Firewall & Security Management

Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT

AI Security Masters
LGTM: Bypassing an LLM Build Gate
When Prompt Injection Fails

What's New in Check Point SASE

Watch Now!

The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses

Watch Now!

CheckMates Go:
Half is Not Enough

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Employee

32699

IPSec VPN tunnel with Fortinet

32599

Solved

inside

MVP Diamond

32399

Checkpoint endpoint VPN with Microsoft 2-Factor Authentication.

32300

inside

Contributor

32300

How can I avoid "Host Port" scan?

32300

Solved

inside

MVP Gold CHKP

32299

R77.30 VSX appliance upgrade to R80.10

32299

Solved

inside

Advisor

32299

Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

32299

Solved

inside

Collaborator

32200

Get SKU, MAC, and Serial Number of Appliance thru CLI

32200

inside

Participant

32199

Connect Smart-1 Cloud to local Active Directory

32199

Solved

inside

Champion

32100

SmartConsole AD Authentication

32097

Solved

inside

Contributor

31999

Has SmartView Tracker been eliminated?

31999

inside

Explorer

31900

First packet isn't Syn; tcp_flags: ACK

31900

Solved

inside

Participant

31800

Checkpoint Management Log Size Problem

31800

Solved

inside

MVP Silver

31799

Check Point Application Control and URL filtering custom applications not behaving like expected

31799

Solved

inside

Participant

31699

Change Standby Member to Active Member

31599

Solved

inside

Participant

31599

ClusterXL - standby cannot reach gateway

31599

inside

Advisor

31500

How to create a custom application with custom services?

31499

inside

Advisor

31400

Exporting Check Point logs over syslog (LogExporter) with Log Server (CP)

31400

Solved

inside

Participant

31400

Adding an interface in ClusterXL High Availability

31400

inside

Participant

31399

How to Remove an Interface from Checkpoint Firewall

31399

Solved

inside

Advisor

31299

Gaia build number list including HFAs - does it exist?

31299

Solved

inside

Collaborator

31207

Report Server wont boot, cant get into maintenance mode

31207

Solved

inside

Contributor

31200

Cisco port channel member is suspended

31099

Solved

inside

Collaborator

31099

SandBlast and links inside email

31099

inside

Contributor

31000

Increasing disk space vg_splat-lv_current

31000

Solved

inside

Participant

31000

Using R80 and need to send logs to a Splunk server. Any idea how?

31000

inside

Participant

30999

what information do we need from the remote site customer when creating site to site VPN?

30999

inside

Participant

30900

Error installing SmartConsole R80

30900

Solved

inside

MVP Diamond

30900

HTTPS inspection certificate question

30900

Solved

inside

Advisor

30900

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

30900

Solved

inside

Participant

30899

Apple services not working with HTTPS inspection

30899

inside

Employee Alumnus

30898

Packet Mode, a new way of searching through your security policy in R80.10

30898

inside

Employee Alumnus

30800

AW keeps deleting Dameware Service

30800

Solved

inside

Contributor

30799

WMI Permission denied - From this months Windows Update

30799

inside

Contributor

30799

Terrible performance IPHTTPS - Checkpoint SG 15600

30799

Solved

inside

Mentor

30699

IPS Analyzer Tool - are you running it?

30699

inside

Participant

30699

Commvault Installer :CPU Spikes on Checkpoint

30699

inside

Participant

30699

How to block some https sites?

30697

inside

Explorer

30600

Best practices for inline layers

30600

inside

Explorer

30501

Policy installation in SmartDashboard fails with: Reason: TCP connectivity failure ( port = 18191 )( IP = X.X.X.X )[ error no. 10 ] Policy installation canceled.

30501

Solved

inside

Contributor

30500

How to add two IP in one interface

30500

Solved

inside

Advisor

30499

objects are locked but there no sessions can be takeover or published

30499

Solved

inside

MVP Silver

30400

White Paper - Integrating Custom IOC Feeds

30299

inside

Participant

30299

Legitimate traffic being blocked - R80.20

30299

inside

Champion

30299

Traffic is originating from a VS with the VSX internal communication address

30299

inside

Advisor

30299

What is the best approach to troubleshoot "slow connections"?

30299

inside

Collaborator

30200

Smartview stuck as loading smartview.. in R80.20

30199

Solved

inside

Explorer

30099

R80 SmartReporter : how to do a report "rule base analysis"? is it possible ?

30099

inside

Admin

30001

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

30001

inside

Admin

30000

Check Point R80.20 Demo TechTalk and Q&A

30000

inside

Explorer

29999

How to Check Point upgrade R77.30 to R80

29999

Solved

inside

Mentor

29905

Where did all my IPS Protections go?

