Firewall & Security Management

Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT

AI Security Masters
LGTM: Bypassing an LLM Build Gate
When Prompt Injection Fails

What's New in Check Point SASE

Watch Now!

The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses

Watch Now!

CheckMates Go:
Half is Not Enough

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Explorer

32699

Policy installation failed: TCP connectivity failure port 18191

32699

Solved

inside

MVP Diamond

32399

How can I avoid "Host Port" scan?

32300

Solved

inside

Advisor

32299

IPSec VPN tunnel with Fortinet

32299

Solved

inside

Collaborator

32200

Get SKU, MAC, and Serial Number of Appliance thru CLI

32200

Solved

inside

Advisor

32200

Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

32200

inside

Contributor

32200

Checkpoint endpoint VPN with Microsoft 2-Factor Authentication.

32200

Solved

inside

MVP Gold CHKP

32199

R77.30 VSX appliance upgrade to R80.10

32199

inside

Participant

32099

Connect Smart-1 Cloud to local Active Directory

32099

Solved

inside

MVP Gold

32097

SmartConsole AD Authentication

32097

Solved

inside

Champion

31999

Has SmartView Tracker been eliminated?

31999

Solved

inside

Contributor

31900

Checkpoint Management Log Size Problem

31800

Solved

inside

MVP Silver

31799

Check Point Application Control and URL filtering custom applications not behaving like expected

31799

inside

Explorer

31700

First packet isn't Syn; tcp_flags: ACK

31700

Solved

inside

Participant

31699

Change Standby Member to Active Member

31599

Solved

inside

Participant

31500

ClusterXL - standby cannot reach gateway

31500

Solved

inside

Advisor

31499

How to create a custom application with custom services?

31499

inside

Advisor

31400

Exporting Check Point logs over syslog (LogExporter) with Log Server (CP)

31400

inside

Advisor

31399

Gaia build number list including HFAs - does it exist?

31299

Solved

inside

Collaborator

31207

Report Server wont boot, cant get into maintenance mode

31207

Solved

inside

Contributor

31200

Adding an interface in ClusterXL High Availability

31199

inside

Participant

31199

How to Remove an Interface from Checkpoint Firewall

31199

Solved

inside

Advisor

31001

SandBlast and links inside email

31001

inside

Contributor

31000

Increasing disk space vg_splat-lv_current

31000

Solved

inside

Participant

31000

Using R80 and need to send logs to a Splunk server. Any idea how?

31000

Solved

inside

Collaborator

30999

what information do we need from the remote site customer when creating site to site VPN?

30999

inside

Participant

30900

Error installing SmartConsole R80

30900

Solved

inside

Advisor

30900

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

30900

Solved

inside

Participant

30899

Cisco port channel member is suspended

30899

inside

Employee Alumnus

30701

Packet Mode, a new way of searching through your security policy in R80.10

30701

Solved

inside

Participant

30700

Apple services not working with HTTPS inspection

30700

Solved

inside

Contributor

30700

WMI Permission denied - From this months Windows Update

30700

inside

Participant

30699

Commvault Installer :CPU Spikes on Checkpoint

30699

inside

Participant

30699

HTTPS inspection certificate question

30699

inside

Collaborator

30697

How to block some https sites?

30697

inside

Employee Alumnus

30694

AW keeps deleting Dameware Service

30694

inside

Explorer

30600

Best practices for inline layers

30600

inside

Contributor

30599

Terrible performance IPHTTPS - Checkpoint SG 15600

30599

inside

Explorer

30501

Policy installation in SmartDashboard fails with: Reason: TCP connectivity failure ( port = 18191 )( IP = X.X.X.X )[ error no. 10 ] Policy installation canceled.

30501

Solved

inside

Mentor

30500

IPS Analyzer Tool - are you running it?

30500

inside

Explorer

30499

objects are locked but there no sessions can be takeover or published

30499

Solved

inside

Advisor

30441

How to add two IP in one interface

30400

inside

Participant

30399

White Paper - Integrating Custom IOC Feeds

30299

inside

Advisor

30299

What is the best approach to troubleshoot "slow connections"?

30299

inside

Participant

30207

Legitimate traffic being blocked - R80.20

30207

inside

Champion

30200

Traffic is originating from a VS with the VSX internal communication address

30200

Solved

inside

Contributor

30199

Smartview stuck as loading smartview.. in R80.20

30199

Solved

inside

Explorer

30099

R80 SmartReporter : how to do a report "rule base analysis"? is it possible ?

30099

inside

Collaborator

30098

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

30001

inside

Admin

30000

Check Point R80.20 Demo TechTalk and Q&A

30000

inside

Explorer

29900

How to Check Point upgrade R77.30 to R80

29900

Solved

inside

Mentor

29799

Where did all my IPS Protections go?

