General Topics

Policy Insights and Policy Auditor in Action
19 November @ 5pm CET / 11am ET

Access Control and Threat Prevention Best Practices

Watch Here

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
Maestro Madness

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Advisor

33199

Suspicious Traffic of gvt1.com

33199

Solved

inside

MVP Platinum

32599

R80.x Performance Tuning Tip - Elephant Flows (Heavy Connections)

32599

Solved

inside

Participant

32599

useful debug command in checkpoint

32599

inside

Advisor

32399

In which cases would you use VSX?

32399

inside

Advisor

31899

Gateway Cluster Hardware Upgrade

31899

Solved

inside

Advisor

31499

TCP SACK PANIC - Kernel vulnerabilities | Check Point affected?

31499

Solved

inside

Collaborator

31300

R80 GA release date, anybody knows?

31300

inside

Explorer

31223

encryption failure: Ike version: ikev2 not supported for peer

31223

inside

Participant

30899

Prevent VPN client from launching automatically on OSX?

30899

Solved

inside

MVP Platinum

30799

R80.10 - VPN traditional mode to simplified mode

30799

inside

Advisor

30701

R80.x - Performance Tuning Tip – User Mode Firewall vs. Kernel Mode Firewall

30400

inside

Explorer

30399

Website to check latest IPS update version number

30399

inside

Employee

30199

New documentation format for Jumbo SK

30199

Solved

inside

Collaborator

30099

Eliminating Routing Asymmetry between Two Different Physical Sites Running Check Point Firewalls

29700

Solved

inside

Contributor

29699

Check Point for Beginners - Typical Config Mistakes

29300

inside

Participant

29253

What is Check Point's solution for RPC traffic on Internal firewall?

29253

Solved

inside

Contributor

29100

VPN - Check Point and Fortigate

29100

inside

Collaborator

28913

When will R80.30 GA be available?

28899

inside

Explorer

28500

What happens when a license expires?

28500

inside

Advisor

28500

How to recover Gaia Admin password on VMware

28500

Solved

inside

Collaborator

28400

R80.10 User-Mode Firewall and performance impact

27299

inside

Admin

27200

Check Point R80.20 Production and Public EA

27200

inside

Participant

27000

Domain Object when FQDN has multiple DNS results

27000

inside

Participant

26845

Issue connecting to the management server via smart console

26845

inside

Admin

26799

site to site VPN troubleshooting without monitoring blade

26724

inside

Contributor

26299

Configuring CLuster XL step by step

26216

inside

Advisor

26116

SecureXL is enabled, but the traffic is not accelerated

25999

inside

Advisor

25965

ICMP reply does not match a previous request

25199

inside

MVP Platinum

25199

High CPU after upgrade from 77.30 to 80.10

25199

inside

Explorer

25099

R81 - SNMP does not support SHA1 anymore

24899

Solved

inside

Contributor

24870

Stealth rule vs Management Rule

24608

inside

Contributor

24299

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

24099

Solved

inside

Participant

24032

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

24032

inside

Collaborator

24000

How can I find Throughput statistics?

23800

inside

Contributor

23400

R80.10 gateway, can't set sim_clamp_vpn_mss

23400

Solved

inside

Participant

23399

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

23399

Solved

inside

Advisor

23302

Aruba Clear Pass Integration - API

22599

inside

Participant

22599

Get all the Gaia version and installed jumb hotfix

22599

inside

MVP Platinum

22399

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

22399

inside

MVP Platinum

22299

R80.40 - Dynamic split of CoreXL

22299

inside

Participant

22261

HTTPS inspection with trusted certificate

22187

inside

Advisor

22099

Best practise - How often do you patch/upgrade your gateways?

22099

Solved

inside

Collaborator

22099

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

22099

inside

Collaborator

22099

How to get interface status of particular time slot

22099

inside

Admin

21999

R77.30 Take 286: New Jumbo Hotfix GA Release

21999

Solved

inside

Contributor

21900

Check Point Site-to-Site VPN Compatibility Matrix

21899

Solved

inside

Collaborator

21898

How to handle core-dumps and crash dumps

21898

inside

Explorer

21499

how to check VPN phase 1 and phase 2 status?

