General Topics

Policy Insights and Policy Auditor in Action
19 November @ 5pm CET / 11am ET

Access Control and Threat Prevention Best Practices

Watch Here

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
Maestro Madness

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

MVP Platinum

28591

When will R80.30 GA be available?

28591

inside

Advisor

28400

How to recover Gaia Admin password on VMware

28400

inside

Explorer

28399

What happens when a license expires?

28399

Solved

inside

Collaborator

28199

R80.10 User-Mode Firewall and performance impact

27102

inside

Admin

27099

Check Point R80.20 Production and Public EA

27099

inside

Participant

26799

Domain Object when FQDN has multiple DNS results

26799

inside

Participant

26756

Issue connecting to the management server via smart console

26756

inside

Admin

26700

site to site VPN troubleshooting without monitoring blade

26600

inside

Contributor

26199

Configuring CLuster XL step by step

26199

inside

Contributor

26199

SecureXL is enabled, but the traffic is not accelerated

25800

Solved

inside

Collaborator

25699

High CPU after upgrade from 77.30 to 80.10

25100

inside

Explorer

24999

ICMP reply does not match a previous request

24900

Solved

inside

Contributor

24806

R81 - SNMP does not support SHA1 anymore

24614

Solved

inside

Explorer

24600

Stealth rule vs Management Rule

24600

inside

Contributor

24099

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

23999

inside

Collaborator

23900

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

23800

inside

Participant

23599

How can I find Throughput statistics?

23599

inside

Contributor

23200

R80.10 gateway, can't set sim_clamp_vpn_mss

23200

Solved

inside

Participant

23199

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

23199

Solved

inside

Advisor

23196

Get all the Gaia version and installed jumb hotfix

22499

inside

Admin

22399

Aruba Clear Pass Integration - API

22399

inside

MVP Platinum

22203

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

22203

inside

Participant

22199

HTTPS inspection with trusted certificate

22100

inside

MVP Platinum

21999

R80.40 - Dynamic split of CoreXL

21999

inside

Advisor

21999

Best practise - How often do you patch/upgrade your gateways?

21999

Solved

inside

Collaborator

21900

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

21900

inside

Collaborator

21899

How to get interface status of particular time slot

21899

inside

Admin

21799

R77.30 Take 286: New Jumbo Hotfix GA Release

21799

Solved

inside

Collaborator

21799

How to handle core-dumps and crash dumps

21799

Solved

inside

Contributor

21799

Check Point Site-to-Site VPN Compatibility Matrix

21700

inside

Explorer

21399

how to check VPN phase 1 and phase 2 status?

21399

inside

Participant

21300

CheckPoint redirect to IP address 62.0.58.94

21300

inside

Contributor

21299

Monitoring standby member in a cluster

21299

inside

Contributor

21000

Discovering changes in topology table

21000

inside

Contributor

20900

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

20900

inside

Explorer

20900

Policy Based Routing and default route / features

20900

inside

MVP Gold

20899

"Max Power" Book Second Edition Released!

20899

inside

Champion

20866

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

20866

inside

Advisor

20700

Outbound SSL Inspection: A war story

20700

Solved

inside

Contributor

20683

Finding root cause for all the F2F traffic

20683

inside

Participant

20400

Both security gateways are active in the Full HA cluster

20400

Solved

inside

Explorer

20399

Security Gateway Performance Optimization Excerpt

20399

Solved

inside

Advisor

20300

How to see what firewall rules match some traffic

20300

inside

MVP Platinum

20298

HP Server DL360/380 G9 reboot issue!

20298

inside

Advisor

20200

How to check ThreatCloud URL Reputation?

19899

inside

Explorer

19899

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

19899

inside

Advisor

19897

Remote Access VPN in a Load-sharing Cluster Environment

19699

inside

Collaborator

19698

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19698

inside

MVP Platinum

19599

Check Point Support Resources - Top 10

19599

inside

Admin

19599

All Products and Where To Post About Them

19599

inside

Participant

19599

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19599

inside

Contributor

19500

static NAT vs hide behind an IP

19500

inside

Explorer

19399

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19399

inside

MVP Platinum

19399

Which version is better? R80.10 or R77.30

19399

inside

Admin

19399

R80.30 Early Availability Program is started!

19399

Solved

inside

Advisor

19100

Hide NAT: Simultaneous Connections to the same destination

19100

Solved

inside

Contributor

19099

How to show the active connection to a specific host

19099

Solved

inside

Contributor

19098

How to list arp table and identify network devices with mac under Check Point FWs

19098

inside

Collaborator

18999

Let's create Check Point Super Cheat Sheet

18999

inside

Contributor

18999

DNS Resolution failing but ping to IP address is succesful.

18999

inside

Explorer

18913

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

18913

inside

Participant

18899

Types of NAT used in checkpoint firewall

18899

inside

Admin

18899

R80.30 Technical Update TechTalk

18899

inside

Collaborator

18899

Pulling FW data fron MDS using a script.

