General Topics

Call For Papers
Your Expertise, Our Stage

Apply Here

Ink Dragon: A Major Nation-State Campaign
March 11th @ 5pm CET / 12pm EDT

AI Security Masters E5:
Powering Prevention: The AI Driving Check Point’s ThreatCloud

The Great Exposure Reset

Watch Now

AI Security Masters E4:
Introducing Cyata, Securing the Agentic AI Era

Watch Now!

CheckMates Go:
CheckMates Fest

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Collaborator

29837

What happens when a license expires?

29699

Solved

inside

Collaborator

29696

How to recover Gaia Admin password on VMware

29499

inside

Advisor

29099

Domain Object when FQDN has multiple DNS results

29099

inside

Participant

28642

Check Point R80.20 Production and Public EA

28599

inside

Collaborator

28500

R80.10 User-Mode Firewall and performance impact

27999

inside

Admin

27899

site to site VPN troubleshooting without monitoring blade

27199

inside

Participant

27099

Issue connecting to the management server via smart console

27099

inside

Contributor

26899

SecureXL is enabled, but the traffic is not accelerated

26800

inside

Contributor

26723

Configuring CLuster XL step by step

26723

Solved

inside

Collaborator

26710

R81 - SNMP does not support SHA1 anymore

26299

inside

Contributor

26001

ICMP reply does not match a previous request

25999

Solved

inside

Contributor

25999

High CPU after upgrade from 77.30 to 80.10

25799

inside

Contributor

25258

Stealth rule vs Management Rule

25099

Solved

inside

Participant

24900

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

24900

inside

Participant

24599

How can I find Throughput statistics?

24599

Solved

inside

Participant

24599

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

24599

inside

Collaborator

24504

R80.10 gateway, can't set sim_clamp_vpn_mss

24499

inside

Contributor

24400

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

24399

inside

Collaborator

24300

Aruba Clear Pass Integration - API

24300

Solved

inside

Advisor

23811

R80.40 - Dynamic split of CoreXL

23499

inside

MVP Diamond

23499

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

23499

inside

MVP Diamond

23499

Get all the Gaia version and installed jumb hotfix

23032

Solved

inside

Advisor

23000

RSS feed for checkpoint.com is not working any more

23000

inside

Advisor

22899

Best practise - How often do you patch/upgrade your gateways?

22899

inside

Collaborator

22899

How to get interface status of particular time slot

22899

Solved

inside

Collaborator

22799

How to handle core-dumps and crash dumps

22799

Solved

inside

Collaborator

22799

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

22799

inside

MVP Platinum

22799

Check Point Site-to-Site VPN Compatibility Matrix

22799

inside

Admin

22699

R77.30 Take 286: New Jumbo Hotfix GA Release

22699

inside

Participant

22699

HTTPS inspection with trusted certificate

22699

inside

Advisor

22500

Outbound SSL Inspection: A war story

22500

Solved

inside

Contributor

22499

CheckPoint redirect to IP address 62.0.58.94

22397

inside

Contributor

22315

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

22315

inside

MVP Gold

22199

"Max Power" Book Second Edition Released!

22199

inside

Admin

22000

Security Gateway Performance Optimization Excerpt

22000

inside

Contributor

22000

Discovering changes in topology table

22000

inside

Explorer

21899

how to check VPN phase 1 and phase 2 status?

21899

inside

Contributor

21899

Both security gateways are active in the Full HA cluster

21899

inside

Participant

21813

Monitoring standby member in a cluster

21813

Solved

inside

Contributor

21799

Finding root cause for all the F2F traffic

21799

Solved

inside

Advisor

21699

How to check ThreatCloud URL Reputation?

21699

inside

Explorer

21601

Policy Based Routing and default route / features

21601

Solved

inside

Contributor

21403

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

21399

inside

Advisor

21300

Remote Access VPN in a Load-sharing Cluster Environment

21300

inside

Advisor

21299

How to see what firewall rules match some traffic

21299

inside

MVP Diamond

21299

HP Server DL360/380 G9 reboot issue!

21299

Solved

inside

Collaborator

21299

DNS Resolution failing but ping to IP address is succesful.

21299

Solved

inside

Explorer

21200

"UDP checksum is incorrect" - 100s of IPv6 DROPs in fw.log - TP/IPS responsible?