29905

Solved

inside

Collaborator

29799

LOM password reset on 5600 and 12400 appliances

29799

Solved

inside

Contributor

29799

Difference between Session and Connection??

29799

Solved

inside

Participant

29699

Check Point’s First Management Feature Release is now available!

29600

inside

Mentor

29599

GUI client unable to access R80.10 management server behind firewall

29599

inside

Contributor

29599

New Install Security Management Server

29599

Solved

inside

Participant

29499

How to extend and enhance SmartConsole?

29400

Solved

inside

Contributor

29399

Blocking malicious IP addresses (sk103154) in VSX

29399

Solved

inside

Participant

29399

R80 and R80.10 SmartView Monitor VPN List

29399

inside

Contributor

29299

Strange issue Checkpoint R77.30 site-to-site VPN with Cisco ASA

29299

inside

Advisor

29297

Anti-Bot & Anti-Virus, IPS update error on Standby Member

29201

inside

MVP Gold CHKP

29200

MDS backup too big and slow in R80.10

29200

inside

Explorer

29200

IN /VAR/LOG/messages keep getting Stopping CUL mode

29198

Solved

inside

Contributor

29100

Block WhatsApp Uploads/Downloads

29100

inside

Contributor

29099

Difference between log files and log indexes

29099

Solved

inside

MVP Gold

29000

VM specifications for the R80.20.M1

29000

Solved

inside

Advisor

28999

Home Lab Setup - How are you doing it?

28900

inside

MVP Gold

28899

HTTPS Certificate validation - SK159872

28899

Solved

inside

Contributor

28799

How to simulate & virtualize Real life deployments

28799

inside

Employee

28703

Lightboard Series: R80.10 High Availability in Multi Domain Environments

28703

Solved

inside

Contributor

28600

At least one DC is currently disconnected

28600

Solved

inside

Explorer

28600

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

28500

inside

MVP Diamond

28500

Installation & Upgrade problems from R77.x to R80.x

28399

Solved

inside

Contributor

28303

R81.20 TechTalk webinar - Network Feed Objects

28299

Solved

inside

Contributor

28299

vpn issue since R80.10 - Check Point to Fortigate (behind NAT router)

28299

Solved

inside

Employee Alumnus

28099

How to export all result for the SmartLog query shows

28099

Solved

inside

Participant

28098

Encryption Failure: according to the policy the packet should not have been decrypted

28098

inside

Advisor

27999

Identity Collector: ISE and AD continually over-writing each other on the PDP

27999

inside

Participant

27999

Maximum number of routing entries checkpoint fw

27999

Solved

inside

Employee

27999

Identity Awareness - Could not connect to AD server

27999

Solved

inside

Participant

27999

CPview and Top-connections in R80.20

27999

Solved

inside

Contributor

27999

I have a question about the LACP (8023AD) Bond interface.

27999

inside

Collaborator

27900

Firewall HA status (health check)

27900

inside

Advisor

27899

Block traffic coming from known malicious IP addresses

27899

Solved

inside

Collaborator

27800

Updatable objects - no longer available

27800

Solved

inside

Advisor

27800

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

27800

inside

Collaborator

27799

How to monitor bandwidth limit for application control

27799

inside

Participant

27700

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

27700

inside

Participant

27700

how to filter traffic log by using CLI ?

27700

inside

Contributor

27699

Identity Collector Not Collecting dot1x sessions from Cisco ISE

27699

Solved

inside

Collaborator

27600

Service Object - Match for Any

27600

Solved

inside

Explorer

27599

Trying to add hosts in mgmt_cli using csv file

27599

Solved

inside

Participant

27599

How to display unsaved changes in R80

27599

Solved

inside

Contributor

27599

NAT Loopback configuration problem in R80.10

27500

inside

Contributor

27499

Searching Network Objects in R80.xx is crippled

27399

inside

Collaborator

27399

How to monitor virtual systems on VSX?

27300

Solved

inside

Participant

27202

Default route on Standby Member not showing

27202

Solved

inside

Contributor

27200

Not substituted certificate in browser Https Inspection

27200

inside

Collaborator

27199

Windows Update Services with HTTPS inspection enabled

27199

Solved

inside

Contributor

27100

VPN problems - Clear text packet should be encrypted

27099

inside

Explorer

27001

TCP Packet out of state, First Packet is not syn

27001

Solved

inside

MVP Diamond

26999

MDS Upgrade failing from R80.10 to R80.30 (solved)

26999

inside

Collaborator

26999

Upgrading Provider-1 MDM from R77.30 to R80.10

26999

Solved

inside

Contributor

26900

Need CLI Command to see Interfaces and Associated IP Information

26900

inside

Participant

26899

R80.20 HTTPS Inspection Bypass for Office365

26899

Solved

inside

Contributor

26899

cphaprob status showing down cause by routed

26899

inside

Contributor

26899

Installing VSX on on VMware ESXi

26800

Solved

inside

Contributor

26799

Threat Prevention policies after R77.30 to R80.10 migration. Is it correct?

