General Topics

Policy Insights and Policy Auditor in Action
19 November @ 5pm CET / 11am ET

Access Control and Threat Prevention Best Practices

Watch Here

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
Maestro Madness

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Explorer

30299

Website to check latest IPS update version number

29999

Solved

inside

Collaborator

29900

New documentation format for Jumbo SK

29599

Solved

inside

Contributor

29500

Eliminating Routing Asymmetry between Two Different Physical Sites Running Check Point Firewalls

29399

inside

Participant

29202

What is Check Point's solution for RPC traffic on Internal firewall?

29202

inside

MVP Platinum

28999

Check Point for Beginners - Typical Config Mistakes

28999

inside

Collaborator

28900

VPN - Check Point and Fortigate

28897

inside

MVP Platinum

28591

When will R80.30 GA be available?

28591

inside

Advisor

28400

How to recover Gaia Admin password on VMware

28400

inside

Explorer

28299

What happens when a license expires?

28299

Solved

inside

Collaborator

28199

R80.10 User-Mode Firewall and performance impact

27102

inside

Admin

27099

Check Point R80.20 Production and Public EA

27099

inside

Participant

26756

Issue connecting to the management server via smart console

26756

inside

Admin

26700

Domain Object when FQDN has multiple DNS results

26699

inside

Participant

26600

site to site VPN troubleshooting without monitoring blade

26600

inside

Contributor

26199

Configuring CLuster XL step by step

26099

inside

Advisor

25999

SecureXL is enabled, but the traffic is not accelerated

25800

Solved

inside

Collaborator

25699

High CPU after upgrade from 77.30 to 80.10

25100

inside

Explorer

24999

ICMP reply does not match a previous request

24900

Solved

inside

Contributor

24799

R81 - SNMP does not support SHA1 anymore

24614

Solved

inside

Explorer

24499

Stealth rule vs Management Rule

24499

inside

Contributor

24099

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

23999

inside

Collaborator

23900

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

23800

inside

Participant

23599

How can I find Throughput statistics?

23599

inside

Contributor

23200

R80.10 gateway, can't set sim_clamp_vpn_mss

23200

Solved

inside

Participant

23199

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

23199

Solved

inside

Advisor

23196

Get all the Gaia version and installed jumb hotfix

22499

inside

Admin

22399

Aruba Clear Pass Integration - API

22399

inside

Participant

22199

HTTPS inspection with trusted certificate

22100

inside

MVP Platinum

22099

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

22099

inside

MVP Platinum

21999

R80.40 - Dynamic split of CoreXL

21999

inside

Advisor

21999

Best practise - How often do you patch/upgrade your gateways?

21999

Solved

inside

Collaborator

21900

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

21900

inside

Collaborator

21899

How to get interface status of particular time slot

21899

inside

Admin

21799

R77.30 Take 286: New Jumbo Hotfix GA Release

21799

Solved

inside

Collaborator

21799

How to handle core-dumps and crash dumps

21799

Solved

inside

Contributor

21799

Check Point Site-to-Site VPN Compatibility Matrix

21700

inside

Explorer

21399

how to check VPN phase 1 and phase 2 status?

21399

inside

Participant

21300

CheckPoint redirect to IP address 62.0.58.94

21300

inside

Contributor

21299

Monitoring standby member in a cluster

21299

inside

Contributor

20900

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

20900

inside

Explorer

20900

Policy Based Routing and default route / features

20900

inside

Contributor

20899

Discovering changes in topology table

20899

inside

MVP Gold

20899

"Max Power" Book Second Edition Released!

20899

inside

Champion

20866

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

20866

Solved

inside

Contributor

20683

Finding root cause for all the F2F traffic

20683

inside

Advisor

20400

Outbound SSL Inspection: A war story

20400

inside

Participant

20400

Both security gateways are active in the Full HA cluster

20400

Solved

inside

Explorer

20399

Security Gateway Performance Optimization Excerpt

20399

Solved

inside

Advisor

20300

How to see what firewall rules match some traffic

20300

inside

Advisor

20200

HP Server DL360/380 G9 reboot issue!

20199

Solved

inside

Participant

19999

How to check ThreatCloud URL Reputation?