20998

101

Solved

inside

Contributor

20799

Upgrading form R81.10 to R81.20

20799

inside

MVP Diamond

20700

Which version is better? R80.10 or R77.30

20700

inside

Admin

20600

R80.30 Early Availability Program is started!

20600

Solved

inside

Collaborator

20502

Blocking for specific file types in Check Point Firewall

20502

Solved

inside

Advisor

20501

Hide NAT: Simultaneous Connections to the same destination

20501

inside

Advisor

20400

Configuring dynamic routing in clustered VSX

20399

inside

Explorer

20324

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

20324

inside

Participant

20302

syn-ack on every IP address on port tcp_80 during vulnerability scan

20302

inside

Participant

20300

Site-to-site vpn Tunnel to a non Checkpoint Gateway

20300

inside

Explorer

20299

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

20299

inside

Contributor

20299

static NAT vs hide behind an IP

20299

inside

Participant

20231

Check Point Support Resources - Top 10

20200

inside

Collaborator

20200

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

20200

inside

Admin

20100

Increasing Fifo Buffers on Firewall Interface

20002

Solved

inside

Champion

19999

Gateway behind NAT. What limitations am I to be aware of?

19999

inside

Admin

19993

All Products and Where To Post About Them

19993

Solved

inside

Employee

19905

Tip of the week: Support Center's Upgrade Wizard

19905

Solved

inside

MVP Gold

19901

JHF 317 breaking sync connection and not coming back up

19900

Solved

inside

Contributor

19899

How to list arp table and identify network devices with mac under Check Point FWs

19899

inside

Admin

19898

R80.30 Technical Update TechTalk

19898

inside

Participant

19799

Types of NAT used in checkpoint firewall

19799

Solved

inside

MVP Diamond

19700

How to show the active connection to a specific host

19699

Solved

inside

Advisor

19599

Disable NAT on SIP payload - breaks ICE

19599

inside

Collaborator

19500

Let's create Check Point Super Cheat Sheet

19500

Solved

inside

Participant

19499

R80.20 strange behaviour - random TCP session timeout values - fw ctl conntab

19499

inside

Contributor

19499

IPSec Tunnel Failing to establish

19400

Solved

inside

Contributor

19400

How can I setup a primary and backup S2S VPN tunnels

19399

inside

Advisor

19300

Physical memory vs FW memory. Explanation needed!

19299

Solved

inside

MVP Platinum

19200

R80.20 Issue : Monitoring standby cluster members via VPN

19200

inside

Champion

19200

Identity Awareness getting DC Name only

19200

inside

Advisor

19199

Check Point Clustering between two Datacenters

19199

Solved

inside

Advisor

19198

Custom Intelligence Feed Exceptions Not Working

19198

inside

Admin

19156

TechTalk Special Edition: The Apache log4j Vulnerability Explained

19156

inside

Explorer

19124

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

19124

inside

Participant

19097

Can you explain the impact of using fwstop and cpstop ?

19097

inside

Collaborator

19080

Pulling FW data fron MDS using a script.

19080

inside

Employee

18999

Identity Awareness Agents SK with direct links - published!

18999

Solved

inside

Participant

18999

ISP Redundancy (load sharing) issue in R80.10

18899

Solved

inside

Contributor

18848

Custom URL matching with HTTPS categorization

18848

inside

Contributor

18799

Https inspection Validation error

18799

inside

Collaborator

18700

SecureXL R80.20 - Issue on ALL High TCP Ports

18700

inside

Advisor

18699

Activating Identity Awareness to Intergrate AD

18699

inside

Explorer

18699

Verify Enabled Cipher Suites in HTTPS Inspection

18600

inside

Contributor

18599

Check Point Support Tools - Top 10

18400

inside

Explorer

18400

What is route and how to configure route?

18400

Solved

inside

Participant

18400

Stateful Inspection on Gateways

18398

inside

Participant

18300

Untrusted TLS/SSL server X.509 certificate

18300

inside

Collaborator

18300

Report show spam category with "accept" actions but not blocking

18300

inside

Advisor

18300

Do any Checkpoint appliances offer SSL offload?