29799

Solved

inside

Collaborator

29700

LOM password reset on 5600 and 12400 appliances

29700

Solved

inside

Participant

29699

Difference between Session and Connection??

29699

inside

Employee

29600

Check Point’s First Management Feature Release is now available!

29600

inside

Mentor

29599

GUI client unable to access R80.10 management server behind firewall

29599

inside

Contributor

29599

New Install Security Management Server

29599

Solved

inside

Participant

29499

How to extend and enhance SmartConsole?

29400

Solved

inside

Contributor

29399

Blocking malicious IP addresses (sk103154) in VSX

29399

Solved

inside

Participant

29399

R80 and R80.10 SmartView Monitor VPN List

29399

Solved

inside

Collaborator

29399

Anti-Bot & Anti-Virus, IPS update error on Standby Member

29201

inside

MVP Gold CHKP

29200

MDS backup too big and slow in R80.10

29200

Solved

inside

Participant

29198

IN /VAR/LOG/messages keep getting Stopping CUL mode

29198

inside

Advisor

29100

Strange issue Checkpoint R77.30 site-to-site VPN with Cisco ASA

29099

inside

MVP Gold CHKP

29099

Difference between log files and log indexes

29000

inside

Champion

29000

VM specifications for the R80.20.M1

29000

inside

Explorer

29000

Home Lab Setup - How are you doing it?

28900

inside

MVP Gold

28899

Block WhatsApp Uploads/Downloads

28799

Solved

inside

Advisor

28799

HTTPS Certificate validation - SK159872

28799

inside

Employee

28703

Lightboard Series: R80.10 High Availability in Multi Domain Environments

28703

Solved

inside

Contributor

28699

How to simulate & virtualize Real life deployments

28699

Solved

inside

Contributor

28500

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

28500

inside

Explorer

28499

At least one DC is currently disconnected

28499

Solved

inside

Explorer

28400

vpn issue since R80.10 - Check Point to Fortigate (behind NAT router)

28299

Solved

inside

Advisor

28200

R81.20 TechTalk webinar - Network Feed Objects

28200

inside

Advisor

28199

Installation & Upgrade problems from R77.x to R80.x

28199

Solved

inside

Participant

28098

Encryption Failure: according to the policy the packet should not have been decrypted

28098

inside

Participant

27999

Maximum number of routing entries checkpoint fw

27999

Solved

inside

Employee

27999

Identity Awareness - Could not connect to AD server

27999

Solved

inside

Participant

27999

CPview and Top-connections in R80.20

27999

Solved

inside

Contributor

27999

I have a question about the LACP (8023AD) Bond interface.

27999

inside

Advisor

27900

Identity Collector: ISE and AD continually over-writing each other on the PDP

27900

inside

Collaborator

27900

Firewall HA status (health check)

27900

Solved

inside

Employee Alumnus

27898

How to export all result for the SmartLog query shows

27898

Solved

inside

Collaborator

27800

Updatable objects - no longer available

27800

inside

Advisor

27800

Block traffic coming from known malicious IP addresses

27800

inside

Explorer

27800

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

27800

inside

Participant

27700

How to monitor bandwidth limit for application control

27699

Solved

inside

Advisor

27699

how to filter traffic log by using CLI ?

27599

Solved

inside

Contributor

27599

Service Object - Match for Any

27502

Solved

inside

Explorer

27499

Trying to add hosts in mgmt_cli using csv file

27499

inside

Contributor

27499

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

27499

Solved

inside

MVP Diamond

27400

Searching Network Objects in R80.xx is crippled

27399

Solved

inside

Participant

27399

How to display unsaved changes in R80

27399

Solved

inside

Advisor

27300

How to monitor virtual systems on VSX?

27300

inside

Contributor

27300

Identity Collector Not Collecting dot1x sessions from Cisco ISE

27300

Solved

inside

Contributor

27299

NAT Loopback configuration problem in R80.10

27299

inside

Collaborator

27299

Default route on Standby Member not showing

27202

Solved

inside

Contributor

27200

Not substituted certificate in browser Https Inspection

27200

inside

Collaborator

27199

Windows Update Services with HTTPS inspection enabled

27199

inside

Explorer

27001

TCP Packet out of state, First Packet is not syn

27001

Solved

inside

MVP Diamond

26999

MDS Upgrade failing from R80.10 to R80.30 (solved)

26999

inside

Collaborator

26999

Upgrading Provider-1 MDM from R77.30 to R80.10

26999

Solved

inside

Contributor

26999

VPN problems - Clear text packet should be encrypted

26999

Solved

inside

Contributor

26900

Need CLI Command to see Interfaces and Associated IP Information

26900

Solved

inside

Contributor

26899

R80.20 HTTPS Inspection Bypass for Office365

26899

Solved

inside

Contributor

26899

cphaprob status showing down cause by routed

26899

inside

Contributor

26798

Subinterface down, results in failover

26700

inside

Explorer

26700

Installing VSX on on VMware ESXi

26700

Solved

inside

Contributor

26699

Threat Prevention policies after R77.30 to R80.10 migration. Is it correct?

