I'm not sure I've seen master/slave used in Check Point features. I know aggregated interfaces are "enslaved" by the bond, but that's a Linux thing which Check Point does not directly control (as an aside, if they had based GAiA on IPSO rather than SecurePlatform, we would probably have FreeBSD's lagg driver and the interfaces in an aggregate would be laggports). Everywhere else I can think of is active/standby/attention/&c. or primary/secondary. It's definitely possible I've forgotten some feature.
I'm also not sure I've seen Check Point themselves use "blacklist" or "whitelist" in the product, though I know individual representatives of the company sometimes use those terms when speaking or writing. Takes time for individuals' speech patterns to change.