Starlink High Performance Integration

321

inside

MVP Diamond CHKP

287

Check Point Host Batch Creator for Efficient Object Management

287

inside

Explorer

1041

A Practical Quantum Approach to Automation: Built, Tested, and Shared

336

inside

MVP Diamond CHKP

337

Simplifying Interface Configuration on GWs Quantum

337

inside

Contributor

951

R81.20 Failed to resolve VPN MEP gateway

951

inside

Explorer

394

🚀 Web SmartConsole Take 155 - Coming This Week!

6957

inside

MVP Diamond

779

IPS: How to Filter Events by CVE/Protection and Troubleshoot Signatures (Real-Time + Historical)

779

inside

Explorer

1656

Why the IPS blade prevent Checkpoint update.

1656

Solved

inside

Contributor

680

Compliance poor security - VPN114

680

inside

Participant

407

After upgrading management to R82, nat hitcount does not work on gateway on R81.20

407

Solved

inside

Participant

950

BankBot banking trojan got into Google Play again, this time embedded in a game called ‘Jewels Star Classic’.

2172

inside

Explorer

470

SIC error 325 on Install Policy — R82.10 Cross-AZ Cluster in AWS

1756

inside

Advisor

2219

Sending Syslog to logging server pt 2

2219

inside

MVP Diamond CHKP

624

DynamicID with email OTP not sending OTP

987

inside

Collaborator

669

Customize Field/Column Suggestions for Log Search?

933

Solved

inside

Collaborator

1325

Threat Emulation policy action "Send"

1325

inside

Collaborator

3200

Checkpoint Backup using SolarWind NCM

3200

inside

Collaborator

1502

Multi-Domain (MDS/DMS) — HA, Sync, and Advanced Troubleshooting (Field Runbook)

654

inside

Employee

492

Bash script for IP Address Report Generator

492

inside

Employee

411

Bash application to copy CMA policy with the MDS command line

411

inside

Explorer

427

Adding Exception Source have multiple IP

427

inside

Explorer

379

Question regarding cloning Microsoft_AD profile to limit impact of SupportOldSchema parameter

379

inside

MVP Diamond

1469

Can't route another network to my site to site VPN tunnel

1936

No messages.

Firewall & Security Management

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800/2000/2500), see the Spark Firewall space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

Virtual

Wed 07 Oct 2026 @ 11:00 AM (EDT)

TechTalk: Scaling Check Point Automation with Arodonata

Virtual

Thu 08 Oct 2026 @ 11:00 AM (EDT)

Under the Hood: Check Point SASE | Zero Trust Network Access, Step by Step

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

In-Person

Wed 21 Oct 2026 @ 09:00 AM (BST)

AI Security Workshop - Glasgow

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?