26699

Solved

inside

Contributor

26699

Is there SNI support for inbound HTTPS inspection in R80.20?

26699

inside

Collaborator

26699

Maintenance actions that should be performed by admins

26699

Solved

inside

Advisor

26699

SmartConsole Rule Logs - Display Issue

26699

Solved

inside

Contributor

26694

Checkpoint R81.20 Logging Issue

26694

Solved

inside

Participant

26600

Cipher Configuration Tool (CCT)

26599

Solved

inside

Contributor

26500

Wrong peer gateway for decrypted packet (VPN Error code 01)

26500

inside

Advisor

26500

Why CP drops RST-ACK packets from client?

26500

inside

Participant

26499

Allow an encrypted communication channel between servers

26499

Solved

inside

Contributor

26488

VPN community routing not working

26488

Solved

inside

Advisor

26400

Error: At least one DC is currently disconnected

26400

inside

Collaborator

26399

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

26399

Solved

inside

Collaborator

26300

HTTPS Inspection and Office 365 - Anyone got it playing nicely?

26300

Solved

inside

Contributor

26299

Restricting Remote Access by IPv4 Address

26299

inside

Contributor

26204

VSX cluster problem - are we alone?

26204

inside

Mentor

26200

What are IPS Staging Protections? And how do we clear them?

26200

inside

Contributor

26200

Notify when certificate expired

26099

inside

Collaborator

26099

How to count objects of a group

26099

Solved

inside

Contributor

25999

Usercheck Block Page is Insecure/Private

25999

inside

Advisor

25999

SecureXL DoS Rate Limiting (samp rules)

25899

inside

Advisor

25899

Identity sharing - how to change modes

25899

inside

Participant

25899

Solutions for backup/restoring individual MDS Domains.

25899

inside

Advisor

25899

Checkpoint to Azure Route based - guide

25899

inside

Collaborator

25899

URL Filtering Troubleshooting Help

25800

inside

Collaborator

25700

Cluster XL - Failover due to Fullsync PNOTE ON

25700

Solved

inside

Collaborator

25699

URL Filtering Pornography Category not Working - Custom Application Works

25699

inside

Admin

25602

How do I verify Threat Emulation is working?

25602

Solved

inside

Contributor

25599

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

25599

inside

MVP Gold

25599

Is it advisable to change affinity in my scenario?

25599

inside

Advisor

25599

F5 BIG-IP ICAP and SandBlast (TEX)

25399

inside

Participant

25399

DHCP server configuration on GAIA R80.20

25399

inside

MVP Gold

25399

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

25300

inside

Participant

25299

Displaying transceiver properties

25299

Solved

inside

MVP Diamond CHKP

25200

Certificate and CRL validation fails from March 1, 2026

25200

Solved

inside

Contributor

25199

Error: 'IPS' is not responding

25199

inside

Collaborator

25199

Can't monitor secondary node over IPSec tunnel

25199

Solved

inside

Contributor

25099

Gaia r80.10 tag vlan 1 and native vlan

25099

inside

Contributor

25099

R80.10 SmartConsole Gateway & Servers Status

25099

inside

Advisor

25000

BGP over VPN between Azure.docx

25000

Solved

inside

Collaborator

24999

Regular Expression in Application And URL Filtering

24900

inside

Contributor

24900

Site to Site Route Based VPN in Checkpoint

24900

inside

Admin

24899

TechTalk: Advanced Threat Prevention Best Practices

24899

inside

Participant

24899

Firemon - Check Point R80.10 API not working.

24899

inside

Contributor

24801

Bypass HTTPS Inspection for a custom URL

24801

inside

Participant

24800

'TCP packet out of state' drops

24800

inside

Contributor

24800

Searching for Address Spoofing Logs in R80

24599

inside

Contributor

24599

R81 - SmartUpdate Package Repository

24496

Solved

inside

Participant

24401

Block Only YouTube not Google Applications

24401

Solved

inside

Explorer

24400

IPS issue (R80.20) - cannot remove IPS blade from GW object

24400

inside

Advisor

24400

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

24400

inside

Explorer

24400

checkpoint Firewall audit for configuration change

24399

inside

Employee Alumnus

24399

How to debug Policy Installation Errors

24399

inside

Participant

24399

Low bandwidth when checkpoint is connected

24399

inside

Collaborator

24398

Identity Agent - Auto Detecting gateway

24307

Solved

inside

Contributor

24301

Custom HotFix Installation Procedure

24300

Solved

inside

Contributor

24300

VOIP with H323 over remote access VPN not working on R80.10

24300

inside

Collaborator

24300

High cpu utilization on RAD Process

24300

Solved

inside

Collaborator

24300

Exporting/Importing of Objects (R80.20)