18300

inside

MVP Diamond

18300

Open Server - HCL for multi queue network cards

18300

inside

Employee

696

Harmony DLP Browse: Control, Monitor, and Protect Sensitive Data

696

Solved

inside

Advisor

924

Introducing AIOps: Real-Time Visibility, Automation, and Predictive Insights

962

Solved

inside

Participant

1041

Unable to Access the SAP Server form the VPN tunnel

1159

Solved

inside

Participant

493

Quantum Gateways - NGTP and NGFW

493

Solved

inside

Advisor

2580

Log distribution performance - Impact on GWs verse log servers

2580

Solved

inside

Contributor

4241

One interface active cause ssh/https connectivity?

3307

Solved

inside

Advisor

592

HTTPS Traffic Accepted via Implied Rules

592

inside

Explorer

6772

Configure site to site vpn between aws and checkpoint

6772

inside

Explorer

543

R82 SecureXL Flowchart - non accelerated packets

3701

inside

Mentor

21224

101

"UDP checksum is incorrect" - 100s of IPv6 DROPs in fw.log - TP/IPS responsible?

21224

101

Solved

inside

Advisor

469

can Check Point enforce image recognition?

469

Solved

inside

Collaborator

15235

What is SNMP OID for CP FW number of new connections?

15235

Solved

inside

Contributor

5887

SIC problem after upgrade to R81.20

5887

Solved

inside

Collaborator

1034

Process 'usim_x86' running for months, using 600+% CPU

1034

inside

Collaborator

1711

DigiCert TLS Certificate Lifetimes Will Officially Reduce to 47 Days

1711

Solved

inside

Advisor

1546

Clarification When Upgrading to R82

856

inside

Admin

334

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT

334

Solved

inside

MVP Diamond

697

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT recording

697

inside

Advisor

2411

Your First Response: Immediate Actions for Cyber Incident Containment- AMER - Recording

494

inside

MVP Diamond

990

Post Quantum Cryptography (PQC)

990

Solved

inside

Advisor

1823

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA - Recording

246

inside

Contributor

4353

Error logs in Threat Emulation

4353

inside

Collaborator

249

Why Doesn't Checkpoint MTA Detect Obfuscated JS in Email HTML Body (eval/atob)?

249

inside

MVP Diamond

503

Https inspection and urlf/appc blade settings I found work the best

503

inside

Contributor

4699

arping responses not showing on newer appliances

2706

inside

Advisor

4071

MFA Behavior on Gaia Portal – R81.20 Jumbo Hotfix Take 118 and 113

821

Solved

inside

Contributor

26082

Site to Site VPN issue (Checkpoint To ASA)

676

Solved

inside

MVP Diamond

4959

What is UPPAK, KPPAK vs. USFW, KSFW

4959

inside

MVP Diamond

3336

Performance Tuning Tip - VPN Speed Test

3336

inside

Explorer

317

Deny Multiple Services in a Single Rule

781

Solved

inside

Advisor

441

R81.x Architecture and Performance Tuning - Link Collection

1262194

294

Solved

inside

Contributor

3332

Migrating from ClusterXL to ElasticXL steps

1723

Solved

inside

Contributor

737

Proxy arp issue - automatic NAT rule

737

Solved

inside

Participant

2778

Setting up Checkpoint 5800 appliances behind a Residential AT&T modem/router

2778

inside

Explorer

4361

Cannot access to Product Evaluation

647

Solved

inside

Explorer

1623

Allow older clients to connect to this gateway disabling L2TP+IPSec mode

1623

Solved

inside

MVP Diamond

443

VXLAN - Perfomance optimation question

443

inside

Advisor

678

ClusterXL Forced Failover command

678

inside

MVP Diamond

1356

Mini Concept – VPN Layer 2 tunneling between two data centers

509

inside

MVP Diamond

267

Remote Access Location Awareness - DC Check

1121

Solved

inside

Advisor

682

Pasting clish BGP MD5 secrets?

682

inside

Participant

767

Remote Access Authentication with Certificate and Group Membership Retrieval

767

inside

Admin

635

Software Blade effectiveness with and without HTTPS Inspection - sk184185

635

Solved

inside

MVP Diamond

2012

SmartConsole Extension Issue in R81.20/R82

2012

inside

Participant

255

Remote Access VPN & Site-to-Site tunnels broken (“invalid cookie” / SA desync) after upgrade

255

inside

MVP Platinum

1789

Check Point Appliances - Overview

1789

Solved

inside

Collaborator

696

R77.30 VS migration from legacy VSX cluster to new one on R81.20

696

Solved

inside

Advisor

705

Can I implement Identity Awareness without using a PDP/PEP Broker?