21499

inside

Participant

21399

Monitoring standby member in a cluster

21399

inside

Participant

21358

CheckPoint redirect to IP address 62.0.58.94

21358

inside

Contributor

21343

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

21099

inside

Contributor

21099

Discovering changes in topology table

21099

inside

Champion

21001

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

21001

inside

MVP Gold

20999

"Max Power" Book Second Edition Released!

20999

inside

Explorer

20952

Policy Based Routing and default route / features

20952

inside

Advisor

20799

Outbound SSL Inspection: A war story

20799

Solved

inside

Contributor

20799

Finding root cause for all the F2F traffic

20799

inside

Admin

20600

Security Gateway Performance Optimization Excerpt

20600

inside

Participant

20599

Both security gateways are active in the Full HA cluster

20599

Solved

inside

Explorer

20499

HP Server DL360/380 G9 reboot issue!

20402

Solved

inside

Advisor

20400

How to see what firewall rules match some traffic

20400

inside

Advisor

20284

How to check ThreatCloud URL Reputation?

20199

Solved

inside

Participant

20099

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

19955

inside

Advisor

19919

Remote Access VPN in a Load-sharing Cluster Environment

19900

inside

Collaborator

19899

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19740

inside

MVP Platinum

19699

Check Point Support Resources - Top 10

19699

inside

Participant

19699

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19699

inside

Admin

19673

All Products and Where To Post About Them

19673

inside

Contributor

19602

static NAT vs hide behind an IP

19602

inside

Explorer

19600

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19600

inside

MVP Platinum

19599

Which version is better? R80.10 or R77.30

19599

inside

Admin

19599

R80.30 Early Availability Program is started!

19599

Solved

inside

Collaborator

19299

DNS Resolution failing but ping to IP address is succesful.

19299

Solved

inside

Advisor

19298

RSS feed for checkpoint.com is not working any more

19298

Solved

inside

Advisor

19199

Hide NAT: Simultaneous Connections to the same destination

19199

Solved

inside

Contributor

19199

How to list arp table and identify network devices with mac under Check Point FWs

19199

Solved

inside

Contributor

19132

How to show the active connection to a specific host

19132

inside

Collaborator

19104

Let's create Check Point Super Cheat Sheet

19104

inside

Contributor

19103

R80.30 Technical Update TechTalk

19005

Solved

inside

Champion

18999

Gateway behind NAT. What limitations am I to be aware of?

18999

Solved

inside

Contributor

18999

Upgrading form R81.10 to R81.20

18999

inside

Admin

698

BRICKSTORM: A Stealthy Espionage Campaign Targeting Enterprise Infrastructure (sk184082)

698

inside

MVP Gold

2714

Ongoing issue: high CPU load fw_workers + rad

2714

inside

Advisor

313

How to safely reuse an existing cluster

313

inside

Admin

1974

Policy installation fails with "Error code 2000025" and sk177710

351

inside

Explorer

547

Threat Emulation update failed

547

inside

Advisor

3036

unable to ssh to device after JHF upgrade

3036

Solved

inside

Advisor

662

Difference Between Configuring Proxy on Firewall CLI vs Cluster Object in SmartConsole

662

Solved

inside

Participant

2504

Proxy HTTP/HTTPS - two sessions

2504

Solved

inside

MVP Silver

426

What should be the settings for ingesting logs in SIEM for self managed spark devices

177

Solved

inside

Explorer

770

Unable to remote save snapshot via SCP.

770

inside

Advisor

1877

forklifting 5xxx appliances -> 9100 UPPAK observations

1877

inside

Advisor

210

ISP redundancy and VPNs to azure

210

Solved

inside

MVP Platinum

168

An idea from customer about web UI jumbo hotfix install

168

Solved

inside

Collaborator

1074

HTTPS inspection - Create a CSR for an external CA to use for the outbound certificate

1074

inside

Employee

1118

Jumbo Hotfix Accumulator for Quantum Force 3900 Appliances take #22 has been released today

1118

Solved

inside

Contributor

602

Migrate eth interface to a VLAN interface in bond

602

Solved

inside

Participant

601

Strange BGP announcement of a /31 network as /32

601

Solved

inside

Advisor

470

Clarification on “Check Point 6200P” Model

470

Solved

inside

Explorer

414

Memory cache usage on 16200 appliance – expected behavior?