24300

inside

Participant

24299

Password hashes, sha512 and the expert password

24299

inside

Participant

24206

Checkpoint Advanced OSPF Capability

24206

inside

Contributor

24202

Lightboard Series: High Availability Architecture with R80.10

24200

inside

Advisor

24200

R80 SmartConsole Unable to connect to server

24200

Solved

inside

Participant

24199

Test bandwidth/speed from Gaia

24199

Solved

inside

Collaborator

24199

High Cpu utilization - Internet Speed drops to very low level

24199

inside

Participant

24099

How ping works with a ClusterXL?

24099

inside

Participant

24099

Allow Office 365 services in Application Control & Url Filtering

24099

inside

Contributor

24099

Finding main IP of any managed gateway

24099

inside

Participant

24000

Private to Private NAT on IPSEC VPN

24000

Solved

inside

Explorer

23999

TCP connection failure port=18191 [error no. 10]

23999

Solved

inside

MVP Gold

23900

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

23900

inside

Employee

23899

Log Exporter and Elasticsearch

23899

Solved

inside

Advisor

23899

Firewall Log Archive and Import in R80.10/ R77.30

23898

inside

Collaborator

23898

IPsec VPN [NATting intresting traffic] config help

23898

Solved

inside

Advisor

23799

Add Interfaces To VSX Bond Group?

23799

inside

Participant

23799

Document related to OPSEC configuration

23798

Solved

inside

Explorer

23798

Check Point Gateway CLI Uptime vs last reboot command output Not Matched (Doubt)

23798

inside

MVP Silver

23700

CPUSE Deployment Agent install script

23700

inside

Contributor

329

Sessions dropping : fw_handle_old_conn_recovery on long-lived UDP flows

329

Solved

inside

Advisor

2537

Repeated debug error messages in fwk.elg

2537

Solved

inside

Explorer

1553

Confused in VSX CoreXL instance configuration

1553

Solved

inside

Collaborator

645

Threat Prevention Custom Policy

645

inside

Advisor

523

Threat Extraction in ElasticXL / Maestro – handling of original files?

278

Solved

inside

Contributor

3411

it is not possible to directly request information about groups and Active Directory

1372

Solved

inside

Contributor

458

Changing ElasticXL Distribution Mode

458

Solved

inside

MVP Diamond

41228

Mac standalone Endpoint VPN - Negotiation with site failed

860

inside

Collaborator

385

NMSAAA9999 Invalid NAS IP address

385

inside

MVP Silver

400

About "CPNotEnoughDataForRuleMatch" and connection reset

10908

inside

MVP Diamond

1107

Policy Install Failed? Start Thinking in Processes, Not Only in Rules

1107

Solved

inside

Contributor

857

sk170857 - How to identify potential segmentations affected by VPN EDPC?

857

Solved

inside

MVP Silver

1459

Python reverse shell communicating over ports 80 or 443

638

inside

Participant

23441

Restrict VPN access by GEO location

23441

inside

Collaborator

1489

ElasticXL with VSNext Deployment – Secondary Appliance Initial Configuration Clarification

1489

inside

Collaborator

405

VoIP Traffic Application Control Objects vs Port Objects

405

Solved

inside

Participant

1147

Error "You cannot activate both the Firewall and Endpoint Policy Management on the same sever"

1147

Solved

inside

Collaborator

556

R82: What is the need of different SSL certificates by gateway

556

Solved

inside

Collaborator

693

Removing member from ClusterXL

549

inside

Authority

1449

Site to Site VPN fails after installing the new hotfix for VPN auth bybass

907

inside

Participant

443

Is SG3600 suitable for upgrading to R82 ?

739

inside

Explorer

287

chekpoint and zscaler ipsec issue

287

Solved

inside

Participant

396

ElasticXL VSNext - Where Are VSwitches Created and Managed?

334

Solved

inside

Contributor

3196

R82.10 smartconsole: Evaluation License Expired

3196

inside

Explorer

279

Domain logserver locked for editing by fwm_user

279

inside

Contributor

7908

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

1622

inside

Contributor

742

web_api_show_package.sh - Script stopped running due to severe error!

742

inside

Advisor

2049

Endpoint client - Confusing input prompts

2049

inside

Participant

6068

how to mount windows file share on gaia r80.10 ?