705

Solved

inside

Collaborator

924

Gateway blades suddenly expiring despite having valid licenses

924

inside

MVP Diamond

2784

Bootable USB from ISO for open servers

1504

Solved

inside

Explorer

4315

Management Interface (eth0) assigned via DHCP - cannot remove the static IP of the interface

4315

Solved

inside

Collaborator

662

Identity Awarness upgrade (cross platform)

662

Solved

inside

Participant

1466

P2P Config compatibility in Active/Standby Cluster

1166

Solved

inside

Participant

750

Introducing new Acceleration NIC 4x10/25G for Quantum Force appliances

3965

inside

Contributor

3639

CCSA/CCSE Labs on HP Notebook - Performance Issue

3639

inside

MVP Platinum

532

Evolution of Check Point's website 1996 - 2025

532

Solved

inside

Contributor

1381

CPX 2001 - An Internet Security Event

650

inside

MVP Silver

1311

R82 Streamed SmartConsole (Smart-1 Cloud) issue with Gateways and Servers view

1311

inside

Contributor

870

Get interfaces WITH/WITHOUT topology

870

inside

Contributor

1897

VPN IPSec Tunnel with Sophos IKEv2 Issue

1897

inside

Advisor

3418

Traffic is not visible on management.

3418

Solved

inside

Advisor

613

9800 interfaces links down but switchports up

853

inside

Contributor

857

Best Practices for Websites and Applications

857

Solved

inside

Advisor

1220

CVE-2025-32728 - permanent solution?

1220

inside

MVP Diamond

1023

VSX on Check Point 9300/9400 Appliances

1023

Solved

inside

Collaborator

1284

IPsec VPN between Checkpoint and Remote Server

1284

inside

Explorer

474

Management-Server: Addition NIC or VSX-Cluster?

474

inside

Collaborator

2175

Port 19009 on MGMT Server Accessible from Internet via Implied Rule Despite GUI Clients List

2175

inside

Admin

275

Tips and Tricks 2025 #13 - Strategic Cyber Assessments: How to Strengthen Your Security Posture

275

inside

Admin

731

Learn About CheckMates October 2025

731

inside

MVP Platinum

3362

HowTo: Configure a VPN between FortiGate & Check Point

3362

Solved

inside

Explorer

2237

Unable to export Checkpoint firewall rulebase

2237

Solved

inside

MVP Gold

777

Can I configure complex views using smart reporter?

777

Solved

inside

Contributor

327

turning off secureXL resolves mac flapping?

327

Solved

inside

MVP Gold

772

Identifying failed ISP in case of ISP redundancy

772

Solved

inside

Advisor

498

Minimum RAM and CPU requirements for S1C Management

498

Solved

inside

Participant

1442

How are you keeping up with Check Point VPN/SIC Certificates

904

inside

Authority

881

Notification about changes within Support Life Cycle

881

inside

Collaborator

1839

SIC not automatically renewing certificate in VSX

533

Solved

inside

Explorer

535

Secondary MDS Migration and IP Change

535

Solved

inside

Advisor

2597

ClusterXL – Should the standby member ever generate traffic with the VIP?

2597

Solved

inside

Advisor

942

R82 - ssl inspection auto bypass question

942

inside

MVP Diamond

565

Tips and Tricks 2025 #12 - Check Point PRO Support Overview & Update

190

Solved

inside

Collaborator

464

Are Logs Still Visible If Only the index File Remains?

464

Solved

inside

Participant

57843

Best way to whitelist KnowBe4 Phishing domains?

