General Topics

Policy Insights and Policy Auditor in Action
19 November @ 5pm CET / 11am ET

Access Control and Threat Prevention Best Practices

Watch Here

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
Maestro Madness

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Advisor

33099

Suspicious Traffic of gvt1.com

33099

Solved

inside

Participant

32499

useful debug command in checkpoint

32499

Solved

inside

MVP Platinum

32399

R80.x Performance Tuning Tip - Elephant Flows (Heavy Connections)

32399

inside

Advisor

32000

In which cases would you use VSX?

32000

inside

Advisor

31499

Gateway Cluster Hardware Upgrade

31499

inside

Explorer

31200

encryption failure: Ike version: ikev2 not supported for peer

31200

Solved

inside

Collaborator

31200

R80 GA release date, anybody knows?

31200

Solved

inside

Advisor

31198

TCP SACK PANIC - Kernel vulnerabilities | Check Point affected?

31198

inside

Participant

30697

Prevent VPN client from launching automatically on OSX?

30697

Solved

inside

MVP Platinum

30688

R80.10 - VPN traditional mode to simplified mode

30688

inside

Advisor

30507

R80.x - Performance Tuning Tip – User Mode Firewall vs. Kernel Mode Firewall

30299

inside

Explorer

30299

Website to check latest IPS update version number

29999

Solved

inside

Collaborator

29900

New documentation format for Jumbo SK

29800

Solved

inside

Contributor

29500

Eliminating Routing Asymmetry between Two Different Physical Sites Running Check Point Firewalls

29399

inside

Participant

29202

What is Check Point's solution for RPC traffic on Internal firewall?

29202

inside

MVP Platinum

28999

Check Point for Beginners - Typical Config Mistakes

28999

inside

Collaborator

28900

VPN - Check Point and Fortigate

28897

inside

MVP Platinum

28591

When will R80.30 GA be available?

28591

inside

Advisor

28400

How to recover Gaia Admin password on VMware

28400

inside

Explorer

28299

What happens when a license expires?

28299

Solved

inside

Collaborator

28199

R80.10 User-Mode Firewall and performance impact

27102

inside

Admin

27099

Check Point R80.20 Production and Public EA

27099

inside

Participant

26756

Issue connecting to the management server via smart console

26756

inside

Admin

26700

Domain Object when FQDN has multiple DNS results

26699

inside

Participant

26600

site to site VPN troubleshooting without monitoring blade

26600

inside

Contributor

26199

Configuring CLuster XL step by step

26199

inside

Contributor

26199

SecureXL is enabled, but the traffic is not accelerated

25800

Solved

inside

Collaborator

25699

High CPU after upgrade from 77.30 to 80.10

25100

inside

Explorer

24999

ICMP reply does not match a previous request

24900

Solved

inside

Contributor

24806

R81 - SNMP does not support SHA1 anymore

24614

Solved

inside

Explorer

24499

Stealth rule vs Management Rule

24499

inside

Contributor

24099

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

23999

inside

Collaborator

23900

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

23800

inside

Participant

23599

How can I find Throughput statistics?

23599

inside

Contributor

23200

R80.10 gateway, can't set sim_clamp_vpn_mss

23200

Solved

inside

Participant

23199

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

23199

Solved

inside

Advisor

23196

Get all the Gaia version and installed jumb hotfix

22499

inside

Admin

22399

Aruba Clear Pass Integration - API

22399

inside

MVP Platinum

22203

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

22203

inside

Participant

22199

HTTPS inspection with trusted certificate

22100

inside

MVP Platinum

21999

R80.40 - Dynamic split of CoreXL

21999

inside

Advisor

21999

Best practise - How often do you patch/upgrade your gateways?

21999

Solved

inside

Collaborator

21900

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

21900

inside

Collaborator

21899

How to get interface status of particular time slot

21899

inside

Admin

21799

R77.30 Take 286: New Jumbo Hotfix GA Release

21799

Solved

inside

Collaborator

21799

How to handle core-dumps and crash dumps

21799

Solved

inside

Contributor

21799

Check Point Site-to-Site VPN Compatibility Matrix

21700

inside

Explorer

21399

how to check VPN phase 1 and phase 2 status?

21399

inside

Participant

21300

CheckPoint redirect to IP address 62.0.58.94

21300

inside

Contributor

21299

Monitoring standby member in a cluster

21299

inside

Contributor

21000

Discovering changes in topology table

21000

inside

Contributor

20900

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

20900

inside

Explorer

20900

Policy Based Routing and default route / features

20900

inside

MVP Gold

20899

"Max Power" Book Second Edition Released!

20899

inside

Champion

20866

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

20866

Solved

inside

Contributor

20683

Finding root cause for all the F2F traffic

20683

inside

Advisor

20400

Outbound SSL Inspection: A war story

20400

inside

Participant

20400

Both security gateways are active in the Full HA cluster

20400

Solved

inside

Explorer

20399

Security Gateway Performance Optimization Excerpt

20399

Solved

inside

Advisor

20300

How to see what firewall rules match some traffic

20300

inside

MVP Platinum

20298

HP Server DL360/380 G9 reboot issue!