918

inside

Employee

7748

Announcement: Check Point R82 - Recommended Release

7748

inside

Advisor

233

Global Policy Package - Skip/Goes to Domain Layer action

233

Solved

inside

Collaborator

792

Question About Default Threat Prevention Profiles

210

Solved

inside

Advisor

296

R81.20 Global Properties Stateful Inspection default settings

296

inside

MVP Silver

579

Common Criteria for Harmony Endpoint Security with compliance to 2 NIAP Protection Profiles

1084

Solved

inside

Admin

8126

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

8126

Solved

inside

Contributor

315

Single VSY within VSX environment wont send logs to dedicated log server

315

inside

Champion

18781

Configuring dynamic routing in clustered VSX

18781

inside

Collaborator

711

Failed login SmartConsole after upgrade Win11

711

Solved

inside

Advisor

1076

Tip: How to deal with RAD errors

715

inside

Explorer

311

Server Error in '/owa' Application

311

inside

Contributor

2903

VPN issue stuck in Phase 1 and sometimes disconnects

2903

Solved

inside

MVP Gold

448

new transciever CPAC-TR-25SR-DM

287

inside

MVP Gold

272

UPDATE - DigiCert Certificate Expiration Mitigated

3795

inside

Advisor

385

idrac - how to create account with admin role

385

inside

Employee

3232

Introducing the New Interactive Ideas Portal – Join the Pilot!

3232

inside

Contributor

1451

Process file types known to contain malware

1451

Solved

inside

Participant

32678

useful debug command in checkpoint

32678

inside

Contributor

486

Route Based VPN Network SA no route

486

inside

MVP Gold

264

Can not access smart console over site-site VPN

264

Solved

inside

Explorer

251

External Certificates for IPSEC VPN

251

inside

Advisor

327

Rewriting internet access policy

327

Solved

inside

Participant

4172

Site to site vpn drops on policy install

4172

inside

Contributor

222

Customer FTP traffic keeps triggering new IPS protections

222

inside

Collaborator

3653

Trusted CA List is missing a lot

3653

inside

Advisor

615

Install Policy pushed but still visible by other admin

197

Solved

inside

Advisor

902

CPUSE v2606 manual installation failure

778

inside

Employee

223

R82 Jumbo Hotfix Accumulator take 39 has been released

223

inside

Advisor

626

Best Way to Export Policy Package for Reporting

626

Solved

inside

Advisor

1648

Regenerate Token for MaaS Tunnel

1648

inside

Collaborator

321

a third-party certificate on a clustered and centrally managed Appliance 1900

217

Solved

inside

Participant

381

Checkpoint 19000 Supported Transceivers Sync

381

Solved

inside

MVP Gold

557

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

557

inside

Explorer

324

Testing primary and secondary bond interfaces

324

Solved

inside

Participant

416

Best Practices for Threat Prevention API Calls to Appliance - API repository

416

inside

Advisor

243

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

243

Solved

inside

Contributor

439

What are the new NAT options in SMS and GW for?

439

Solved

inside

Contributor

3040

Traffic initiated from Lan to VPN Endpoint Client Blocked

998

inside

Participant

1139

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

1139

Solved

inside

Advisor

3458

Quantum Force 9000 Appliance OS version Compatibility

512

inside

MVP Platinum

457

Help Shape the Future of AI at Check Point

258

inside

Contributor

1208

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

1208

Solved

inside

Collaborator

1119

Firewall - Automating Firewall Rule Cleanup Based on Usage

1119

inside

Employee

1198

CVE-2025-45582 - tar: Tar path traversal

1376

Solved

inside

Advisor

315

Peer certificate verification failed after certificate replacement

315

Solved

inside

Contributor

19235

How to list arp table and identify network devices with mac under Check Point FWs

19235

Solved

inside

Explorer

696

Remote Access VPN – Can specific routes be assigned to particular users?