57843

inside

MVP Diamond

648

Special functions via policy - name field

648

Solved

inside

Collaborator

758

Using Identity Awareness Collector with Cisco FTD Syslogging

758

inside

Participant

672

Firewall is freezing/crashing randomly after upgrade to R82

672

inside

Participant

700

How to allow redirects on Cloudflare

700

inside

Explorer

410

R82 http proxy and dns proxy forwarding domains not working

410

inside

Admin

1399

BRICKSTORM: A Stealthy Espionage Campaign Targeting Enterprise Infrastructure (sk184082)

1399

inside

MVP Gold

3208

Ongoing issue: high CPU load fw_workers + rad

3208

inside

Advisor

535

How to safely reuse an existing cluster

535

inside

Contributor

601

Policy installation fails with "Error code 2000025" and sk177710

601

inside

Explorer

971

Threat Emulation update failed

971

inside

Advisor

4966

unable to ssh to device after JHF upgrade

4966

Solved

inside

Advisor

1165

Difference Between Configuring Proxy on Firewall CLI vs Cluster Object in SmartConsole

1165

Solved

inside

Participant

2888

Proxy HTTP/HTTPS - two sessions

2888

inside

MVP Gold

308

What should be the settings for ingesting logs in SIEM for self managed spark devices

308

Solved

inside

Explorer

1398

Unable to remote save snapshot via SCP.

1398

inside

Advisor

2461

forklifting 5xxx appliances -> 9100 UPPAK observations

2461

inside

Advisor

412

ISP redundancy and VPNs to azure

412

Solved

inside

MVP Diamond

301

An idea from customer about web UI jumbo hotfix install

301

Solved

inside

Collaborator

1996

HTTPS inspection - Create a CSR for an external CA to use for the outbound certificate

1996

inside

Employee

1481

Jumbo Hotfix Accumulator for Quantum Force 3900 Appliances take #22 has been released today

1481

Solved

inside

Contributor

907

Migrate eth interface to a VLAN interface in bond

907

Solved

inside

Participant

908

Strange BGP announcement of a /31 network as /32

908

Solved

inside

Advisor

862

Clarification on “Check Point 6200P” Model

862

Solved

inside

Explorer

745

Memory cache usage on 16200 appliance – expected behavior?

1618

inside

Employee

11221

Announcement: Check Point R82 - Recommended Release

11221

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 10 Mar 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Wed 11 Mar 2026 @ 12:00 PM (EDT)

Ink Dragon: A Major Nation-State Cyber Campaign

In-Person

Wed 11 Mar 2026 @ 12:00 PM (MDT)

CheckMates Live Denver!

Virtual

Thu 12 Mar 2026 @ 05:00 PM (CET)

AI Security Masters Session 5: Powering Prevention: The AI Driving Check Point’s ThreatCloud

In-Person

Thu 12 Mar 2026 @ 12:00 PM (MDT)

CheckMates Live Utah!

Virtual

Thu 12 Mar 2026 @ 03:00 PM (EDT)

Deep Dive Americas: Identity Awareness Best Practices

Virtual

Tue 10 Mar 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Wed 11 Mar 2026 @ 12:00 PM (EDT)

Ink Dragon: A Major Nation-State Cyber Campaign

Virtual

Thu 12 Mar 2026 @ 05:00 PM (CET)

AI Security Masters Session 5: Powering Prevention: The AI Driving Check Point’s ThreatCloud

Virtual

Thu 12 Mar 2026 @ 03:00 PM (EDT)

Deep Dive Americas: Identity Awareness Best Practices

Virtual

Tue 17 Mar 2026 @ 10:00 AM (CET)

Industrial Cybersecurity in Practice: Manufacturing & Utilities - EMEA

Virtual

Tue 17 Mar 2026 @ 03:00 PM (CET)

From SASE to Hybrid Mesh: Securing Enterprise AI at Scale - EMEA

In-Person

Wed 11 Mar 2026 @ 12:00 PM (MDT)

CheckMates Live Denver!

In-Person

Thu 12 Mar 2026 @ 12:00 PM (MDT)

CheckMates Live Utah!

In-Person

Tue 24 Mar 2026 @ 08:00 AM (COT)

San Pedro Sula: Laboratorio Práctico R82

In-Person

Tue 24 Mar 2026 @ 06:00 PM (COT)

San Pedro Sula: Spark Firewall y AI-Powered Security Management

In-Person

Thu 26 Mar 2026 @ 08:00 AM (COT)

Tegucigalpa: Laboratorio Práctico R82

In-Person

Thu 26 Mar 2026 @ 06:00 PM (COT)

Tegucigalpa: Spark Firewall y AI-Powered Security Management

CheckMates Events

Are you a member of CheckMates?