General Topics

Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages

Introduction to Lakera:
Securing the AI Frontier!

Watch Now!

Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Learn More

HTTPS Inspection
Help us to understand your needs better

Take the Survey

CheckMates Go:
SharePoint CVEs and More!

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Participant

32031

useful debug command in checkpoint

32031

Solved

inside

Advisor

31999

Most URLs categorized as X-VPN this morning

31999

Solved

inside

MVP Gold

31599

R80.x Performance Tuning Tip - Elephant Flows (Heavy Connections)

31599

inside

Advisor

31597

In which cases would you use VSX?

31597

Solved

inside

Collaborator

31038

R80 GA release date, anybody knows?

31038

inside

Explorer

30912

encryption failure: Ike version: ikev2 not supported for peer

30912

Solved

inside

Advisor

30799

TCP SACK PANIC - Kernel vulnerabilities | Check Point affected?

30799

inside

Advisor

30599

Gateway Cluster Hardware Upgrade

30599

inside

Participant

30445

Prevent VPN client from launching automatically on OSX?

30445

Solved

inside

MVP Gold

30299

R80.10 - VPN traditional mode to simplified mode

30299

inside

Advisor

30207

R80.x - Performance Tuning Tip – User Mode Firewall vs. Kernel Mode Firewall

30001

Solved

inside

Collaborator

29699

Eliminating Routing Asymmetry between Two Different Physical Sites Running Check Point Firewalls

29000

inside

Participant

28838

What is Check Point's solution for RPC traffic on Internal firewall?

28838

Solved

inside

Explorer

28800

Website to check latest IPS update version number

28800

inside

Collaborator

28652

Check Point for Beginners - Typical Config Mistakes

28499

Solved

inside

Contributor

28400

VPN - Check Point and Fortigate

28400

inside

Employee

28299

New documentation format for Jumbo SK

28299

inside

MVP Gold

28156

When will R80.30 GA be available?

28156

inside

Advisor

27999

How to recover Gaia Admin password on VMware

27999

inside

Collaborator

27892

What happens when a license expires?

27716

inside

Participant

27589

R80.10 User-Mode Firewall and performance impact

26905

inside

MVP Gold

26799

Issue connecting to the management server via smart console

26756

inside

Admin

26699

Check Point R80.20 Production and Public EA

26699

inside

Participant

26531

site to site VPN troubleshooting without monitoring blade

26531

inside

Admin

26409

Domain Object when FQDN has multiple DNS results

26099

inside

Contributor

25983

Configuring CLuster XL step by step

25983

inside

Advisor

25973

SecureXL is enabled, but the traffic is not accelerated

25374

Solved

inside

Collaborator

25252

High CPU after upgrade from 77.30 to 80.10

24899

Solved

inside

Collaborator

24833

ICMP reply does not match a previous request

24833

inside

Explorer

24828

Stealth rule vs Management Rule

24440

Solved

inside

Advisor

24033

R81 - SNMP does not support SHA1 anymore

24033

inside

Contributor

23960

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

23744

Solved

inside

Participant

23510

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

23510

inside

Participant

23305

How can I find Throughput statistics?

23305

Solved

inside

Advisor

23088

R80.10 gateway, can't set sim_clamp_vpn_mss

22900

inside

Participant

22884

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

22814

inside

MVP Gold

22615

Get all the Gaia version and installed jumb hotfix

22338

inside

Admin

22199

HTTPS inspection with trusted certificate

21941

inside

Collaborator

21858

Aruba Clear Pass Integration - API

21858

inside

MVP Gold

21800

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

21800

inside

Advisor

21752

Best practise - How often do you patch/upgrade your gateways?

21752

Solved

inside

Collaborator

21746

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

21746

inside

Collaborator

21644

How to get interface status of particular time slot

21644

inside

MVP Gold

21599

R80.40 - Dynamic split of CoreXL

21599

Solved

inside

Contributor

21597

How to handle core-dumps and crash dumps

21562

inside

MVP Gold

21499

Check Point Site-to-Site VPN Compatibility Matrix

21499

inside

Admin

21442

R77.30 Take 286: New Jumbo Hotfix GA Release

21442

inside

Explorer

21237

how to check VPN phase 1 and phase 2 status?

21237

inside

Participant

21205

Monitoring standby member in a cluster

21205

inside

Contributor

21143

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

20866

inside

Participant

20858

CheckPoint redirect to IP address 62.0.58.94

20858

inside

Explorer

20699

Policy Based Routing and default route / features

20699

inside

Contributor

20640

Discovering changes in topology table

20640

inside

MVP Gold

20454

"Max Power" Book Second Edition Released!

20454

Solved

inside

Contributor

20395

Finding root cause for all the F2F traffic

20395

inside

Contributor

20368

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

20368

inside

Advisor

20102

Outbound SSL Inspection: A war story

20102

inside

MVP Gold

20082

HP Server DL360/380 G9 reboot issue!

