General Topics

Access Control and Threat Prevention Best Practices
5 November @ 5pm CET / 11am ET

Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages

Watch Here

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
Spark Management Portal and More!

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Explorer

30299

Website to check latest IPS update version number

29899

inside

Employee

29599

New documentation format for Jumbo SK

29599

Solved

inside

Contributor

29500

Eliminating Routing Asymmetry between Two Different Physical Sites Running Check Point Firewalls

29399

Solved

inside

Advisor

29296

What is Check Point's solution for RPC traffic on Internal firewall?

29202

inside

MVP Platinum

28999

Check Point for Beginners - Typical Config Mistakes

28999

Solved

inside

Contributor

28897

VPN - Check Point and Fortigate

28897

inside

Collaborator

28799

When will R80.30 GA be available?

28591

inside

Advisor

28400

How to recover Gaia Admin password on VMware

28400

inside

Explorer

28299

What happens when a license expires?

28299

Solved

inside

Collaborator

28199

R80.10 User-Mode Firewall and performance impact

27102

inside

Admin

27099

Check Point R80.20 Production and Public EA

27099

inside

Participant

26756

Issue connecting to the management server via smart console

26756

inside

Participant

26699

Domain Object when FQDN has multiple DNS results

26699

inside

Participant

26600

site to site VPN troubleshooting without monitoring blade

26600

inside

Admin

26599

Configuring CLuster XL step by step

26099

inside

Advisor

25999

SecureXL is enabled, but the traffic is not accelerated

25800

Solved

inside

Collaborator

25599

High CPU after upgrade from 77.30 to 80.10

25100

inside

Explorer

24999

ICMP reply does not match a previous request

24900

inside

MVP Platinum

24899

R81 - SNMP does not support SHA1 anymore

24614

Solved

inside

Explorer

24499

Stealth rule vs Management Rule

24499

inside

Contributor

24099

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

23999

inside

Collaborator

23900

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

23800

inside

Participant

23599

How can I find Throughput statistics?

23599

inside

Contributor

23200

R80.10 gateway, can't set sim_clamp_vpn_mss

23200

Solved

inside

Participant

23199

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

23199

Solved

inside

Advisor

23196

Get all the Gaia version and installed jumb hotfix

22499

Solved

inside

Collaborator

22399

Aruba Clear Pass Integration - API

22299

inside

Participant

22199

HTTPS inspection with trusted certificate

22100

inside

MVP Platinum

22099

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

22099

inside

MVP Platinum

21999

R80.40 - Dynamic split of CoreXL

21999

inside

Advisor

21999

Best practise - How often do you patch/upgrade your gateways?

21999

Solved

inside

Collaborator

21900

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

21900

inside

Collaborator

21899

How to get interface status of particular time slot

21899

inside

Admin

21799

R77.30 Take 286: New Jumbo Hotfix GA Release

21799

Solved

inside

Collaborator

21799

How to handle core-dumps and crash dumps

21799

Solved

inside

Contributor

21799

Check Point Site-to-Site VPN Compatibility Matrix

21700

inside

Explorer

21399

how to check VPN phase 1 and phase 2 status?

21399

inside

Participant

21300

CheckPoint redirect to IP address 62.0.58.94

21300

inside

Contributor

21299

Monitoring standby member in a cluster

21299

inside

Contributor

20900

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

20900

inside

Explorer

20900

Policy Based Routing and default route / features

20900

inside

Contributor

20899

Discovering changes in topology table

20899

inside

Champion

20866

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

20866

inside

MVP Gold

20799

"Max Power" Book Second Edition Released!

20799

Solved

inside

Contributor

20683

Finding root cause for all the F2F traffic

20683

inside

Advisor

20400

Outbound SSL Inspection: A war story

20400

inside

Participant

20400

Both security gateways are active in the Full HA cluster

20400

Solved

inside

Explorer

20399

Security Gateway Performance Optimization Excerpt

20399

Solved

inside

Advisor

20300

How to see what firewall rules match some traffic

20300

inside

Advisor

20200

HP Server DL360/380 G9 reboot issue!

20199

Solved

inside

Participant

19999

How to check ThreatCloud URL Reputation?