6068

inside

Advisor

836

Wrong SmartConsole update package

836

inside

Collaborator

1677

root filesystem disk space and /run/podman/logs/events.log

1677

Solved

inside

Employee

8154

Harden Now: Preparing Check Point Gateways & Management for AI‑Driven Threats like Mythos

8154

inside

Contributor

545

CPSEMD low disk space - disk space left

545

inside

MVP Gold

436

VSX R82 Virtual Router creation fails: “The certificate is not valid”

729

inside

MVP Silver

1268

web site times out when going through firewall

1268

inside

Collaborator

432

MTA didn't send Non-Delevery-Report

432

inside

MVP Silver

418

Check Point Disk Troubleshooting - df and du Commands Explained

418

inside

Contributor

1736

R81.20 Take 127 to R82 T779 MDS HA Secondary upgrade fails: “Upgrade to this version is prohibited.

1736

inside

Collaborator

236

MTA TE: Cannot retrieve original password-protected PDF via UserCheck (Blocked by Policy)

236

Solved

inside

Collaborator

1213

SmartConsole Administrator external authentication

470

inside

Explorer

329

How to view the list of banned IPs in VPN SNX

329

inside

Contributor

519

[MANAGEMENT] - High Consumption

519

inside

Explorer

321

"Interface leads to DMZ" setting

699

Solved

inside

Collaborator

1588

Primary SMS upgrade from R81.10 to R82 fail

1588

inside

MVP Gold

850

The Scalable Platform Migration Tool - Refresh question

850

inside

MVP Diamond

4405

HTTPS Inspection Is Not “Just Decryption”: It Is a TLS Enforcement Pipeline

4405

inside

Admin

842

Identity Awareness Best Practices May 2026: Video and Slides

842

inside

Collaborator

538

VSNext on ElasticXL (R82+) with Shared External/Campus vSwitches and Internal Transit vSwitch

538

inside

MVP Gold

1177

List of CVE and half a solution

1177

Solved

inside

MVP Silver

2704

Post-Migration Issue: Lost HTTPS and External SSH Access to Cluster Member

1337

inside

Participant

397

Compatible Smart Console version for Security Gateway with version 80.40

3520

Solved

inside

Explorer

407

Check Point 3900 – Using SFP+ ports (eth10/eth11) for Cluster Sync instead of default eth9

497

inside

Advisor

362

Large File download emulation responses

362

Solved

inside

Contributor

28065

I have a question about the LACP (8023AD) Bond interface.

28065

Solved

inside

Participant

444

Cluster XL Load sharing unicast mode Traffic forwarding interface

444

inside

Explorer

833

Performance Limitations of Virtual Switches in a VSX Environment

14260

Solved

inside

Collaborator

761

Why Standby SMS show No communication ?

761

inside

Collaborator

338

Web Access PT content-security-policy header issues

338

inside

MVP Gold

979

Disk usage and cleanup audit report

979

inside

Explorer

607

Limit the version of Check Point Mobile for Windows

607

inside

MVP Gold

324

identity awareness agent over site to site vpn

324

Solved

inside

Explorer

620

Two interoperable devices with same encryption domain for VPN failover?

620

inside

Participant

1427

DR Scenario - ClusterXL Split Brain Mode

1427

inside

Employee

1664

Introducing Agentic Network Security Orchestration - The Future of Network Security Is Here

1664

inside

MVP Silver

1324

Adding Zscaler cloud IP addresses as updatable object

2393

inside

MVP Diamond

1125

Smart-1 6000-L: Installation Recovery Using VGA Access

1125

inside

Contributor

2409

Recommended IPS “Additional Activation” Categories for Banking/Financial Environments?

754

inside

MVP Silver

554

Impact when disabling DES/3DES for Endpoint VPN clients?

899

Solved

inside

Participant

7671

Export a huge amount of logs to CSV file

7671

inside

Admin

1893

Web Filtering Best Practices May 2026: Video and Slides

1893

Solved

inside

Participant

801

Go to Threat Wiki (link) > Check Point Research = error 404

801

inside

MVP Silver

807

ElasticXL: From single site Active/Active to dual site Active/Standby

807

inside

MVP Silver

1111

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

1111

inside

Collaborator

10916

Help with disk space issue - Checkpoint support not helping

10916

inside

Contributor

426

VSX Cluster R81.20 with Virtual Router: Best Practice for Dual ISP / Multi-WAN Configuration

426

inside

Explorer

742

Check Point ElasticXL integration with FortiGate firewall

742

inside

Contributor

1518

SmartConsole shows No License and Contract is expired messages for IPS, AV, Application