26799

Solved

inside

Advisor

26799

SmartConsole Rule Logs - Display Issue

26799

inside

Contributor

26700

Subinterface down, results in failover

26700

Solved

inside

Participant

26699

Is there SNI support for inbound HTTPS inspection in R80.20?

26699

inside

Collaborator

26699

Maintenance actions that should be performed by admins

26699

Solved

inside

Contributor

26699

VPN community routing not working

26699

Solved

inside

Contributor

26694

Checkpoint R81.20 Logging Issue

26694

inside

Contributor

26600

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

26600

Solved

inside

Participant

26600

Why CP drops RST-ACK packets from client?

26600

inside

Advisor

26599

Cipher Configuration Tool (CCT)

26599

Solved

inside

Advisor

26599

Error: At least one DC is currently disconnected

26599

inside

Collaborator

26500

Wrong peer gateway for decrypted packet (VPN Error code 01)

26500

inside

Advisor

26500

Allow an encrypted communication channel between servers

26499

Solved

inside

Collaborator

26400

HTTPS Inspection and Office 365 - Anyone got it playing nicely?

26400

Solved

inside

Contributor

26399

Restricting Remote Access by IPv4 Address

26299

inside

Contributor

26204

VSX cluster problem - are we alone?

26204

inside

Mentor

26200

What are IPS Staging Protections? And how do we clear them?

26200

inside

Contributor

26200

Notify when certificate expired

26099

inside

Collaborator

26099

How to count objects of a group

26099

Solved

inside

Collaborator

26099

Usercheck Block Page is Insecure/Private

25999

inside

Contributor

25999

SecureXL DoS Rate Limiting (samp rules)

25899

inside

Advisor

25899

Identity sharing - how to change modes

25899

inside

Participant

25899

Solutions for backup/restoring individual MDS Domains.

25899

inside

Advisor

25899

Checkpoint to Azure Route based - guide

25899

inside

Contributor

25899

URL Filtering Troubleshooting Help

25899

inside

Collaborator

25800

Cluster XL - Failover due to Fullsync PNOTE ON

25800

inside

Admin

25799

How do I verify Threat Emulation is working?

25799

Solved

inside

Collaborator

25799

URL Filtering Pornography Category not Working - Custom Application Works

25799

Solved

inside

Contributor

25699

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

25699

inside

MVP Gold

25599

Is it advisable to change affinity in my scenario?

25599

Solved

inside

MVP Gold

25599

Certificate and CRL validation fails from March 1, 2026

25403

Solved

inside

Collaborator

25400

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

25400

inside

Contributor

25399

F5 BIG-IP ICAP and SandBlast (TEX)

25399

inside

Participant

25399

DHCP server configuration on GAIA R80.20

25399

inside

MVP Gold

25399

Error: 'IPS' is not responding

25300

inside

Contributor

25299

R80.10 SmartConsole Gateway & Servers Status

25299

inside

Participant

25299

Displaying transceiver properties

25299

Solved

inside

Contributor

25200

Gaia r80.10 tag vlan 1 and native vlan

25200

inside

Advisor

25200

BGP over VPN between Azure.docx

25200

Solved

inside

Collaborator

25200

Can't monitor secondary node over IPSec tunnel

25199

Solved

inside

Collaborator

25101

Regular Expression in Application And URL Filtering

24900

inside

Contributor

24900

Site to Site Route Based VPN in Checkpoint

24900

inside

Admin

24899

TechTalk: Advanced Threat Prevention Best Practices

24899

inside

Participant

24899

Firemon - Check Point R80.10 API not working.

24899

inside

Contributor

24801

Bypass HTTPS Inspection for a custom URL

24801

inside

Participant

24800

'TCP packet out of state' drops

24800

inside

Contributor

24800

Searching for Address Spoofing Logs in R80

24599

inside

Collaborator

24499

High cpu utilization on RAD Process

24499

Solved

inside

Participant

24498

Block Only YouTube not Google Applications

24498

Solved

inside

Collaborator

24496

R81 - SmartUpdate Package Repository

24496

Solved

inside

Explorer

24400

IPS issue (R80.20) - cannot remove IPS blade from GW object

24400

inside

Advisor

24400

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

24400

inside

Explorer

24400

Password hashes, sha512 and the expert password

24399

Solved

inside

Participant

24399

checkpoint Firewall audit for configuration change

24399

inside

Employee Alumnus

24399

How to debug Policy Installation Errors

24399

Solved

inside

Contributor

24399

VOIP with H323 over remote access VPN not working on R80.10

24399

inside

Participant

24399

Low bandwidth when checkpoint is connected

24399

Solved

inside

Advisor

24398

Identity Agent - Auto Detecting gateway

24398

inside

Collaborator

24398

Lightboard Series: High Availability Architecture with R80.10

24302

Solved

inside

Contributor

24301

Custom HotFix Installation Procedure

24300

Solved

inside

Collaborator

24300

Exporting/Importing of Objects (R80.20)