19899

inside

Explorer

19899

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

19899

inside

Advisor

19800

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19698

inside

MVP Platinum

19599

Check Point Support Resources - Top 10

19599

inside

Admin

19599

All Products and Where To Post About Them

19599

inside

Advisor

19599

Remote Access VPN in a Load-sharing Cluster Environment

19599

inside

Participant

19599

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19599

inside

Contributor

19500

static NAT vs hide behind an IP

19500

inside

Explorer

19399

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19399

inside

MVP Platinum

19399

Which version is better? R80.10 or R77.30

19399

inside

Admin

19399

R80.30 Early Availability Program is started!

19399

Solved

inside

Contributor

19098

How to list arp table and identify network devices with mac under Check Point FWs

19098

Solved

inside

Contributor

18999

How to show the active connection to a specific host

18999

inside

Collaborator

18999

Let's create Check Point Super Cheat Sheet

18999

Solved

inside

Advisor

18999

Hide NAT: Simultaneous Connections to the same destination

18999

inside

Contributor

18999

DNS Resolution failing but ping to IP address is succesful.

18999

inside

Explorer

18913

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

18913

inside

Participant

18899

Types of NAT used in checkpoint firewall

18899

inside

Admin

18899

R80.30 Technical Update TechTalk

18899

inside

Collaborator

18899

Pulling FW data fron MDS using a script.

18899

inside

Admin

18899

TechTalk Special Edition: The Apache log4j Vulnerability Explained

18899

Solved

inside

Champion

18799

Gateway behind NAT. What limitations am I to be aware of?

18799

inside

Contributor

18700

How can I setup a primary and backup S2S VPN tunnels

18700

Solved

inside

Contributor

18700

Upgrading form R81.10 to R81.20

18700

Solved

inside

Advisor

18699

Disable NAT on SIP payload - breaks ICE

18699

inside

Admin

18699

RSS feed for checkpoint.com is not working any more

18600

Solved

inside

MVP Platinum

18500

R80.20 Issue : Monitoring standby cluster members via VPN

18500

inside

Participant

18499

IPSec Tunnel Failing to establish

18499

inside

Champion

18499

Configuring dynamic routing in clustered VSX

18499

Solved

inside

Contributor

18499

Can you explain the impact of using fwstop and cpstop ?

18300

inside

Contributor

18299

Increasing Fifo Buffers on Firewall Interface

18299

Solved

inside

MVP Gold

18200

Check Point Clustering between two Datacenters

18199

inside

Advisor

18100

Activating Identity Awareness to Intergrate AD

18100

Solved

inside

Contributor

18099

Custom URL matching with HTTPS categorization

18099

Solved

inside

Employee

17999

Tip of the week: Support Center's Upgrade Wizard

17999

Solved

inside

Contributor

17999

Blocking for specific file types in Check Point Firewall

17996

inside

Explorer

17899

What is route and how to configure route?

17899

inside

Employee

17899

Identity Awareness Agents SK with direct links - published!

17899

inside

Explorer

17899

ISP Redundancy (load sharing) issue in R80.10

17899

Solved

inside

Advisor

995

Tip: How to deal with RAD errors

650

inside

Explorer

266

Server Error in '/owa' Application

266

inside

Contributor

2696

VPN issue stuck in Phase 1 and sometimes disconnects

2696

Solved

inside

MVP Gold

413

new transciever CPAC-TR-25SR-DM

262

inside

MVP Gold

237

UPDATE - DigiCert Certificate Expiration Mitigated

3556

inside

Advisor

352

idrac - how to create account with admin role

352

inside

Employee

3118

Introducing the New Interactive Ideas Portal – Join the Pilot!