1518

Solved

inside

MVP Gold

1690

R82 MDM/MLM on XL-6000 Appliances SmartConsole slowness

1627

inside

Explorer

1073

Microsoft Teams - QoS setup on firewall

1073

inside

Participant

388

Migration of Rules from Smart-1 Cloud to on-premises management system

388

Solved

inside

Contributor

4524

Checkpoint VSX with Both L2 (Bridge mode) VS and L3 VS

470

Solved

inside

MVP Diamond

6700

ElasticXL (R82) vs ClusterXL Load Sharing — what changes in practice (architecture, traffic, sync, a

6700

Solved

inside

Explorer

1121

CP Standalone Remote Access VPN Client for macOS Tahoe 26.3

1121

inside

MVP Diamond

508

Threat Emulation in production: how to run “zero-day control” without becoming a bottleneck

508

inside

MVP Diamond

2027

How to Roll Out IPS Updates Safely

2027

inside

Collaborator

521

R81.20 Local TE - Constant 10-minute delay on MTA/MFP scans

521

inside

MVP Diamond

943

Management-HA: Address spoofing error for FW_Log when gateway sends logs cross-site

943

inside

Advisor

596

AIOps alerts and penalty box configuration

596

inside

Explorer

701

Gaia WebUI / Admin Login Page Not Opening After Configuration on Check Point R77.20 VMware Lab

701

inside

MVP Diamond

531

Missing Undo (Crtl-Z) in SmartConsole

531

inside

MVP Gold

916

hping/netcat removal from R82.10

916

Solved

inside

Contributor

780

Restrict Access to Gaia Web Interface When RAVPN is in use

780

inside

Participant

1234

Issues with 19200 Appliance migration: ICMP over VPN (UPPAK) and Driver Incompatibility (KPPAK)

1234

Solved

inside

Collaborator

642

IPS Global Exceptions and Custom Policy

642

inside

Explorer

382

Vulnerability scanner shows port 80 unsecured on 9100 gateway

382

Solved

inside

Participant

1780

HTTPS Inspection is always bypassed - "Inspection is not Required"

1780

inside

MVP Platinum

1281

Step by step guide for penalty box R82 and R81.20

1281

Solved

inside

Collaborator

6368

Check point vulnerable to CVE-2026-31431?

6368

Solved

inside

Explorer

472

Prohibit the use of SSLv1, SSLv2, SSLv1 and TLSv1.0, TLSv1 protocols.1. Use TLSv1 protocols.2 and TL

472

inside

Advisor

769

[Action Required] – Important notification to Customer with Threat Emulation blade enabled – An Upda

769

inside

Collaborator

1416

Gaia Portal recognized a non-valid values

1416

inside

MVP Diamond CHKP

1312

How to Understand and Approach IPv8 if It Becomes a Standard?

1312

inside

MVP Diamond CHKP

612

ClusterXL and Some Options to verify on ElasticXL

612

inside

Participant

334

Remote and local backups failing or not running

334

Solved

inside

Contributor

1790

Fresh Install of R82 into VMWare - ERR_CONNECTION_REFUSED before First Time Wizard started

1790

inside

Contributor

413

Some users experienced an immediate logout from Mobile Access

683

inside

Contributor

264

Logs failing to send from firewall to remote SMS logger

264

Solved

inside

Explorer

411

The requirement to adjust the Information Security Regulator

411

inside

Participant

555

Remote Access VPN - identity sources- username format

555

inside

Admin

2025

Troubleshooting 101 April 2026: Video and Slides

2025

Solved

inside

Explorer

2229

R82.10 fail to install on xcp-NG no drive detected

2229

Solved

inside

Advisor

1099

VSX Migration 6400 → 9700 with Bond Redesign (4→2 Interfaces) – vsx_util Reconfigure Limitations?

1099

inside

Collaborator

902

Block Firewall Rule matched but still able to access page ?

902

Solved

inside

MVP Silver

948

sk156072 - Domain migration - SMS to DMS

948

inside

Advisor

2638

Sync Status: Off - SIC failure

2638

inside

Contributor

1222

IP Reputation exception is not working

1222

inside

Participant

584

Rules Migration from Smart-1 Cloud Management to Onpremise Management

584

inside

Explorer

811

On premise Datacenter objects within smart 1 cloud

811

inside

MVP Silver

483

Check Point Geo-Cluster: Active-Active Failover + Dynamic NAT Explained

483

Solved

inside

Explorer

1732

Recommended Jumbo Hotfix for R82 Recommended

1732

inside

Collaborator

747

First Time Access Issue- AWS Checkpoint Management Server

375

inside

Contributor

988

Identity propagation ClusterXl members

988

inside

Collaborator

2053

Email notification when backup fails

2053

Solved

inside

Authority

851

Blink answers.xml and ElasticXL

614

inside

Employee

300

HTTPS Inspection Troubleshooting Evidence-Driven Runbook (Gateway CA, QUIC, pinning, proxy, and ws

9983

Solved

inside

MVP Diamond CHKP

25209

Certificate and CRL validation fails from March 1, 2026

25209

inside

Explorer

909

ISP Redundancy Load Sharing Issue w/ 2 BGP Peers (inactive route from one peer)

909

Solved

inside

Contributor

7209

Data received before SYN was acknowledged. Stripping all packet data

7209

Solved

inside

Participant

521

Upgrade to R81.20 from R81.10 - VSX Environment - is VSLS required?