19899

inside

Explorer

19899

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

19899

inside

Advisor

19800

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19698

inside

MVP Platinum

19599

Check Point Support Resources - Top 10

19599

inside

Admin

19599

All Products and Where To Post About Them

19599

inside

Advisor

19599

Remote Access VPN in a Load-sharing Cluster Environment

19599

inside

Participant

19599

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19599

inside

Contributor

19500

static NAT vs hide behind an IP

19500

inside

Explorer

19399

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19399

inside

MVP Platinum

19399

Which version is better? R80.10 or R77.30

19399

inside

Admin

19399

R80.30 Early Availability Program is started!

19399

Solved

inside

Advisor

19100

Hide NAT: Simultaneous Connections to the same destination

19100

Solved

inside

Contributor

19099

How to show the active connection to a specific host

19099

Solved

inside

Contributor

19098

How to list arp table and identify network devices with mac under Check Point FWs

19098

inside

Collaborator

18999

Let's create Check Point Super Cheat Sheet

18999

inside

Contributor

18999

DNS Resolution failing but ping to IP address is succesful.

18999

inside

Explorer

18913

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

18913

inside

Participant

18899

Types of NAT used in checkpoint firewall

18899

inside

Admin

18899

R80.30 Technical Update TechTalk

18899

inside

Collaborator

18899

Pulling FW data fron MDS using a script.

18899

inside

Admin

18899

TechTalk Special Edition: The Apache log4j Vulnerability Explained

18899

Solved

inside

Advisor

18898

RSS feed for checkpoint.com is not working any more

18898

Solved

inside

Champion

18799

Gateway behind NAT. What limitations am I to be aware of?

18799

inside

Contributor

18799

How can I setup a primary and backup S2S VPN tunnels

18799

Solved

inside

Contributor

18799

Upgrading form R81.10 to R81.20

18799

Solved

inside

Advisor

18699

Disable NAT on SIP payload - breaks ICE

18699

inside

Admin

18699

Configuring dynamic routing in clustered VSX

18599

Solved

inside

MVP Platinum

18500

R80.20 Issue : Monitoring standby cluster members via VPN

18500

inside

Participant

18499

IPSec Tunnel Failing to establish

18499

Solved

inside

Contributor

18499

Increasing Fifo Buffers on Firewall Interface

18400

Solved

inside

MVP Platinum

18398

Can you explain the impact of using fwstop and cpstop ?

18300

Solved

inside

MVP Gold

18200

Check Point Clustering between two Datacenters

18199

inside

Advisor

18100

Activating Identity Awareness to Intergrate AD

18100

Solved

inside

Contributor

18099

Custom URL matching with HTTPS categorization

18099

Solved

inside

Employee

17999

Tip of the week: Support Center's Upgrade Wizard

17999

Solved

inside

Contributor

17999

Blocking for specific file types in Check Point Firewall

17996

inside

Explorer

17899

What is route and how to configure route?

17899

inside

Employee

17899

Identity Awareness Agents SK with direct links - published!

17899

inside

Explorer

17899

ISP Redundancy (load sharing) issue in R80.10

17899

Solved

inside

Admin

7436

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

7436

Solved

inside

Contributor

291

Single VSY within VSX environment wont send logs to dedicated log server

291

inside

Champion

18607

Configuring dynamic routing in clustered VSX

18607

inside

Collaborator

625

Failed login SmartConsole after upgrade Win11

625

Solved

inside

Advisor

1003

Tip: How to deal with RAD errors

666

inside

Explorer

276

Server Error in '/owa' Application

276

inside

Contributor

2716

VPN issue stuck in Phase 1 and sometimes disconnects

2716

Solved

inside

MVP Gold

420

new transciever CPAC-TR-25SR-DM

263

inside

MVP Gold

241

UPDATE - DigiCert Certificate Expiration Mitigated

3567

inside

Advisor

355

idrac - how to create account with admin role

355

inside

Employee

3134

Introducing the New Interactive Ideas Portal – Join the Pilot!

