General Topics

Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages

Introduction to Lakera:
Securing the AI Frontier!

Watch Now!

Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Learn More

HTTPS Inspection
Help us to understand your needs better

Take the Survey

CheckMates Go:
SharePoint CVEs and More!

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

MVP Gold

28200

When will R80.30 GA be available?

28200

inside

Advisor

27999

How to recover Gaia Admin password on VMware

27999

inside

Collaborator

27899

What happens when a license expires?

27716

inside

Participant

27589

R80.10 User-Mode Firewall and performance impact

26999

inside

MVP Gold

26900

Issue connecting to the management server via smart console

26756

inside

Admin

26699

Check Point R80.20 Production and Public EA

26699

inside

Participant

26531

site to site VPN troubleshooting without monitoring blade

26531

inside

Admin

26409

Domain Object when FQDN has multiple DNS results

26199

inside

Advisor

25999

Configuring CLuster XL step by step

25999

inside

Contributor

25943

SecureXL is enabled, but the traffic is not accelerated

25399

Solved

inside

Collaborator

25299

ICMP reply does not match a previous request

24900

Solved

inside

Contributor

24899

High CPU after upgrade from 77.30 to 80.10

24899

inside

Explorer

24828

Stealth rule vs Management Rule

24440

Solved

inside

Advisor

24033

R81 - SNMP does not support SHA1 anymore

24033

inside

Contributor

23999

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

23744

Solved

inside

Participant

23510

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

23510

inside

Participant

23305

How can I find Throughput statistics?

23305

Solved

inside

Advisor

23099

R80.10 gateway, can't set sim_clamp_vpn_mss

22900

Solved

inside

Participant

22899

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

22899

inside

Participant

22884

Get all the Gaia version and installed jumb hotfix

22399

inside

Admin

22199

HTTPS inspection with trusted certificate

21941

inside

Collaborator

21900

Aruba Clear Pass Integration - API

21900

inside

MVP Gold

21800

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

21800

inside

Advisor

21799

Best practise - How often do you patch/upgrade your gateways?

21799

Solved

inside

Collaborator

21792

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

21792

inside

Collaborator

21699

How to get interface status of particular time slot

21699

Solved

inside

Collaborator

21600

How to handle core-dumps and crash dumps

21600

inside

MVP Gold

21599

R80.40 - Dynamic split of CoreXL

21599

Solved

inside

Contributor

21597

R77.30 Take 286: New Jumbo Hotfix GA Release

21499

inside

MVP Gold

21499

Check Point Site-to-Site VPN Compatibility Matrix

21499

inside

Explorer

21237

how to check VPN phase 1 and phase 2 status?

21237

inside

Participant

21205

Monitoring standby member in a cluster

21205

inside

Contributor

21143

CheckPoint redirect to IP address 62.0.58.94

20900

inside

Champion

20866

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

20866

inside

Explorer

20699

Policy Based Routing and default route / features

20699

inside

Contributor

20699

Discovering changes in topology table

20699

inside

MVP Gold

20454

"Max Power" Book Second Edition Released!

20454

inside

Contributor

20400

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

20400

Solved

inside

Contributor

20395

Finding root cause for all the F2F traffic

20395

inside

Advisor

20102

Outbound SSL Inspection: A war story

20102

inside

Admin

20099

Security Gateway Performance Optimization Excerpt

20099

inside

MVP Gold

20099

HP Server DL360/380 G9 reboot issue!

20099

Solved

inside

Advisor

20003

How to see what firewall rules match some traffic

20003

inside

Advisor

19915

Both security gateways are active in the Full HA cluster

19899

Solved

inside

Explorer

19806

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

19721

Solved

inside

Participant

19699

How to check ThreatCloud URL Reputation?

19600

inside

Admin

19547

All Products and Where To Post About Them

19547

inside

Collaborator

19525

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19525

inside

MVP Gold

19500

Check Point Support Resources - Top 10

19500

inside

Participant

19442

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19442

inside

Collaborator

19299

Remote Access VPN in a Load-sharing Cluster Environment

19299

inside

MVP Gold

19256

Which version is better? R80.10 or R77.30

19256

inside

Contributor

19237

static NAT vs hide behind an IP

19237

inside

Admin

19199

R80.30 Early Availability Program is started!

19199

inside

Explorer

19155

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19155

inside

Contributor

18999

Let's create Check Point Super Cheat Sheet

18944

inside

Explorer

18913

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

18913

inside

Collaborator

18899

Pulling FW data fron MDS using a script.