24300

inside

Participant

24299

Allow Office 365 services in Application Control & Url Filtering

24299

inside

Contributor

24299

Finding main IP of any managed gateway

24299

Solved

inside

Collaborator

24299

High Cpu utilization - Internet Speed drops to very low level

24299

inside

Participant

24206

Checkpoint Advanced OSPF Capability

24206

inside

Contributor

24202

R80 SmartConsole Unable to connect to server

24200

Solved

inside

Participant

24199

Test bandwidth/speed from Gaia

24199

inside

Participant

24198

How ping works with a ClusterXL?

24198

inside

Participant

24100

Private to Private NAT on IPSEC VPN

24100

Solved

inside

MVP Gold

24099

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

24099

inside

Collaborator

24099

IPsec VPN [NATting intresting traffic] config help

24099

Solved

inside

Explorer

23999

TCP connection failure port=18191 [error no. 10]

23999

inside

Employee

23899

Log Exporter and Elasticsearch

23899

Solved

inside

Advisor

23899

Firewall Log Archive and Import in R80.10/ R77.30

23898

Solved

inside

Advisor

23799

Policy Install Failed - Problem With The Commit Function

23799

Solved

inside

Contributor

23799

SSL Certificate Cannot Be Trusted (vulnerability)

23799

Solved

inside

Advisor

23799

Add Interfaces To VSX Bond Group?

23799

inside

Participant

23799

Document related to OPSEC configuration

23798

inside

Admin

4200

What's New in R82.10 June 2026: Video, Slides, and Q&A

4200

Solved

inside

Participant

2030

Log Exporter Sends Only a Few Syslog Blade Events to FortiAnalyzer and Exported Messages differ

2030

inside

Contributor

340

Sessions dropping : fw_handle_old_conn_recovery on long-lived UDP flows

340

Solved

inside

Advisor

2552

Repeated debug error messages in fwk.elg

2552

Solved

inside

Explorer

1581

Confused in VSX CoreXL instance configuration

1581

Solved

inside

Collaborator

667

Threat Prevention Custom Policy

667

inside

Advisor

529

Threat Extraction in ElasticXL / Maestro – handling of original files?

283

Solved

inside

Contributor

3438

it is not possible to directly request information about groups and Active Directory

1416

Solved

inside

Contributor

471

Changing ElasticXL Distribution Mode

471

Solved

inside

MVP Diamond

41399

Mac standalone Endpoint VPN - Negotiation with site failed

882

inside

Collaborator

393

NMSAAA9999 Invalid NAS IP address

393

inside

MVP Silver

410

About "CPNotEnoughDataForRuleMatch" and connection reset

10995

inside

MVP Diamond

1118

Policy Install Failed? Start Thinking in Processes, Not Only in Rules

1118

Solved

inside

Contributor

875

sk170857 - How to identify potential segmentations affected by VPN EDPC?

875

Solved

inside

MVP Silver

1484

Python reverse shell communicating over ports 80 or 443

655

inside

Participant

23518

Restrict VPN access by GEO location

23518

inside

Collaborator

1561

ElasticXL with VSNext Deployment – Secondary Appliance Initial Configuration Clarification

1561

inside

Collaborator

416

VoIP Traffic Application Control Objects vs Port Objects

416

Solved

inside

Participant

1194

Error "You cannot activate both the Firewall and Endpoint Policy Management on the same sever"

1194

Solved

inside

Collaborator

590

R82: What is the need of different SSL certificates by gateway

590

Solved

inside

Collaborator

715

Removing member from ClusterXL

566

inside

Authority

1453

Site to Site VPN fails after installing the new hotfix for VPN auth bybass

922

inside

Participant

455

Is SG3600 suitable for upgrading to R82 ?

759

inside

Explorer

295

chekpoint and zscaler ipsec issue

295

Solved

inside

Participant

406

ElasticXL VSNext - Where Are VSwitches Created and Managed?

344

Solved

inside

Contributor

3243

R82.10 smartconsole: Evaluation License Expired

3243

inside

Explorer

283

Domain logserver locked for editing by fwm_user

283

inside

Contributor

8007

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

1648

inside

Contributor

762

web_api_show_package.sh - Script stopped running due to severe error!