3134

inside

Contributor

1402

Process file types known to contain malware

1402

Solved

inside

Participant

32495

useful debug command in checkpoint

32495

inside

Contributor

459

Route Based VPN Network SA no route

459

inside

MVP Gold

245

Can not access smart console over site-site VPN

245

Solved

inside

Explorer

240

External Certificates for IPSEC VPN

240

inside

Advisor

306

Rewriting internet access policy

306

Solved

inside

Participant

4136

Site to site vpn drops on policy install

4136

inside

Contributor

212

Customer FTP traffic keeps triggering new IPS protections

212

inside

Collaborator

3583

Trusted CA List is missing a lot

3583

inside

Advisor

597

Install Policy pushed but still visible by other admin

180

Solved

inside

Advisor

839

CPUSE v2606 manual installation failure

730

inside

Employee

216

R82 Jumbo Hotfix Accumulator take 39 has been released

216

inside

Advisor

575

Best Way to Export Policy Package for Reporting

575

Solved

inside

Advisor

1551

Regenerate Token for MaaS Tunnel

1551

inside

Collaborator

290

a third-party certificate on a clustered and centrally managed Appliance 1900

201

Solved

inside

Participant

353

Checkpoint 19000 Supported Transceivers Sync

353

Solved

inside

MVP Gold

499

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

499

inside

Explorer

300

Testing primary and secondary bond interfaces

300

Solved

inside

Participant

375

Best Practices for Threat Prevention API Calls to Appliance - API repository

375

inside

Advisor

225

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

225

Solved

inside

Contributor

408

What are the new NAT options in SMS and GW for?

408

Solved

inside

Contributor

2687

Traffic initiated from Lan to VPN Endpoint Client Blocked

856

inside

Participant

1035

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

1035

Solved

inside

Advisor

3186

Quantum Force 9000 Appliance OS version Compatibility

480

inside

MVP Platinum

440

Help Shape the Future of AI at Check Point

239

inside

Contributor

1126

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

1126

Solved

inside

Collaborator

1069

Firewall - Automating Firewall Rule Cleanup Based on Usage

1069

inside

Employee

1119

CVE-2025-45582 - tar: Tar path traversal

1289

Solved

inside

Advisor

274

Peer certificate verification failed after certificate replacement

274

Solved

inside

Contributor

19132

How to list arp table and identify network devices with mac under Check Point FWs

19132

Solved

inside

Explorer

650

Remote Access VPN – Can specific routes be assigned to particular users?

650

inside

MVP Platinum

1216

R8x - Performance Tuning Tip - Appliance Sizing

1216

inside

Participant

3772

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

1321

Solved

inside

Contributor

460

add rule to policy via mgmt_Cli fails

460

inside

Explorer

256

Behaviour after regular contract/subscription expiration

329

Solved

inside

Advisor

592

Log file isn't shown automatically after upgrade to R82

592

Solved

inside

Explorer

485

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

485

Solved

inside

Explorer

1362

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

1362

inside

Participant

768

7000 appliance R81.20 iSO image install

768

inside

Explorer

168

Unable to take ssh for MGMT Port

168

Solved

inside

Advisor

381

Updatable (geo) objects and IP addresses, again

381

Solved

inside

Advisor

841

Renaming a Gateway Node in a Cluster

841

Solved

inside

Advisor

437

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

437

inside

MVP Platinum

278

R82.10 - Hardware Security Module (HSM) for TLS 1.3

278

Solved

inside

Advisor

2888

How do you keep track of the latest FW/OS updates?

2888

Solved

inside

Advisor

1646

Manual FTP transfers are always corrupted while scheduled backups are not

457

inside

Employee

184

Estimated R82 release recommended date?

3271

inside

Collaborator

3657

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

3657

Solved

inside

Explorer

369

Monitord process consume high cpu, does it safe to terminate the process during production hour?

369

inside

Collaborator

807

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

880

Solved

inside

Contributor

1000

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

1000

inside

MVP Platinum

4320

'fw ctl conntab -x' issue in R81.10

4320

Solved

inside

Advisor

1373

How to view the connections of the dynamic dispatcher's table

1373

Solved

inside

Collaborator

384

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

384

inside

Explorer

1616

A suspicious traffic log was observed during monitoring

375

inside

Admin

6608

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

6608

inside

Explorer

203

I need Check_Point_R81.20_T631_ScalablePlatform

439

inside

Participant

2983

Questions about User Mode and Kernel Mode

2983

inside

Explorer

611

Cannot start Mobile Access Portal Agent

611

inside

Advisor

350

Openserver Dell R660xs, anyone ever tried this machine?