521

inside

Contributor

3223

VPN Redundancy without using Dynamic Routing

3223

inside

Participant

611

DNS Resolution Issue for Spoke Firewalls over MPLS (Using External IP Instead of Internal)

611

inside

Contributor

878

Web Application Not Working whin using SSL VPN

878

inside

Participant

1218

VSNext and TACACS+ authentication - defining TACP-15 for non-local Gaia admin user

1218

Solved

inside

MVP Diamond

3205

SIC Redundancy in Deployments with Internet-Based Management – Design Question

3205

inside

Contributor

592

SSL VPN WITH STATICALLY NATED IP

592

Solved

inside

MVP Diamond

54952

Check Point Packet Trace Utility

54952

inside

Contributor

475

Smart1-Cloud Policy install fails on R82 SPARK gateways on first run or when running in parallel

475

inside

Collaborator

8082

Funny IP on show configuration

8082

Solved

inside

Participant

1350

Maintenance and Upgrades Best Practices Americas May 2025 Video and Slides

2728

inside

Contributor

828

DynamicID integration with Internal SMTP Relay

828

inside

MVP Silver

1583

Updatable Geo Objects categorize IP as from the wrong country

1583

Solved

inside

Explorer

3186

It is necessary to select certain SNMP traps when working internal_snmp_trap

3186

inside

Advisor

808

SNX not working after portal certificate change

808

Solved

inside

Contributor

748

Unable to Boot R82 ISO in VMWare

748

inside

Participant

1139

Identity awareness - Linux bastion users

1139

Solved

inside

Participant

3550

Quantum spark ipsec tunnel using vti interface

3550

inside

Contributor

538

Core protection "SMTP STARTTLS Command"

538

Solved

inside

Contributor

1666

Configuring DynamicID to use Internal SMTP server

1666

inside

Participant

344

Handling Log Exporter in Management HA with dual "Primary" log servers.

344

inside

Participant

756

Cannot establish SIC between VSX gateway and SMS in ElasticXL VSNext setup R82

756

inside

Explorer

725

Manual NAT with Port Forwarding on Check Point Virtual GW

725

inside

MVP Silver

603

Check Point ISP Redundancy Explained | Dual Internet Setup + Failover Demo

603

inside

Contributor

838

Services don't work on Quantum Spark 1600

838

Solved

inside

Contributor

9871

Zero Phishing and IOS 18.4: Captive Portal Problem

9871

inside

Collaborator

3252

Change interfaces of a bonding group

1062

inside

Contributor

361

Issue with routing based on ABR/PBR

361

inside

Participant

607

Different compliance check rules can be set up for SSL VPN

607

inside

Participant

749

What's New in R82.10 April 2026

3730

inside

Collaborator

1839

Export Objects - Applications / Categories and Network Objects

1839

inside

Explorer

2120

Help on process to export historical VPN users

2120

inside

Participant

1600

Packet Loss and Traffic Drops Caused by ARP Table Overflow in Layer 2 Core Topology

1600

Solved

inside

Explorer

1847

Unable to find reason for RX_DRP

1847

inside

Employee

2241

Introducing LogHub: Unified Log Aggregation for Quantum Gateways

2241

Solved

inside

Contributor

1173

Issue with mobile access client connecting to 3rd party ipsec vpn servers

1173

Solved

inside

Advisor

1683

Issue running management via Harmony SASE

1683

Solved

inside

Participant

5441

LDAPS connections from the gateway will be downgraded to the legacy certificate validation.

5441

inside

Explorer

619

Issue faces in integrating Open ldap v3 in checkpoint firewall

619

Solved

inside

Advisor

1746

Export Specific Rules to CSV for a given object

6152

inside

Contributor

373

MANUAL-NAT ON CHECKPOINT VIRTUAL GW

373

Solved

inside

Contributor

1208

Block MobileAccess/VPN Client Access from unwanted countries

1208

inside

Contributor

800

SMS & Security Gateway Upgrade

800

inside

Participant

1400

Recommended method of Upgrade of Management Server from R81.20 to R82 - VSX

1400

Solved

inside

Participant

2987

SmartConsole Unknown Error (0x2ee2) and Gaia Login Stuck

2987

inside

MVP Gold

617

R82, VSX Main, Maestro, and MLM logging - sanity check

355

inside

Admin

1080

Check Point plans for TLS Certificate Lifetime Reduction

1080

Solved

inside

Participant

3190

The IP quantity limit of a NetworkFeed

3190

inside

Participant

1112

Quantum Spark 2560 failover after every configuration change

1112

inside

MVP

835

🚀 Web SmartConsole – Take 164, 165 & 167 Updates + What’s Coming Next

835

Solved

inside

Advisor

1480

GAIA WebUI Login Events Not Visible in SmartConsole Audit Logs

7100

Solved

inside

Participant

1862

Unexpected fwFullyUtilizedDrops with low CPU – how to identify the source?