762

inside

Advisor

2074

Endpoint client - Confusing input prompts

2074

inside

Participant

6087

how to mount windows file share on gaia r80.10 ?

6087

inside

Advisor

850

Wrong SmartConsole update package

850

inside

Collaborator

1694

root filesystem disk space and /run/podman/logs/events.log

1694

Solved

inside

Employee

8178

Harden Now: Preparing Check Point Gateways & Management for AI‑Driven Threats like Mythos

8178

inside

Contributor

558

CPSEMD low disk space - disk space left

558

inside

MVP Gold

449

VSX R82 Virtual Router creation fails: “The certificate is not valid”

748

inside

MVP Silver

1290

web site times out when going through firewall

1290

inside

Collaborator

440

MTA didn't send Non-Delevery-Report

440

inside

MVP Silver

425

Check Point Disk Troubleshooting - df and du Commands Explained

425

inside

Contributor

1806

R81.20 Take 127 to R82 T779 MDS HA Secondary upgrade fails: “Upgrade to this version is prohibited.

1806

inside

Collaborator

245

MTA TE: Cannot retrieve original password-protected PDF via UserCheck (Blocked by Policy)

245

Solved

inside

Collaborator

1227

SmartConsole Administrator external authentication

488

inside

Explorer

337

How to view the list of banned IPs in VPN SNX

337

inside

Contributor

533

[MANAGEMENT] - High Consumption

533

inside

Explorer

328

"Interface leads to DMZ" setting

716

Solved

inside

Collaborator

1618

Primary SMS upgrade from R81.10 to R82 fail

1618

inside

MVP Gold

861

The Scalable Platform Migration Tool - Refresh question

861

inside

MVP Diamond

4468

HTTPS Inspection Is Not “Just Decryption”: It Is a TLS Enforcement Pipeline

4468

inside

Admin

849

Identity Awareness Best Practices May 2026: Video and Slides

849

inside

Collaborator

554

VSNext on ElasticXL (R82+) with Shared External/Campus vSwitches and Internal Transit vSwitch

554

inside

MVP Gold

1193

List of CVE and half a solution

1193

Solved

inside

MVP Silver

2753

Post-Migration Issue: Lost HTTPS and External SSH Access to Cluster Member

1366

inside

Participant

408

Compatible Smart Console version for Security Gateway with version 80.40

3544

Solved

inside

Explorer

418

Check Point 3900 – Using SFP+ ports (eth10/eth11) for Cluster Sync instead of default eth9

505

inside

Advisor

373

Large File download emulation responses

373

Solved

inside

Contributor

28179

I have a question about the LACP (8023AD) Bond interface.

28179

Solved

inside

Participant

461

Cluster XL Load sharing unicast mode Traffic forwarding interface

461

inside

Explorer

859

Performance Limitations of Virtual Switches in a VSX Environment

14319

Solved

inside

Collaborator

782

Why Standby SMS show No communication ?

782

inside

Collaborator

346

Web Access PT content-security-policy header issues

346

inside

MVP Gold

990

Disk usage and cleanup audit report

990

inside

Explorer

620

Limit the version of Check Point Mobile for Windows

620

inside

MVP Gold

330

identity awareness agent over site to site vpn

330

Solved

inside

Explorer

631

Two interoperable devices with same encryption domain for VPN failover?

631

inside

Participant

1461

DR Scenario - ClusterXL Split Brain Mode

1461

inside

Employee

1681

Introducing Agentic Network Security Orchestration - The Future of Network Security Is Here

1681

inside

MVP Silver

1359

Adding Zscaler cloud IP addresses as updatable object

2430

inside

MVP Diamond

1171

Smart-1 6000-L: Installation Recovery Using VGA Access

1171

inside

Contributor

2429

Recommended IPS “Additional Activation” Categories for Banking/Financial Environments?

770

inside

MVP Silver

566

Impact when disabling DES/3DES for Endpoint VPN clients?

914

Solved

inside

Participant

7686

Export a huge amount of logs to CSV file

7686

inside

Admin

1913

Web Filtering Best Practices May 2026: Video and Slides

1913

Solved

inside

Participant

837

Go to Threat Wiki (link) > Check Point Research = error 404

837

inside

MVP Silver

838

ElasticXL: From single site Active/Active to dual site Active/Standby

838

inside

MVP Silver

1121

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

1121

inside

Collaborator

11039

Help with disk space issue - Checkpoint support not helping

11039

inside

Contributor

442

VSX Cluster R81.20 with Virtual Router: Best Practice for Dual ISP / Multi-WAN Configuration

442

inside

Explorer

761

Check Point ElasticXL integration with FortiGate firewall

761

inside

Contributor

1561

SmartConsole shows No License and Contract is expired messages for IPS, AV, Application