3118

inside

Contributor

1397

Process file types known to contain malware

1397

Solved

inside

Participant

32452

useful debug command in checkpoint

32452

inside

Contributor

456

Route Based VPN Network SA no route

456

inside

MVP Gold

244

Can not access smart console over site-site VPN

244

Solved

inside

Explorer

240

External Certificates for IPSEC VPN

240

inside

Advisor

302

Rewriting internet access policy

302

Solved

inside

Participant

4128

Site to site vpn drops on policy install

4128

inside

Contributor

206

Customer FTP traffic keeps triggering new IPS protections

206

inside

Collaborator

3562

Trusted CA List is missing a lot

3562

inside

Advisor

591

Install Policy pushed but still visible by other admin

179

Solved

inside

Advisor

809

CPUSE v2606 manual installation failure

711

inside

Employee

214

R82 Jumbo Hotfix Accumulator take 39 has been released

214

inside

Advisor

565

Best Way to Export Policy Package for Reporting

565

Solved

inside

Advisor

1539

Regenerate Token for MaaS Tunnel

1539

inside

Collaborator

286

a third-party certificate on a clustered and centrally managed Appliance 1900

200

Solved

inside

Participant

352

Checkpoint 19000 Supported Transceivers Sync

352

Solved

inside

MVP Gold

497

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

497

inside

Explorer

296

Testing primary and secondary bond interfaces

296

Solved

inside

Participant

373

Best Practices for Threat Prevention API Calls to Appliance - API repository

373

inside

Advisor

224

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

224

Solved

inside

Contributor

406

What are the new NAT options in SMS and GW for?

406

Solved

inside

Contributor

2643

Traffic initiated from Lan to VPN Endpoint Client Blocked

852

inside

Participant

1013

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

1013

Solved

inside

Advisor

3080

Quantum Force 9000 Appliance OS version Compatibility

476

inside

MVP Platinum

438

Help Shape the Future of AI at Check Point

239

inside

Contributor

1122

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

1122

Solved

inside

Collaborator

1060

Firewall - Automating Firewall Rule Cleanup Based on Usage

1060

inside

Employee

1089

CVE-2025-45582 - tar: Tar path traversal

1263

Solved

inside

Advisor

270

Peer certificate verification failed after certificate replacement

270

Solved

inside

Contributor

19110

How to list arp table and identify network devices with mac under Check Point FWs

19110

Solved

inside

Explorer

634

Remote Access VPN – Can specific routes be assigned to particular users?

634

inside

MVP Platinum

1210

R8x - Performance Tuning Tip - Appliance Sizing

1210

inside

Participant

3766

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

1276

Solved

inside

Contributor

449

add rule to policy via mgmt_Cli fails

449

inside

Explorer

256

Behaviour after regular contract/subscription expiration

328

Solved

inside

Advisor

585

Log file isn't shown automatically after upgrade to R82

585

Solved

inside

Explorer

482

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

482

Solved

inside

Explorer

1355

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

1355

inside

Participant

755

7000 appliance R81.20 iSO image install

755

inside

Explorer

167

Unable to take ssh for MGMT Port

167

Solved

inside

Advisor

373

Updatable (geo) objects and IP addresses, again

373

Solved

inside

Advisor

830

Renaming a Gateway Node in a Cluster

830

Solved

inside

Advisor

431

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

431

inside

MVP Platinum

271

R82.10 - Hardware Security Module (HSM) for TLS 1.3

271

Solved

inside

Advisor

2875

How do you keep track of the latest FW/OS updates?

2875

Solved

inside

Advisor

1617

Manual FTP transfers are always corrupted while scheduled backups are not

454

inside

Employee

178

Estimated R82 release recommended date?

3215

inside

Collaborator

3643

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

3643

Solved

inside

Explorer

363

Monitord process consume high cpu, does it safe to terminate the process during production hour?

363

inside

Collaborator

801

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

863

Solved

inside

Contributor

988

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

988

inside

MVP Platinum

4316

'fw ctl conntab -x' issue in R81.10

4316

Solved

inside

Advisor

1369

How to view the connections of the dynamic dispatcher's table

1369

Solved

inside

Collaborator

377

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

377

inside

Explorer

1611

A suspicious traffic log was observed during monitoring

370

inside

Admin

6561

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

6561

inside

Explorer

201

I need Check_Point_R81.20_T631_ScalablePlatform

439

inside

Participant

2919

Questions about User Mode and Kernel Mode

2919

inside

Explorer

590

Cannot start Mobile Access Portal Agent

590

inside

Advisor

346

Openserver Dell R660xs, anyone ever tried this machine?

346

inside

Explorer

781

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

1651

Solved

inside

Collaborator

28257

Unable to establish the SIC(Outgoing Policy)

281

inside

Employee

915

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

6369

inside

Admin

2837

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

2837

inside

MVP Gold

367

RA clients not able to access external cluster interface

367

inside

Explorer

352

Microsegmentation with Firewall Hardware

352

inside

Explorer

323

the new subnets are unable to communicate through the existing VPN tunnel

323

inside

Participant

528

SMS migration from XCP-NG to ProxMox

528

inside

Advisor

4366

Take logging out of the implied rules

859

inside

MVP Platinum

1620

SmartConsole Shortcuts - cheat sheet

1620

inside

Explorer

537

I can't find how my dns host is used within the FW object.

