Re: Check Point Firewall Update Service down, but ...

Tobias_Moritz

Hello folks,

do you also see Check Point Firewall Update Service down from your region?

We do get HTTP 502 for Check Point Firewall Update Service from various ISPs in central europe region for hours now, but https://status.checkpoint.com/ still says "Check Point Firewall Update Service" is 100% operational.

[Expert@gateway:0]# curl_cli --cacert $CPDIR/conf/ca-bundle.crt https://updates.checkpoint.com/WebService/services/DownloadMetaDataService?wsdl
<html>
<head><title>502 Bad Gateway</title></head>
<body>
<center><h1>502 Bad Gateway</h1></center>
</body>
</html>

user@host:~$ curl -vk https://updates.checkpoint.com/WebService/services/DownloadMetaDataService?wsdl
*   Trying [2600:9000:225a:a200:19:dc2f:a580:93a1]:443...
* Connected to updates.checkpoint.com (2600:9000:225a:a200:19:dc2f:a580:93a1) port 443 (#0)
* ALPN: offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_128_GCM_SHA256
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=*.checkpoint.com
*  start date: Jun  3 12:12:04 2025 GMT
*  expire date: Jul  5 12:12:03 2026 GMT
*  issuer: C=BE; O=GlobalSign nv-sa; CN=GlobalSign GCC R3 DV TLS CA 2020
*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
* using HTTP/2
* h2h3 [:method: GET]
* h2h3 [:path: /WebService/services/DownloadMetaDataService?wsdl]
* h2h3 [:scheme: https]
* h2h3 [:authority: updates.checkpoint.com]
* h2h3 [user-agent: curl/7.88.1]
* h2h3 [accept: */*]
* Using Stream ID: 1 (easy handle 0x5d48d423c7a0)
> GET /WebService/services/DownloadMetaDataService?wsdl HTTP/2
> Host: updates.checkpoint.com
> user-agent: curl/7.88.1
> accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
< HTTP/2 502
< content-type: text/html
< content-length: 122
< server: awselb/2.0
< date: Mon, 16 Mar 2026 06:27:49 GMT
< x-cache: Error from cloudfront
< via: 1.1 1957d4cc5292a750b93cc06eb79b023e.cloudfront.net (CloudFront)
< x-amz-cf-pop: TXL50-P1
< x-amz-cf-id: 878LUpRcUHGZVmDfiVbZfKjyI8pCeQwwTSgc8_B_iSFiEH2wYoTLAg==
<
<html>
<head><title>502 Bad Gateway</title></head>
<body>
<center><h1>502 Bad Gateway</h1></center>
</body>
</html>
* Connection #0 to host updates.checkpoint.com left intact

joerivang

Also down for us, HQ based in Europe however, our gateways are based worldwide. All of them are showing that they're unable to retrieve anti-bot anti-virus with the same error.

Markus1634

Same here - all IPS updates fail (Germany)

Daniel_Hainich

Hello,

not available from Germany-

William91503

Hi, same issue here from Indonesia

RemoteUser

same here guys!

Christoph

Can confirm. Multiple sites show the same error.

YuriiBilyi

Services are unavailable in Ukraine and Azure Europe

YuriiBilyi

12:09 The problem has been solved

Lukasz2

We have the same issue (Europe) on R82 + Take 60 + Take11 sk184766 hotfix installed

damso11

Starting works...

Corne_Vorster

Updates also failing in Namibia.

Corne_Vorster

I can Confirm Namibia is back up. 😀

LukasASF

Same here from Germany

Johnny_Doe

Can confirm. Same here in Slovenia

Johnny_Doe

Status in Slovenia - it is back again.

Tobias_Moritz

As YuriiBilyi wrote: It is fixed now. However, it would be nice if someone from Check Point can tell, why the status website did not noted this problem, as it lasted for some hours.

the_rock

I remember seeing such an issue before, but not real sure how often status site gets updated.

Best,
Andy
"Have a great day and if its not, change it"

Scott134269

Yes, Most of my devices in the US are having issues. it's been two weeks. Reply from TAC: This appears to match an ongoing internal issue we are having with the Deployment Agent. There has been an ongoing issue with CRL validation on R82, I understand you are on R81.20, but the Deployment Agent issue is across the board. I apologize for the inconvenience caused by this and will stay vigilant to update you when the fix is released.

_Val_

Hi all,

Check Point Software has identified and resolved the issue.

We are currently finalizing the internal root cause investigation and will provide you with an elaborate answer as soon as possible.

Thank you for your patience.

RemoteUser

Thanks, Val. We're looking forward to your reply! As soon as you can!

the_rock

I see there are few issues currently listed...

https://status.checkpoint.com/

Best,
Andy
"Have a great day and if its not, change it"

Are you a member of CheckMates?

Check Point Firewall Update Service down, but status site says 100% operational