1561

Solved

inside

MVP Gold

1720

R82 MDM/MLM on XL-6000 Appliances SmartConsole slowness

1648

inside

Explorer

1085

Microsoft Teams - QoS setup on firewall

1085

inside

Participant

393

Migration of Rules from Smart-1 Cloud to on-premises management system

393

Solved

inside

Contributor

4579

Checkpoint VSX with Both L2 (Bridge mode) VS and L3 VS

478

Solved

inside

MVP Diamond

6836

ElasticXL (R82) vs ClusterXL Load Sharing — what changes in practice (architecture, traffic, sync, a

6836

Solved

inside

Explorer

1143

CP Standalone Remote Access VPN Client for macOS Tahoe 26.3

1143

inside

MVP Diamond

514

Threat Emulation in production: how to run “zero-day control” without becoming a bottleneck

514

inside

MVP Diamond

2045

How to Roll Out IPS Updates Safely

2045

inside

Collaborator

531

R81.20 Local TE - Constant 10-minute delay on MTA/MFP scans

531

inside

MVP Diamond

955

Management-HA: Address spoofing error for FW_Log when gateway sends logs cross-site

955

inside

Advisor

605

AIOps alerts and penalty box configuration

605

inside

Explorer

709

Gaia WebUI / Admin Login Page Not Opening After Configuration on Check Point R77.20 VMware Lab

709

inside

MVP Diamond

537

Missing Undo (Crtl-Z) in SmartConsole

537

inside

MVP Gold

928

hping/netcat removal from R82.10

928

Solved

inside

Contributor

800

Restrict Access to Gaia Web Interface When RAVPN is in use

800

inside

Participant

1265

Issues with 19200 Appliance migration: ICMP over VPN (UPPAK) and Driver Incompatibility (KPPAK)

1265

Solved

inside

Collaborator

671

IPS Global Exceptions and Custom Policy

671

inside

Explorer

386

Vulnerability scanner shows port 80 unsecured on 9100 gateway

386

Solved

inside

Participant

1820

HTTPS Inspection is always bypassed - "Inspection is not Required"

1820

inside

MVP Platinum

1293

Step by step guide for penalty box R82 and R81.20

1293

Solved

inside

Collaborator

6450

Check point vulnerable to CVE-2026-31431?

6450

Solved

inside

Explorer

484

Prohibit the use of SSLv1, SSLv2, SSLv1 and TLSv1.0, TLSv1 protocols.1. Use TLSv1 protocols.2 and TL

484

inside

Advisor

775

[Action Required] – Important notification to Customer with Threat Emulation blade enabled – An Upda

775

inside

Collaborator

1442

Gaia Portal recognized a non-valid values

1442

inside

MVP Diamond CHKP

1334

How to Understand and Approach IPv8 if It Becomes a Standard?

1334

inside

MVP Diamond CHKP

619

ClusterXL and Some Options to verify on ElasticXL

619

inside

Participant

341

Remote and local backups failing or not running

341

Solved

inside

Contributor

1828

Fresh Install of R82 into VMWare - ERR_CONNECTION_REFUSED before First Time Wizard started

1828

inside

Contributor

421

Some users experienced an immediate logout from Mobile Access

707

inside

Contributor

268

Logs failing to send from firewall to remote SMS logger

268

Solved

inside

Explorer

418

The requirement to adjust the Information Security Regulator

418

inside

Participant

571

Remote Access VPN - identity sources- username format

571

inside

Admin

2039

Troubleshooting 101 April 2026: Video and Slides

2039

Solved

inside

Explorer

2271

R82.10 fail to install on xcp-NG no drive detected

2271

Solved

inside

Advisor

1122

VSX Migration 6400 → 9700 with Bond Redesign (4→2 Interfaces) – vsx_util Reconfigure Limitations?

1122

inside

Collaborator

924

Block Firewall Rule matched but still able to access page ?

924

Solved

inside

MVP Silver

963

sk156072 - Domain migration - SMS to DMS

963

inside

Advisor

2646

Sync Status: Off - SIC failure

2646

inside

Contributor

1247

IP Reputation exception is not working

1247

inside

Participant

589

Rules Migration from Smart-1 Cloud Management to Onpremise Management

589

inside

Explorer

821

On premise Datacenter objects within smart 1 cloud

821

inside

MVP Silver

490

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

490

Solved

inside

Explorer

1752

Recommended Jumbo Hotfix for R82 Recommended

1752

inside

Collaborator

755

First Time Access Issue- AWS Checkpoint Management Server

386

inside

Contributor

1004

Identity propagation ClusterXl members

1004

inside

Collaborator

2067

Email notification when backup fails

2067

Solved

inside

Authority

860

Blink answers.xml and ElasticXL

625

inside

Employee

310

HTTPS Inspection Troubleshooting Evidence-Driven Runbook (Gateway CA, QUIC, pinning, proxy, and ws

10030

Solved

inside

MVP Diamond CHKP

25435

Certificate and CRL validation fails from March 1, 2026

25435

inside

Explorer

946

ISP Redundancy Load Sharing Issue w/ 2 BGP Peers (inactive route from one peer)

946

Solved

inside

Contributor

7226

Data received before SYN was acknowledged. Stripping all packet data

7226

Solved

inside

Participant

531

Upgrade to R81.20 from R81.10 - VSX Environment - is VSLS required?