537

inside

Explorer

4109

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

4109

Solved

inside

Explorer

552

BGP route on Maestro Active/Active are showing as inactive/unusable

552

inside

Employee

293

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

293

Solved

inside

Contributor

815

LOM interface - Console Session

815

Solved

inside

Collaborator

767

Reducing /var/log partition size on Gaia OS

767

Solved

inside

Collaborator

13130

https inspection tip/feedback/suggestion

644

inside

Explorer

361

Disable Camelia Cipher on the firewall

361

inside

Collaborator

455

always-connect for standalone vpn client

455

Solved

inside

Collaborator

1254

Policy Installation Failed(Time out)-SMB Appliance

1254

Solved

inside

Admin

3092

New Products Introduction July 2025: Video, Slides, and Q&A

3092

Solved

inside

Advisor

506

Export all gateways IPs MDS + VSX

506

inside

Collaborator

731

Unable to access Site(CPNotEnoughDataForRuleMatch)

731

inside

Employee

345

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

345

Solved

inside

Advisor

2372

Clarification Needed on fwaccel stat

2372

Solved

inside

Explorer

427

How to renew GAIA web certificate.

427

Solved

inside

Advisor

962

Deleting a Checkpoint host object from smart console

378

Solved

inside

Contributor

747

Netflow Export with Physical Ip in cluster environment

180

Solved

inside

Advisor

515

Moving a Gateway from One CMA to Another

515

inside

Explorer

252

Logs not showing up in SmartConsole after policy install

252

inside

Collaborator

2356

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

199

inside

Admin

374

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

374

inside

Collaborator

270

synchronize Identity sharing between the active and passive node

270

Solved

inside

MVP Platinum

36461

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

251

Solved

inside

Advisor

387

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

387

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 04 Nov 2025 @ 09:00 AM (CST)

San Antonio, TX: Hands-On CloudGuard Workshops

In-Person

Wed 05 Nov 2025 @ 09:00 AM (GMT)

London, UK: Hands-On CloudGuard Workshops

In-Person

Wed 05 Nov 2025 @ 09:00 AM (GMT)

London, UK: Hands-On CloudGuard Workshops

In-Person

Wed 05 Nov 2025 @ 09:00 AM (EST)

Boston, MA: Hands-on CloudGuard Workshops

Virtual

Wed 05 Nov 2025 @ 11:00 AM (EST)

TechTalk: Access Control and Threat Prevention Best Practices

Virtual

Thu 06 Nov 2025 @ 10:00 AM (CET)

CheckMates Live BeLux: Get to Know Veriti – What It Is, What It Does, and Why It Matters

Virtual

Wed 05 Nov 2025 @ 11:00 AM (EST)

TechTalk: Access Control and Threat Prevention Best Practices

Virtual

Thu 06 Nov 2025 @ 10:00 AM (CET)

CheckMates Live BeLux: Get to Know Veriti – What It Is, What It Does, and Why It Matters

Virtual

Thu 06 Nov 2025 @ 03:00 PM (EST)

Americas Deep Dive: Remote Access and SASE Best Practices

Virtual

Tue 11 Nov 2025 @ 10:00 AM (CET)

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA

Virtual

Thu 20 Nov 2025 @ 05:00 PM (CET)

Hacking LLM Applications: latest research and insights from our LLM pen testing projects - AMER

Virtual

Tue 11 Nov 2025 @ 11:00 AM (EST)

Under the Hood: CloudGuard WAF for the GenAI Era

In-Person

Tue 04 Nov 2025 @ 09:00 AM (CST)

San Antonio, TX: Hands-On CloudGuard Workshops

In-Person

Wed 05 Nov 2025 @ 09:00 AM (GMT)

London, UK: Hands-On CloudGuard Workshops

In-Person

Wed 05 Nov 2025 @ 09:00 AM (GMT)

London, UK: Hands-On CloudGuard Workshops

In-Person

Wed 05 Nov 2025 @ 09:00 AM (EST)

Boston, MA: Hands-on CloudGuard Workshops

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

CheckMates Events

Are you a member of CheckMates?