18899

Solved

inside

Contributor

18899

How to list arp table and identify network devices with mac under Check Point FWs

18899

Solved

inside

Contributor

18878

How to show the active connection to a specific host

18878

inside

Admin

18827

TechTalk Special Edition: The Apache log4j Vulnerability Explained

18827

inside

Participant

18699

Types of NAT used in checkpoint firewall

18699

Solved

inside

Advisor

18699

Hide NAT: Simultaneous Connections to the same destination

18699

inside

Admin

18605

R80.30 Technical Update TechTalk

18605

Solved

inside

Advisor

18599

Disable NAT on SIP payload - breaks ICE

18599

inside

Contributor

18599

How can I setup a primary and backup S2S VPN tunnels

18599

inside

Admin

18530

Gateway behind NAT. What limitations am I to be aware of?

18500

Solved

inside

Collaborator

18499

DNS Resolution failing but ping to IP address is succesful.

18499

Solved

inside

Contributor

18331

R80.20 Issue : Monitoring standby cluster members via VPN

18317

inside

Participant

18299

IPSec Tunnel Failing to establish

18299

Solved

inside

Contributor

18299

Upgrading form R81.10 to R81.20

18299

inside

Participant

18115

Can you explain the impact of using fwstop and cpstop ?

18115

inside

Champion

18100

Configuring dynamic routing in clustered VSX

18100

inside

Advisor

18099

Check Point Clustering between two Datacenters

18099

Solved

inside

MVP Gold

18099

Increasing Fifo Buffers on Firewall Interface

17999

inside

Advisor

17999

Activating Identity Awareness to Intergrate AD

17999

Solved

inside

Contributor

17919

Custom URL matching with HTTPS categorization

17919

Solved

inside

MVP Gold

17897

RSS feed for checkpoint.com is not working any more

17799

inside

Explorer

17797

What is route and how to configure route?

17797

inside

MVP Gold

17700

Check Point Support Tools - Top 10

17700

inside

Employee

17699

Identity Awareness Agents SK with direct links - published!

17699

inside

Explorer

17648

ISP Redundancy (load sharing) issue in R80.10

17648

inside

Collaborator

17599

Check Point Deployment Shell internal error

17599

inside

Explorer

17599

Verify Enabled Cipher Suites in HTTPS Inspection

17599

inside

Advisor

17542

Stateful Inspection on Gateways

17542

inside

Advisor

17500

Do any Checkpoint appliances offer SSL offload?

17500

inside

Explorer

17495

Blocking for specific file types in Check Point Firewall

17480

Solved

inside

Employee

17400

Tip of the week: Support Center's Upgrade Wizard

17400

inside

Collaborator

17399

JHF 317 breaking sync connection and not coming back up

17399

Solved

inside

Participant

17399

R80.20 strange behaviour - random TCP session timeout values - fw ctl conntab

17399

inside

Champion

17399

Identity Awareness getting DC Name only

17399

inside

Explorer

17382

Domain object is not working in R80.10 properly

17382

inside

Participant

17324

Untrusted TLS/SSL server X.509 certificate

17324

Solved

inside

Participant

17300

Open Server - HCL for multi queue network cards

17299

Solved

inside

Contributor

17299

SecureXL R80.20 - Issue on ALL High TCP Ports

17199

inside

Employee

17147

Https inspection Validation error

17099

inside

Explorer

16899

Showing logs "Missing OS Route" when place new CP Appliance (Suspect ARP issue)

16899

inside

Participant

16899

Combine VLAN and physical interface, which already has an assigned IP

16899

inside

Advisor

16899

LDAP Authentication failed in SSL VPN

16899

inside

Participant

16846

Report show spam category with "accept" actions but not blocking

16835

Solved

inside

Explorer

266

Behaviour after regular contract/subscription expiration

266

Solved

inside

Advisor

489

Log file isn't shown automatically after upgrade to R82

489

Solved

inside

Explorer

404

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

404

Solved

inside

Explorer

1162

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

1162

inside

Participant

653

7000 appliance R81.20 iSO image install

653

inside

Explorer

135

Unable to take ssh for MGMT Port

135

Solved

inside

Advisor

317

Updatable (geo) objects and IP addresses, again

317

Solved

inside

Advisor

698

Renaming a Gateway Node in a Cluster

698

Solved

inside

Advisor

380

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

380

inside

MVP Gold

240

R82.10 - Hardware Security Module (HSM) for TLS 1.3

240

Solved

inside

Advisor

2678

How do you keep track of the latest FW/OS updates?

2678

Solved

inside

Advisor

1400

Manual FTP transfers are always corrupted while scheduled backups are not

351

inside

Employee

158

Estimated R82 release recommended date?

2788

inside

Collaborator

3365

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

3365

Solved

inside

Explorer

309

Monitord process consume high cpu, does it safe to terminate the process during production hour?