1862

Solved

inside

Participant

1000

Persistent fwFullyUtilizedDrops on 26000 appliances (R81.20) – Is disabling SMT a valid next step?

1000

inside

Collaborator

534

Management Network for remote site (dark fiber)

534

Solved

inside

Participant

3183

Can we use Dell R760 as Open Server?

3183

inside

MVP Diamond CHKP

438

How to Mass Create Users, Groups, and Policies on Linux – Step by Step Script Walkthrough

438

Solved

inside

Advisor

16618

Disable expert mode audit log/notification nagware/adware

16618

inside

MVP Diamond CHKP

441

How to Automatically Backup Device Configurations – Step by Step Script Walkthrough

441

inside

MVP Diamond CHKP

381

Creating Interoperable Devices via CLI with an Interactive bash

381

inside

MVP Diamond CHKP

368

Simplifying Meshed VPN Community Creation with an Interactive Bash

368

inside

MVP Silver

849

Automating Static Route Redistribution into BGP with an Interactive Workflow

338

inside

Participant

318

Starlink High Performance Integration

318

inside

MVP Diamond CHKP

285

Check Point Host Batch Creator for Efficient Object Management

285

inside

Explorer

1025

A Practical Quantum Approach to Automation: Built, Tested, and Shared

329

inside

MVP Diamond CHKP

332

Simplifying Interface Configuration on GWs Quantum

332

inside

Contributor

932

R81.20 Failed to resolve VPN MEP gateway

932

inside

Explorer

388

🚀 Web SmartConsole Take 155 - Coming This Week!

6917

inside

MVP Diamond

772

IPS: How to Filter Events by CVE/Protection and Troubleshoot Signatures (Real-Time + Historical)

772

inside

Explorer

1650

Why the IPS blade prevent Checkpoint update.

1650

Solved

inside

Contributor

664

Compliance poor security - VPN114

664

inside

Participant

403

After upgrading management to R82, nat hitcount does not work on gateway on R81.20

403

Solved

inside

Participant

940

BankBot banking trojan got into Google Play again, this time embedded in a game called ‘Jewels Star Classic’.

2164

inside

Explorer

462

SIC error 325 on Install Policy — R82.10 Cross-AZ Cluster in AWS

1732

inside

Advisor

2176

Sending Syslog to logging server pt 2

2176

inside

MVP Diamond CHKP

614

DynamicID with email OTP not sending OTP

973

inside

Collaborator

659

Customize Field/Column Suggestions for Log Search?

923

Solved

inside

Collaborator

1313

Threat Emulation policy action "Send"

1313

inside

Collaborator

3192

Checkpoint Backup using SolarWind NCM

3192

inside

Collaborator

1497

Multi-Domain (MDS/DMS) — HA, Sync, and Advanced Troubleshooting (Field Runbook)

649

inside

Employee

487

Bash script for IP Address Report Generator

487

inside

Employee

405

Bash application to copy CMA policy with the MDS command line

405

inside

Explorer

423

Adding Exception Source have multiple IP

423

inside

Explorer

371

Question regarding cloning Microsoft_AD profile to limit impact of SupportOldSchema parameter

371

inside

MVP Diamond

1445

Can't route another network to my site to site VPN tunnel

1931

inside

Explorer

1196

ISP Redundancy Load Sharing

1196

No messages.

Firewall & Security Management

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800/2000/2500), see the Spark Firewall space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

Virtual

Tue 06 Oct 2026 @ 12:00 PM (ACDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APAC

Virtual

Tue 06 Oct 2026 @ 03:00 PM (CEST)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEA

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Tue 06 Oct 2026 @ 02:00 PM (EDT)

Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER

Virtual

Wed 07 Oct 2026 @ 11:00 AM (EDT)

TechTalk: Scaling Check Point Automation with Arodonata

Virtual

Thu 08 Oct 2026 @ 11:00 AM (EDT)

Under the Hood: Check Point SASE | Zero Trust Network Access, Step by Step

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

In-Person

Wed 21 Oct 2026 @ 09:00 AM (BST)

AI Security Workshop - Glasgow

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?