531

inside

Contributor

3244

VPN Redundancy without using Dynamic Routing

3244

inside

Participant

621

DNS Resolution Issue for Spoke Firewalls over MPLS (Using External IP Instead of Internal)

621

inside

Contributor

890

Web Application Not Working whin using SSL VPN

890

inside

Participant

1229

VSNext and TACACS+ authentication - defining TACP-15 for non-local Gaia admin user

1229

Solved

inside

MVP Diamond

3274

SIC Redundancy in Deployments with Internet-Based Management – Design Question

3274

inside

Contributor

604

SSL VPN WITH STATICALLY NATED IP

604

Solved

inside

MVP Diamond

55078

Check Point Packet Trace Utility

55078

inside

Contributor

484

Smart1-Cloud Policy install fails on R82 SPARK gateways on first run or when running in parallel

484

inside

Collaborator

8100

Funny IP on show configuration

8100

Solved

inside

Participant

1376

Maintenance and Upgrades Best Practices Americas May 2025 Video and Slides

2742

inside

Contributor

841

DynamicID integration with Internal SMTP Relay

841

inside

MVP Silver

1598

Updatable Geo Objects categorize IP as from the wrong country

1598

Solved

inside

Explorer

3210

It is necessary to select certain SNMP traps when working internal_snmp_trap

3210

inside

Advisor

818

SNX not working after portal certificate change

818

Solved

inside

Contributor

762

Unable to Boot R82 ISO in VMWare

762

inside

Participant

1154

Identity awareness - Linux bastion users

1154

Solved

inside

Participant

3570

Quantum spark ipsec tunnel using vti interface

3570

inside

Contributor

551

Core protection "SMTP STARTTLS Command"

551

Solved

inside

Contributor

1700

Configuring DynamicID to use Internal SMTP server

1700

inside

Participant

351

Handling Log Exporter in Management HA with dual "Primary" log servers.

351

inside

Participant

769

Cannot establish SIC between VSX gateway and SMS in ElasticXL VSNext setup R82

769

inside

Explorer

732

Manual NAT with Port Forwarding on Check Point Virtual GW

732

inside

MVP Silver

612

Check Point ISP Redundancy Explained | Dual Internet Setup + Failover Demo

612

inside

Contributor

848

Services don't work on Quantum Spark 1600

848

Solved

inside

Contributor

9991

Zero Phishing and IOS 18.4: Captive Portal Problem

9991

inside

Collaborator

3281

Change interfaces of a bonding group

1094

inside

Contributor

372

Issue with routing based on ABR/PBR

372

inside

Participant

637

Different compliance check rules can be set up for SSL VPN

637

inside

Participant

768

What's New in R82.10 April 2026

3749

inside

Collaborator

1868

Export Objects - Applications / Categories and Network Objects

1868

inside

Explorer

2152

Help on process to export historical VPN users

2152

inside

Participant

1628

Packet Loss and Traffic Drops Caused by ARP Table Overflow in Layer 2 Core Topology

1628

Solved

inside

Explorer

1867

Unable to find reason for RX_DRP

1867

inside

Employee

2263

Introducing LogHub: Unified Log Aggregation for Quantum Gateways

2263

Solved

inside

Contributor

1202

Issue with mobile access client connecting to 3rd party ipsec vpn servers

1202

Solved

inside

Advisor

1708

Issue running management via Harmony SASE

1708

Solved

inside

Participant

5495

LDAPS connections from the gateway will be downgraded to the legacy certificate validation.