309

inside

Collaborator

714

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

735

Solved

inside

Contributor

804

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

804

inside

MVP Gold

4182

'fw ctl conntab -x' issue in R81.10

4182

Solved

inside

Advisor

1324

How to view the connections of the dynamic dispatcher's table

1324

Solved

inside

Collaborator

320

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

320

inside

Explorer

1351

Remote Access Location Awareness - DC Check

771

inside

Explorer

334

A suspicious traffic log was observed during monitoring

334

inside

Admin

6097

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

6097

inside

Explorer

168

I need Check_Point_R81.20_T631_ScalablePlatform

376

inside

Participant

2632

Questions about User Mode and Kernel Mode

2632

inside

Explorer

470

Cannot start Mobile Access Portal Agent

470

inside

Advisor

303

Openserver Dell R660xs, anyone ever tried this machine?

303

inside

Explorer

633

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

1102

Solved

inside

Collaborator

27891

Unable to establish the SIC(Outgoing Policy)

243

inside

Employee

865

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

5956

inside

Admin

2692

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

2692

inside

MVP Gold

300

RA clients not able to access external cluster interface

300

inside

Explorer

306

Microsegmentation with Firewall Hardware

306

inside

Explorer

264

the new subnets are unable to communicate through the existing VPN tunnel

264

inside

Participant

422

SMS migration from XCP-NG to ProxMox

422

inside

Advisor

4273

Take logging out of the implied rules

737

inside

MVP Gold

1472

SmartConsole Shortcuts - cheat sheet

1472

inside

Explorer

447

I can't find how my dns host is used within the FW object.

447

inside

Explorer

3900

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

3900

Solved

inside

Explorer

487

BGP route on Maestro Active/Active are showing as inactive/unusable

487

inside

Employee

228

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

228

Solved

inside

Contributor

680

LOM interface - Console Session

680

Solved

inside

Collaborator

640

Reducing /var/log partition size on Gaia OS

640

Solved

inside

Collaborator

12562

https inspection tip/feedback/suggestion

570

inside

Explorer

313

Disable Camelia Cipher on the firewall

313

inside

Collaborator

391

always-connect for standalone vpn client

391

Solved

inside

Collaborator

1073

Policy Installation Failed(Time out)-SMB Appliance

1073

Solved

inside

Admin

2781

New Products Introduction July 2025: Video, Slides, and Q&A

2781

Solved

inside

Advisor

437

Export all gateways IPs MDS + VSX

437

inside

Collaborator

650

Unable to access Site(CPNotEnoughDataForRuleMatch)

650

inside

Employee

315

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

315

Solved

inside

Advisor

2122

Clarification Needed on fwaccel stat

2122

Solved

inside

Explorer

351

How to renew GAIA web certificate.

351

Solved

inside

Advisor

810

Deleting a Checkpoint host object from smart console

328

Solved

inside

Contributor

652

Netflow Export with Physical Ip in cluster environment

153

Solved

inside

Advisor

449

Moving a Gateway from One CMA to Another

449

inside

Explorer

208

Logs not showing up in SmartConsole after policy install

208

inside

Collaborator

2287

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

169

inside

Admin

323

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

323

inside

Collaborator

227

synchronize Identity sharing between the active and passive node

227

Solved

inside

MVP Gold

35070

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

215

Solved

inside

Advisor

335

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

335

Solved

inside

Employee Alumnus

3270

What is the difference between Custom Intelligence feed and Network Feeds ?

3270

inside

Explorer

420

Static Hide Behind Gateway NAT

914

inside

Admin

259

From OT to Cloud: A Security Blueprint for Manufacturers EMEA - Recording

259

inside

Employee

7431

New 3900 Branch office applainces were launched today 28/5

7431

Solved

inside

Contributor

244

telnet showing open port on ILO when its not when going via FW

244

inside

Explorer

515

Allow rule for site hosted on akamai CDN, only the first dns response seems to work

515

Solved

inside

Explorer

426

Identity Awareness Agents SK with direct links - published!

17710

inside

Advisor

279

Fresh Install Without USB, Possible From Boot Menu?

279

Solved

inside

Advisor

383

simple question about ISOmorphic

383

inside

Advisor

180

IPSec tunnel Setup [HUB and SPOKE Scenario] with Both spokes being non-checkpoint VPN Gateway

605

Solved

inside

Advisor

166

At a gateway, how do I determine what domain the gateway belongs to?

616

inside

Advisor

674

Policy location on a gateway R80

7638

Solved

inside

MVP Silver

218

GMSA/automated password rotation for Identity

218

inside

Collaborator

7758

Identity awareness collector changes user identity for same IP while connecting to RDP

7758

inside

Explorer

192

SNMP Issue after JHF 99 R81.20 VSX cluster

192

Solved

inside

MVP Gold

2531

Upgrade is failing from R81.10 to R82

2531

inside

Participant

4289

exclude checkpoint public/external ip from encryption domain?