20082

inside

Admin

20003

Security Gateway Performance Optimization Excerpt

20003

Solved

inside

Advisor

20003

How to see what firewall rules match some traffic

20003

inside

Advisor

19915

Both security gateways are active in the Full HA cluster

19815

Solved

inside

Explorer

19806

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

19721

Solved

inside

Participant

19699

All Products and Where To Post About Them

19547

Solved

inside

Advisor

19533

How to check ThreatCloud URL Reputation?

19533

inside

Collaborator

19525

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19525

inside

MVP Gold

19500

Check Point Support Resources - Top 10

19500

inside

Participant

19442

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19442

inside

Advisor

19276

Remote Access VPN in a Load-sharing Cluster Environment

19276

inside

MVP Gold

19256

Which version is better? R80.10 or R77.30

19256

inside

Collaborator

19249

static NAT vs hide behind an IP

19237

inside

Explorer

19155

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19155

inside

Admin

19145

R80.30 Early Availability Program is started!

19145

inside

Contributor

18984

Let's create Check Point Super Cheat Sheet

18944

inside

Explorer

18913

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

18913

inside

Collaborator

18899

Pulling FW data fron MDS using a script.

18899

Solved

inside

Contributor

18899

How to list arp table and identify network devices with mac under Check Point FWs

18899

Solved

inside

Contributor

18878

How to show the active connection to a specific host

18878

inside

Admin

18827

TechTalk Special Edition: The Apache log4j Vulnerability Explained

18827

inside

Participant

18683

Types of NAT used in checkpoint firewall

18683

Solved

inside

Advisor

18659

Hide NAT: Simultaneous Connections to the same destination

18659

inside

Admin

18605

R80.30 Technical Update TechTalk

18605

inside

MVP Gold

365

Help Shape the Future of AI at Check Point

196

inside

Contributor

850

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

850

Solved

inside

Collaborator

926

Firewall - Automating Firewall Rule Cleanup Based on Usage

926

inside

Employee

830

CVE-2025-45582 - tar: Tar path traversal

775

Solved

inside

Advisor

205

Peer certificate verification failed after certificate replacement

205

Solved

inside

Contributor

18913

How to list arp table and identify network devices with mac under Check Point FWs

18913

Solved

inside

Explorer

485

Remote Access VPN – Can specific routes be assigned to particular users?

485

inside

MVP Gold

1101

R8x - Performance Tuning Tip - Appliance Sizing

1101

inside

Participant

3606

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

1060

Solved

inside

Contributor

340

add rule to policy via mgmt_Cli fails

340

inside

Explorer

209

Behaviour after regular contract/subscription expiration

249

Solved

inside

Advisor

451

Log file isn't shown automatically after upgrade to R82

451

Solved

inside

Explorer

377

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

377

Solved

inside

Explorer

1075

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

1075

inside

Participant

634

7000 appliance R81.20 iSO image install

634

inside

Explorer

127

Unable to take ssh for MGMT Port

127

Solved

inside

Advisor

303

Updatable (geo) objects and IP addresses, again

303

Solved

inside

Advisor

660

Renaming a Gateway Node in a Cluster

660

Solved

inside

Advisor

352

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

352

inside

MVP Gold

226

R82.10 - Hardware Security Module (HSM) for TLS 1.3

226

Solved

inside

Advisor

2552

How do you keep track of the latest FW/OS updates?

2552

Solved

inside

Advisor

1274

Manual FTP transfers are always corrupted while scheduled backups are not

323

inside

Employee

156

Estimated R82 release recommended date?

2712

inside

Collaborator

3304

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

3304

Solved

inside

Explorer

291

Monitord process consume high cpu, does it safe to terminate the process during production hour?

291

inside

Collaborator

667

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

671

Solved

inside

Contributor

763

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

763

inside

MVP Gold

4155

'fw ctl conntab -x' issue in R81.10

4155

Solved

inside

Advisor

1306

How to view the connections of the dynamic dispatcher's table

1306

Solved

inside

Collaborator

308

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

308

inside

Explorer

1287

Remote Access Location Awareness - DC Check

759

inside

Explorer

317

A suspicious traffic log was observed during monitoring

317

inside

Admin

5955

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

5955

inside

Explorer

165

I need Check_Point_R81.20_T631_ScalablePlatform

367

inside

Participant

2565

Questions about User Mode and Kernel Mode

2565

inside

Explorer

420

Cannot start Mobile Access Portal Agent

420

inside

Advisor

288

Openserver Dell R660xs, anyone ever tried this machine?

288

inside

Explorer

595

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

901

Solved

inside

Collaborator

27828

Unable to establish the SIC(Outgoing Policy)

241

inside

Employee

848

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

5847

inside

Admin

2631

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

2631

inside

MVP Gold

293

RA clients not able to access external cluster interface

293

inside

Explorer

299

Microsegmentation with Firewall Hardware

299

inside

Explorer

254

the new subnets are unable to communicate through the existing VPN tunnel

254

inside

Participant

409

SMS migration from XCP-NG to ProxMox

409

inside

Advisor

4252

Take logging out of the implied rules

718

inside

MVP Gold

1441

SmartConsole Shortcuts - cheat sheet

1441

inside

Explorer

433

I can't find how my dns host is used within the FW object.