350

inside

Explorer

792

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

1689

Solved

inside

Collaborator

28279

Unable to establish the SIC(Outgoing Policy)

282

inside

Employee

921

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

6386

inside

Admin

2843

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

2843

inside

MVP Gold

379

RA clients not able to access external cluster interface

379

inside

Explorer

357

Microsegmentation with Firewall Hardware

357

inside

Explorer

327

the new subnets are unable to communicate through the existing VPN tunnel

327

inside

Participant

533

SMS migration from XCP-NG to ProxMox

533

inside

Advisor

4377

Take logging out of the implied rules

872

inside

MVP Platinum

1627

SmartConsole Shortcuts - cheat sheet

1627

inside

Explorer

543

I can't find how my dns host is used within the FW object.

543

inside

Explorer

4118

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

4118

Solved

inside

Explorer

560

BGP route on Maestro Active/Active are showing as inactive/unusable

560

inside

Employee

295

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

295

Solved

inside

Contributor

829

LOM interface - Console Session

829

Solved

inside

Collaborator

777

Reducing /var/log partition size on Gaia OS

777

Solved

inside

Collaborator

13192

https inspection tip/feedback/suggestion

649

inside

Explorer

361

Disable Camelia Cipher on the firewall

361

inside

Collaborator

458

always-connect for standalone vpn client

458

Solved

inside

Collaborator

1259

Policy Installation Failed(Time out)-SMB Appliance

1259

Solved

inside

Admin

3108

New Products Introduction July 2025: Video, Slides, and Q&A

3108

Solved

inside

Advisor

508

Export all gateways IPs MDS + VSX

508

inside

Collaborator

738

Unable to access Site(CPNotEnoughDataForRuleMatch)

738

inside

Employee

347

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

347

Solved

inside

Advisor

2392

Clarification Needed on fwaccel stat

2392

Solved

inside

Explorer

432

How to renew GAIA web certificate.

432

Solved

inside

Advisor

971

Deleting a Checkpoint host object from smart console

383

Solved

inside

Contributor

760

Netflow Export with Physical Ip in cluster environment

183

Solved

inside

Advisor

519

Moving a Gateway from One CMA to Another

519

inside

Explorer

255

Logs not showing up in SmartConsole after policy install

255

inside

Collaborator

2364

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

202

inside

Admin

375

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

375

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 11 Nov 2025 @ 10:00 AM (CET)

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA

Virtual

Tue 11 Nov 2025 @ 11:00 AM (EST)

Under the Hood: CloudGuard WAF for the GenAI Era

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CET)

Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 10:00 AM (CET)

The Netherlands: Hands-On CloudGuard Workshops

Virtual

Tue 11 Nov 2025 @ 10:00 AM (CET)

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA

Virtual

Tue 11 Nov 2025 @ 11:00 AM (EST)

Under the Hood: CloudGuard WAF for the GenAI Era

Virtual

Thu 13 Nov 2025 @ 10:00 AM (CET)

Cloud Architect Series - Guarding Generative AI: Next-Gen Application Security with CloudGuard WAF

Virtual

Fri 14 Nov 2025 @ 10:00 AM (CET)

CheckMates Live Netherlands - Veriti, Threat Exposure Management

Virtual

Wed 19 Nov 2025 @ 11:00 AM (EST)

TechTalk: Improve Your Security Posture with Threat Prevention and Policy Insights

Virtual

Thu 20 Nov 2025 @ 03:00 PM (CET)

Deep Dive EMEA: Management API Best Practices

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CET)

Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 10:00 AM (CET)

The Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CST)

Tulsa, OK: Hands-on CloudGuard Workshops

In-Person

Thu 13 Nov 2025 @ 09:00 AM (CST)

Oklahoma City, OK: Hands-on CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?