4289

inside

Collaborator

795

Clarification on DNS Reputation Logs

795

inside

Employee

1332

Quantum Force performance boost is available post the release of R82 Jumbo #3 ( Take 25)

1332

inside

Advisor

583

Cluster Falover after every change on pbr, routing, ospf,...

8582

inside

Explorer

646

Capsule VPN mobile users can't connect

646

inside

Champion

45173

Can I directly search through solr indices using curl like elasticserch?

237

Solved

inside

Contributor

949

lowering mtu on remote access vpn?

949

Solved

inside

Contributor

692

CP21800 (R80.40 Jumbo T211) - reply not from Cluster IP

692

inside

Advisor

579

Is It Safe to Change SecureXL on a Cluster?

579

inside

Employee

285

Meet Your New Assistant: Infinity AI Copilot - video and materials

8118

inside

Collaborator

496

portal certificate can not upload file

496

Solved

inside

Collaborator

6149

BSI Common Criteria EAL4+ R82 Version + Jumbo Hotfix

431

inside

Employee

287

Security Engineer Eyes Only - Behind the Miercom Results

287

Solved

inside

Explorer

2091

Firewall-Blades Order of Operation

2091

inside

Participant

579

Hack Like a Pro: Break Into a Server Using the Kill Chain - Americas Recording

203

inside

Admin

250

Hack Like a Pro: Break Into a Server Using the Kill Chain - EMEA recording

250

inside

MVP Silver

455

Thales Mandatory Security Update - STA RADIUS Server to Enforce Message-Authenticator by July 31, 20

455

inside

Employee

1221

Upgrading Gateway to R82 while MDS on R81.20

493

inside

MVP Silver

959

Trellix application not available in App objects

1253

Solved

inside

Explorer

1224

Upgrading Gateway 9100 to R82 via blink package

1224

Solved

inside

MVP Gold

372

Any idea when https inspection policy rules hit count will be available?

372

inside

Admin

1141

CPX 2025 Recap with Surprise Guest Veriti: Video and Slides

1141

inside

Advisor

3364

Traffic dropped only in clean-up rule??

3364

Solved

inside

Employee

17467

Tip of the week: Support Center's Upgrade Wizard

17467

Solved

inside

Collaborator

1781

route based VPN requires VPN domain

1781

inside

Explorer

445

Security Group name dinamec change

445

Solved

inside

Collaborator

1491

VPN gateway random UDP traffic to CP peers?

5866

Solved

inside

Advisor

12433

how to disable SecureXL for specific src to specific dst

12433

inside

Advisor

1380

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Wed 08 Oct 2025 @ 09:00 AM (EDT)

Washington DC: Hands-On CloudGuard Workshops

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

In-Person

Mon 13 Oct 2025 @ 08:00 AM (CEST)

Madrid: Hands-On CloudGuard Workshops

In-Person

Tue 14 Oct 2025 @ 10:00 AM (CEST)

CheckMates Austria Road Show - CheckMates Live Graz

In-Person

Wed 15 Oct 2025 @ 09:00 AM (EDT)

Atlanta, GA: Hands-on CloudGuard Workshops

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

Virtual

Thu 16 Oct 2025 @ 11:00 AM (EDT)

Tips and Tricks 2025 #14: AIOps

Virtual

Wed 22 Oct 2025 @ 11:00 AM (EDT)

Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents Outages

Virtual

Thu 23 Oct 2025 @ 03:00 PM (CEST)

EMEA Deep Dive: Troubleshooting 101

Virtual

Tue 28 Oct 2025 @ 11:00 AM (EDT)

Under the Hood: CloudGuard Network Security for Google Cloud Network Security Integration - Overview

In-Person

Wed 08 Oct 2025 @ 09:00 AM (EDT)

Washington DC: Hands-On CloudGuard Workshops

In-Person

Mon 13 Oct 2025 @ 08:00 AM (CEST)

Madrid: Hands-On CloudGuard Workshops

In-Person

Tue 14 Oct 2025 @ 10:00 AM (CEST)

CheckMates Austria Road Show - CheckMates Live Graz

In-Person

Wed 15 Oct 2025 @ 09:00 AM (EDT)

Atlanta, GA: Hands-on CloudGuard Workshops

In-Person

Wed 22 Oct 2025 @ 09:00 AM (EDT)

Tampa, FL: Hands-on CloudGuard Workshops

In-Person

Wed 22 Oct 2025 @ 09:00 AM (MDT)

Denver, CO: Hands-On CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?