433

inside

Explorer

3860

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

3860

Solved

inside

Explorer

474

BGP route on Maestro Active/Active are showing as inactive/unusable

474

inside

Employee

218

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

218

Solved

inside

Contributor

644

LOM interface - Console Session

644

Solved

inside

Collaborator

605

Reducing /var/log partition size on Gaia OS

605

Solved

inside

Collaborator

12449

https inspection tip/feedback/suggestion

552

inside

Explorer

308

Disable Camelia Cipher on the firewall

308

inside

Collaborator

379

always-connect for standalone vpn client

379

Solved

inside

Collaborator

1027

Policy Installation Failed(Time out)-SMB Appliance

1027

Solved

inside

Admin

2713

New Products Introduction July 2025: Video, Slides, and Q&A

2713

Solved

inside

Advisor

419

Export all gateways IPs MDS + VSX

419

inside

Collaborator

631

Unable to access Site(CPNotEnoughDataForRuleMatch)

631

inside

Employee

301

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

301

Solved

inside

Advisor

2064

Clarification Needed on fwaccel stat

2064

Solved

inside

Explorer

329

How to renew GAIA web certificate.

329

Solved

inside

Advisor

785

Deleting a Checkpoint host object from smart console

322

Solved

inside

Contributor

633

Netflow Export with Physical Ip in cluster environment

151

Solved

inside

Advisor

433

Moving a Gateway from One CMA to Another

433

inside

Explorer

198

Logs not showing up in SmartConsole after policy install

198

inside

Collaborator

2275

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

167

inside

Admin

320

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

320

inside

Collaborator

215

synchronize Identity sharing between the active and passive node

215

Solved

inside

MVP Gold

34802

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

205

Solved

inside

Advisor

322

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

322

Solved

inside

Employee Alumnus

3238

What is the difference between Custom Intelligence feed and Network Feeds ?

3238

inside

Explorer

414

Static Hide Behind Gateway NAT

859

inside

Admin

249

From OT to Cloud: A Security Blueprint for Manufacturers EMEA - Recording

249

inside

Employee

7153

New 3900 Branch office applainces were launched today 28/5

7153

Solved

inside

Contributor

233

telnet showing open port on ILO when its not when going via FW

233

inside

Explorer

492

Allow rule for site hosted on akamai CDN, only the first dns response seems to work

492

Solved

inside

Explorer

411

Identity Awareness Agents SK with direct links - published!

17641

inside

Advisor

270

Fresh Install Without USB, Possible From Boot Menu?

270

Solved

inside

Advisor

369

simple question about ISOmorphic

369

inside

Advisor

173

IPSec tunnel Setup [HUB and SPOKE Scenario] with Both spokes being non-checkpoint VPN Gateway

584

Solved

inside

Advisor

158

At a gateway, how do I determine what domain the gateway belongs to?

571

inside

Advisor

655

Policy location on a gateway R80

7587

Solved

inside

MVP Silver

210

GMSA/automated password rotation for Identity

210

inside

Collaborator

7678

Identity awareness collector changes user identity for same IP while connecting to RDP

7678

inside

Explorer

191

SNMP Issue after JHF 99 R81.20 VSX cluster

191

Solved

inside

MVP Gold

2482

Upgrade is failing from R81.10 to R82

2482

inside

Participant

4256

exclude checkpoint public/external ip from encryption domain?

4256

inside

Collaborator

769

Clarification on DNS Reputation Logs

769

inside

Employee

1312

Quantum Force performance boost is available post the release of R82 Jumbo #3 ( Take 25)

1312

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 02 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

Tue 07 Oct 2025 @ 10:00 AM (CEST)

Cloud Architect Series: AI-Powered API Security with CloudGuard WAF

In-Person

Wed 08 Oct 2025 @ 09:00 AM (EDT)

Washington DC: Hands-On CloudGuard Workshops

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

Virtual

Thu 02 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

Virtual

Wed 22 Oct 2025 @ 11:00 AM (EDT)

Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents Outages

Virtual

Thu 23 Oct 2025 @ 03:00 PM (CEST)

EMEA Deep Dive: Troubleshooting 101

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

In-Person

Wed 08 Oct 2025 @ 09:00 AM (EDT)

Washington DC: Hands-On CloudGuard Workshops

In-Person

Mon 13 Oct 2025 @ 08:00 AM (CEST)

Madrid: Hands-On CloudGuard Workshops

In-Person

Tue 14 Oct 2025 @ 10:00 AM (CEST)

CheckMates Austria Road Show - CheckMates Live Graz

In-Person

Wed 15 Oct 2025 @ 09:00 AM (EDT)

Atlanta, GA: Hands-on CloudGuard Workshops

In-Person

Wed 22 Oct 2025 @ 09:00 AM (EDT)

Tampa, FL: Hands-on CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?