5495

inside

Explorer

630

Issue faces in integrating Open ldap v3 in checkpoint firewall

630

Solved

inside

Advisor

1767

Export Specific Rules to CSV for a given object

6172

inside

Contributor

382

MANUAL-NAT ON CHECKPOINT VIRTUAL GW

382

Solved

inside

Contributor

1230

Block MobileAccess/VPN Client Access from unwanted countries

1230

inside

Contributor

809

SMS & Security Gateway Upgrade

809

inside

Participant

1424

Recommended method of Upgrade of Management Server from R81.20 to R82 - VSX

1424

Solved

inside

Participant

3103

SmartConsole Unknown Error (0x2ee2) and Gaia Login Stuck

3103

inside

MVP Gold

625

R82, VSX Main, Maestro, and MLM logging - sanity check

363

inside

Admin

1119

Check Point plans for TLS Certificate Lifetime Reduction

1119

Solved

inside

Participant

3238

The IP quantity limit of a NetworkFeed

3238

inside

Participant

1132

Quantum Spark 2560 failover after every configuration change

1132

inside

MVP

843

🚀 Web SmartConsole – Take 164, 165 & 167 Updates + What’s Coming Next

843

Solved

inside

Advisor

1502

GAIA WebUI Login Events Not Visible in SmartConsole Audit Logs

7169

Solved

inside

Participant

1896

Unexpected fwFullyUtilizedDrops with low CPU – how to identify the source?

1896

Solved

inside

Participant

1019

Persistent fwFullyUtilizedDrops on 26000 appliances (R81.20) – Is disabling SMT a valid next step?

1019

inside

Collaborator

543

Management Network for remote site (dark fiber)

543

Solved

inside

Participant

3203

Can we use Dell R760 as Open Server?

3203

inside

MVP Diamond CHKP

444

How to Mass Create Users, Groups, and Policies on Linux – Step by Step Script Walkthrough

444

Solved

inside

Advisor

16672

Disable expert mode audit log/notification nagware/adware

16672

inside

MVP Diamond CHKP

446

How to Automatically Backup Device Configurations – Step by Step Script Walkthrough

446

inside

MVP Diamond CHKP

387

Creating Interoperable Devices via CLI with an Interactive bash

387

inside

MVP Diamond CHKP

377

Simplifying Meshed VPN Community Creation with an Interactive Bash

377

inside

MVP Silver

860

Automating Static Route Redistribution into BGP with an Interactive Workflow

342

inside

Participant

322

Starlink High Performance Integration

322

inside

MVP Diamond CHKP

288

Check Point Host Batch Creator for Efficient Object Management

288

inside

Explorer

1045

A Practical Quantum Approach to Automation: Built, Tested, and Shared

336

inside

MVP Diamond CHKP

337

Simplifying Interface Configuration on GWs Quantum

337

inside

Contributor

954

R81.20 Failed to resolve VPN MEP gateway

954

inside

Explorer

398

🚀 Web SmartConsole Take 155 - Coming This Week!

6960

inside

MVP Diamond

780

IPS: How to Filter Events by CVE/Protection and Troubleshoot Signatures (Real-Time + Historical)

780

inside

Explorer

1659

Why the IPS blade prevent Checkpoint update.

1659

Solved

inside

Contributor

680

Compliance poor security - VPN114

680

inside

Participant

410

After upgrading management to R82, nat hitcount does not work on gateway on R81.20

410

Solved

inside

Participant

950

BankBot banking trojan got into Google Play again, this time embedded in a game called ‘Jewels Star Classic’.

2173

inside

Explorer

471

SIC error 325 on Install Policy — R82.10 Cross-AZ Cluster in AWS

1762

inside

Advisor

2219

Sending Syslog to logging server pt 2

2219

inside

MVP Diamond CHKP

624

DynamicID with email OTP not sending OTP

989

inside

Collaborator

669

Customize Field/Column Suggestions for Log Search?

933

Solved

inside

Collaborator

1334

Threat Emulation policy action "Send"

1334

inside

Collaborator

3204

Checkpoint Backup using SolarWind NCM

3204

inside

Collaborator

1507

Multi-Domain (MDS/DMS) — HA, Sync, and Advanced Troubleshooting (Field Runbook)

657

inside

Employee

495

Bash script for IP Address Report Generator

495

inside

Employee

412

Bash application to copy CMA policy with the MDS command line

412

inside

Explorer

429

Adding Exception Source have multiple IP

429

inside

Explorer

381

Question regarding cloning Microsoft_AD profile to limit impact of SupportOldSchema parameter

381

inside

MVP Diamond

1471

MDPS config tip

1471

No messages.

Firewall & Security Management

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800/2000/2500), see the Spark Firewall space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

Virtual

Wed 07 Oct 2026 @ 11:00 AM (EDT)

TechTalk: Scaling Check Point Automation with Arodonata

Virtual

Thu 08 Oct 2026 @ 11:00 AM (EDT)

Under the Hood: Check Point SASE | Zero Trust Network Access, Step by Step

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

In-Person

Wed 21 Oct 2026 @ 09:00 AM (BST)

AI Security Workshop - Glasgow

In-Person

Tue 27 Oct 2026 @ 08:00 AM (CET)

Cloud & SASE Security Workshops, London

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?