696

inside

MVP Platinum

1263

R8x - Performance Tuning Tip - Appliance Sizing

1263

inside

Participant

3836

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

1422

Solved

inside

Contributor

514

add rule to policy via mgmt_Cli fails

514

inside

Explorer

268

Behaviour after regular contract/subscription expiration

362

Solved

inside

Advisor

666

Log file isn't shown automatically after upgrade to R82

666

Solved

inside

Explorer

514

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

514

Solved

inside

Explorer

1405

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

1405

inside

Participant

776

7000 appliance R81.20 iSO image install

776

inside

Explorer

187

Unable to take ssh for MGMT Port

187

Solved

inside

Advisor

421

Updatable (geo) objects and IP addresses, again

421

Solved

inside

Advisor

893

Renaming a Gateway Node in a Cluster

893

Solved

inside

Advisor

466

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

466

inside

MVP Platinum

309

R82.10 - Hardware Security Module (HSM) for TLS 1.3

309

Solved

inside

Advisor

2944

How do you keep track of the latest FW/OS updates?

2944

Solved

inside

Advisor

1866

Manual FTP transfers are always corrupted while scheduled backups are not

522

inside

Employee

199

Estimated R82 release recommended date?

3581

inside

Collaborator

3772

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

3772

Solved

inside

Explorer

389

Monitord process consume high cpu, does it safe to terminate the process during production hour?

389

inside

Collaborator

870

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

996

Solved

inside

Contributor

1062

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

1062

inside

MVP Platinum

4403

'fw ctl conntab -x' issue in R81.10

4403

Solved

inside

Advisor

1392

How to view the connections of the dynamic dispatcher's table

1392

Solved

inside

Collaborator

407

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

407

inside

Explorer

1719

A suspicious traffic log was observed during monitoring

400

inside

Admin

6832

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

6832

inside

Explorer

219

I need Check_Point_R81.20_T631_ScalablePlatform

466

inside

Participant

3140

Questions about User Mode and Kernel Mode

3140

inside

Explorer

685

Cannot start Mobile Access Portal Agent

685

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Wed 19 Nov 2025 @ 09:00 AM (CST)

Little Rock, AR: Hands-On CloudGuard Workshops

Virtual

Wed 19 Nov 2025 @ 11:00 AM (EST)

TechTalk: Improve Your Security Posture with Threat Prevention and Policy Insights

Virtual

Thu 20 Nov 2025 @ 03:00 PM (CET)

Deep Dive EMEA: Management API Best Practices

Virtual

Thu 20 Nov 2025 @ 05:00 PM (CET)

Hacking LLM Applications: latest research and insights from our LLM pen testing projects - AMER

Virtual

Thu 20 Nov 2025 @ 10:00 AM (CST)

Hacking LLM Applications: latest research and insights from our LLM pen testing projects - EMEA

In-Person

Wed 26 Nov 2025 @ 12:00 PM (COT)

Panama City: Risk Management a la Parrilla: ERM, TEM & Meat Lunch

Virtual

Wed 19 Nov 2025 @ 11:00 AM (EST)

TechTalk: Improve Your Security Posture with Threat Prevention and Policy Insights

Virtual

Thu 20 Nov 2025 @ 03:00 PM (CET)

Deep Dive EMEA: Management API Best Practices

Virtual

Thu 20 Nov 2025 @ 05:00 PM (CET)

Hacking LLM Applications: latest research and insights from our LLM pen testing projects - AMER

Virtual

Thu 20 Nov 2025 @ 10:00 AM (CST)

Hacking LLM Applications: latest research and insights from our LLM pen testing projects - EMEA

Virtual

Thu 04 Dec 2025 @ 12:30 PM (SGT)

End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APAC

Virtual

Thu 04 Dec 2025 @ 03:00 PM (CET)

End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEA

In-Person

Wed 19 Nov 2025 @ 09:00 AM (CST)

Little Rock, AR: Hands-On CloudGuard Workshops

In-Person

Wed 26 Nov 2025 @ 12:00 PM (COT)

Panama City: Risk Management a la Parrilla: ERM, TEM & Meat Lunch

In-Person

Wed 03 Dec 2025 @ 09:00 AM (EST)

New York City: Hands-On CloudGuard Workshops

In-Person

Tue 09 Dec 2025 @ 09:00 AM (CET)

Paris, FR: Hands-On CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?