20298

inside

Advisor

20200

How to check ThreatCloud URL Reputation?

19899

inside

Explorer

19899

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

19899

inside

Advisor

19897

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19698

inside

MVP Platinum

19599

Check Point Support Resources - Top 10

19599

inside

Admin

19599

All Products and Where To Post About Them

19599

inside

Advisor

19599

Remote Access VPN in a Load-sharing Cluster Environment

19599

inside

Participant

19599

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19599

inside

Contributor

19500

static NAT vs hide behind an IP

19500

inside

Explorer

19399

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19399

inside

MVP Platinum

19399

Which version is better? R80.10 or R77.30

19399

inside

Admin

19399

R80.30 Early Availability Program is started!

19399

Solved

inside

Advisor

19100

Hide NAT: Simultaneous Connections to the same destination

19100

Solved

inside

Contributor

19099

How to show the active connection to a specific host

19099

Solved

inside

Contributor

19098

How to list arp table and identify network devices with mac under Check Point FWs

19098

inside

Collaborator

18999

Let's create Check Point Super Cheat Sheet

18999

inside

Contributor

18999

DNS Resolution failing but ping to IP address is succesful.

18999

inside

Explorer

18913

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

18913

inside

Participant

18899

Types of NAT used in checkpoint firewall

18899

inside

Admin

18899

R80.30 Technical Update TechTalk

18899

inside

Collaborator

18899

Pulling FW data fron MDS using a script.

18899

Solved

inside

Participant

555

Strange BGP announcement of a /31 network as /32

555

Solved

inside

Advisor

431

Clarification on “Check Point 6200P” Model

431

Solved

inside

Explorer

358

Memory cache usage on 16200 appliance – expected behavior?

818

inside

Employee

7505

Announcement: Check Point R82 - Recommended Release

7505

inside

Advisor

204

Global Policy Package - Skip/Goes to Domain Layer action

204

Solved

inside

Collaborator

721

Question About Default Threat Prevention Profiles

195

Solved

inside

Advisor

287

R81.20 Global Properties Stateful Inspection default settings

287

inside

MVP Silver

549

Common Criteria for Harmony Endpoint Security with compliance to 2 NIAP Protection Profiles

1070

Solved

inside

Admin

7467

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

7467

Solved

inside

Contributor

292

Single VSY within VSX environment wont send logs to dedicated log server

292

inside

Champion

18624

Configuring dynamic routing in clustered VSX

18624

inside

Collaborator

628

Failed login SmartConsole after upgrade Win11

628

Solved

inside

Advisor

1008

Tip: How to deal with RAD errors

667

inside

Explorer

278

Server Error in '/owa' Application

278

inside

Contributor

2730

VPN issue stuck in Phase 1 and sometimes disconnects

2730

Solved

inside

MVP Gold

424

new transciever CPAC-TR-25SR-DM

265

inside

MVP Gold

241

UPDATE - DigiCert Certificate Expiration Mitigated

3572

inside

Advisor

355

idrac - how to create account with admin role

355

inside

Employee

3153

Introducing the New Interactive Ideas Portal – Join the Pilot!

3153

inside

Contributor

1410

Process file types known to contain malware

1410

Solved

inside

Participant

32502

useful debug command in checkpoint

32502

inside

Contributor

460

Route Based VPN Network SA no route

460

inside

MVP Gold

246

Can not access smart console over site-site VPN

246

Solved

inside

Explorer

241

External Certificates for IPSEC VPN

241

inside

Advisor

309

Rewriting internet access policy

309

Solved

inside

Participant

4140

Site to site vpn drops on policy install

4140

inside

Contributor

212

Customer FTP traffic keeps triggering new IPS protections

212

inside

Collaborator

3591

Trusted CA List is missing a lot

3591

inside

Advisor

597

Install Policy pushed but still visible by other admin

182

Solved

inside

Advisor

843

CPUSE v2606 manual installation failure

736

inside

Employee

217

R82 Jumbo Hotfix Accumulator take 39 has been released

217

inside

Advisor

580

Best Way to Export Policy Package for Reporting

580

Solved

inside

Advisor

1553

Regenerate Token for MaaS Tunnel

1553

inside

Collaborator

290

a third-party certificate on a clustered and centrally managed Appliance 1900

202

Solved

inside

Participant

363

Checkpoint 19000 Supported Transceivers Sync

363

Solved

inside

MVP Gold

521

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

521

inside

Explorer

311

Testing primary and secondary bond interfaces

311

Solved

inside

Participant

380

Best Practices for Threat Prevention API Calls to Appliance - API repository

380

inside

Advisor

226

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

226

Solved

inside

Contributor

409

What are the new NAT options in SMS and GW for?

409

Solved

inside

Contributor

2724

Traffic initiated from Lan to VPN Endpoint Client Blocked

861

inside

Participant

1038

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

1038

Solved

inside

Advisor

3196

Quantum Force 9000 Appliance OS version Compatibility

483

inside

MVP Platinum

441

Help Shape the Future of AI at Check Point

242

inside

Contributor

1136

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

1136

Solved

inside

Collaborator

1074

Firewall - Automating Firewall Rule Cleanup Based on Usage

1074

inside

Employee

1125

CVE-2025-45582 - tar: Tar path traversal

1298

Solved

inside

Advisor

277

Peer certificate verification failed after certificate replacement

277

Solved

inside

Contributor

19140

How to list arp table and identify network devices with mac under Check Point FWs

19140

Solved

inside

Explorer

655

Remote Access VPN – Can specific routes be assigned to particular users?

655

inside

MVP Platinum

1223

R8x - Performance Tuning Tip - Appliance Sizing

1223

inside

Participant

3775

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

1325

Solved

inside

Contributor

466

add rule to policy via mgmt_Cli fails

466

inside

Explorer

256

Behaviour after regular contract/subscription expiration

332

Solved

inside

Advisor

597

Log file isn't shown automatically after upgrade to R82

597

Solved

inside

Explorer

488

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

488

Solved

inside

Explorer

1365

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

1365

inside

Participant

769

7000 appliance R81.20 iSO image install

769

inside

Explorer

169

Unable to take ssh for MGMT Port

169

Solved

inside

Advisor

386

Updatable (geo) objects and IP addresses, again

386

Solved

inside

Advisor

847

Renaming a Gateway Node in a Cluster

847

Solved

inside

Advisor

440

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

440

inside

MVP Platinum

283

R82.10 - Hardware Security Module (HSM) for TLS 1.3

283

Solved

inside

Advisor

2892

How do you keep track of the latest FW/OS updates?

2892

Solved

inside

Advisor

1655

Manual FTP transfers are always corrupted while scheduled backups are not

459

inside

Employee

186

Estimated R82 release recommended date?

3279

inside

Collaborator

3667

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

3667

Solved

inside

Explorer

372

Monitord process consume high cpu, does it safe to terminate the process during production hour?

372

inside

Collaborator

812

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

888

Solved

inside

Contributor

1000

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

1000

inside

MVP Platinum

4321

'fw ctl conntab -x' issue in R81.10

4321

Solved

inside

Advisor

1373

How to view the connections of the dynamic dispatcher's table

1373

Solved

inside

Collaborator

385

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

385

inside

Explorer

1618

A suspicious traffic log was observed during monitoring

379

inside

Admin

6624

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

6624

inside

Explorer

205

I need Check_Point_R81.20_T631_ScalablePlatform

440

inside

Participant

2990

Questions about User Mode and Kernel Mode

2990

inside

Explorer

615

Cannot start Mobile Access Portal Agent

615

inside

Advisor

352

Openserver Dell R660xs, anyone ever tried this machine?

352

inside

Explorer

794

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

1698

Solved

inside

Collaborator

28288

Unable to establish the SIC(Outgoing Policy)

282

inside

Employee

922

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

6392

inside

Admin

2847

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

2847

inside

MVP Gold

380

RA clients not able to access external cluster interface

380

inside

Explorer

357

Microsegmentation with Firewall Hardware

357

inside

Explorer

328

the new subnets are unable to communicate through the existing VPN tunnel

328

inside

Participant

546

SMS migration from XCP-NG to ProxMox

546

inside

Advisor

4377

Take logging out of the implied rules

874

inside

MVP Platinum

1648

SmartConsole Shortcuts - cheat sheet

1648

inside

Explorer

547

I can't find how my dns host is used within the FW object.

547

inside

Explorer

4121

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

4121

Solved

inside

Explorer

561

BGP route on Maestro Active/Active are showing as inactive/unusable

561

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 11 Nov 2025 @ 10:00 AM (CET)

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA

Virtual

Tue 11 Nov 2025 @ 11:00 AM (EST)

Under the Hood: CloudGuard WAF for the GenAI Era

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CET)

Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 10:00 AM (CET)

The Netherlands: Hands-On CloudGuard Workshops

Virtual

Tue 11 Nov 2025 @ 10:00 AM (CET)

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA

Virtual

Tue 11 Nov 2025 @ 11:00 AM (EST)

Under the Hood: CloudGuard WAF for the GenAI Era

Virtual

Thu 13 Nov 2025 @ 10:00 AM (CET)

Cloud Architect Series - Guarding Generative AI: Next-Gen Application Security with CloudGuard WAF

Virtual

Fri 14 Nov 2025 @ 10:00 AM (CET)

CheckMates Live Netherlands - Veriti, Threat Exposure Management

Virtual

Wed 19 Nov 2025 @ 11:00 AM (EST)

TechTalk: Improve Your Security Posture with Threat Prevention and Policy Insights

Virtual

Thu 20 Nov 2025 @ 03:00 PM (CET)

Deep Dive EMEA: Management API Best Practices

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CET)

Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 10:00 AM (CET)

The Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CST)

Tulsa, OK: Hands-on CloudGuard Workshops

In-Person

Thu 13 Nov 2025 @ 09:00 AM (CST)

Oklahoma City, OK: Hands-on CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?