18899

inside

Admin

18899

TechTalk Special Edition: The Apache log4j Vulnerability Explained

18899

Solved

inside

Advisor

18898

RSS feed for checkpoint.com is not working any more

18898

Solved

inside

Champion

18799

Gateway behind NAT. What limitations am I to be aware of?

18799

inside

Contributor

18799

How can I setup a primary and backup S2S VPN tunnels

18799

Solved

inside

Contributor

18799

Upgrading form R81.10 to R81.20

18799

Solved

inside

Advisor

18699

Disable NAT on SIP payload - breaks ICE

18699

inside

Admin

18699

Configuring dynamic routing in clustered VSX

18599

Solved

inside

MVP Platinum

18500

R80.20 Issue : Monitoring standby cluster members via VPN

18500

inside

Participant

18499

IPSec Tunnel Failing to establish

18499

Solved

inside

Contributor

18499

Increasing Fifo Buffers on Firewall Interface

18400

Solved

inside

MVP Platinum

18398

Check Point Clustering between two Datacenters

18302

inside

Participant

18300

Can you explain the impact of using fwstop and cpstop ?

18300

Solved

inside

MVP Gold

18200

Activating Identity Awareness to Intergrate AD

18100

Solved

inside

Contributor

18099

Custom URL matching with HTTPS categorization

18099

Solved

inside

Employee

17999

Tip of the week: Support Center's Upgrade Wizard

17999

Solved

inside

Collaborator

17996

Blocking for specific file types in Check Point Firewall

17996

inside

Explorer

17899

What is route and how to configure route?

17899

inside

Employee

17899

Identity Awareness Agents SK with direct links - published!

17899

inside

Explorer

17899

ISP Redundancy (load sharing) issue in R80.10

17899

inside

MVP Platinum

17799

Check Point Support Tools - Top 10

17799

Solved

inside

Participant

17799

R80.20 strange behaviour - random TCP session timeout values - fw ctl conntab

17799

inside

Explorer

17799

Verify Enabled Cipher Suites in HTTPS Inspection

17799

inside

Explorer

17798

Check Point Deployment Shell internal error

17699

inside

Champion

17698

Identity Awareness getting DC Name only

17698

inside

Advisor

17600

Do any Checkpoint appliances offer SSL offload?

17600

Solved

inside

Participant

17600

Untrusted TLS/SSL server X.509 certificate

17599

inside

Advisor

17599

Stateful Inspection on Gateways

17599

inside

Collaborator

17505

SecureXL R80.20 - Issue on ALL High TCP Ports

17505

inside

Collaborator

17499

JHF 317 breaking sync connection and not coming back up

17499

inside

Contributor

17499

Https inspection Validation error

17499

inside

Contributor

17406

Open Server - HCL for multi queue network cards

17400

inside

Explorer

17399

Domain object is not working in R80.10 properly

17399

inside

Participant

17301

syn-ack on every IP address on port tcp_80 during vulnerability scan

17301

inside

Employee

17199

Showing logs "Missing OS Route" when place new CP Appliance (Suspect ARP issue)

17000

inside

Explorer

16999

UPDATE - DigiCert Certificate Expiration Mitigated

3574

inside

Advisor

355

idrac - how to create account with admin role

355

inside

Employee

3156

Introducing the New Interactive Ideas Portal – Join the Pilot!

3156

inside

Contributor

1411

Process file types known to contain malware

1411

Solved

inside

Participant

32504

useful debug command in checkpoint

32504

inside

Contributor

460

Route Based VPN Network SA no route

460

inside

MVP Gold

246

Can not access smart console over site-site VPN

246

Solved

inside

Explorer

241

External Certificates for IPSEC VPN

241

inside

Advisor

310

Rewriting internet access policy

310

Solved

inside

Participant

4140

Site to site vpn drops on policy install

4140

inside

Contributor

212

Customer FTP traffic keeps triggering new IPS protections

212

inside

Collaborator

3591

Trusted CA List is missing a lot

3591

inside

Advisor

597

Install Policy pushed but still visible by other admin

187

Solved

inside

Advisor

852

CPUSE v2606 manual installation failure

737

inside

Employee

217

R82 Jumbo Hotfix Accumulator take 39 has been released

217

inside

Advisor

581

Best Way to Export Policy Package for Reporting

581

Solved

inside

Advisor

1554

Regenerate Token for MaaS Tunnel

1554

inside

Collaborator

291

a third-party certificate on a clustered and centrally managed Appliance 1900

202

Solved

inside

Participant

363

Checkpoint 19000 Supported Transceivers Sync

363

Solved

inside

MVP Gold

522

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

522

inside

Explorer

313

Testing primary and secondary bond interfaces

313

Solved

inside

Participant

381

Best Practices for Threat Prevention API Calls to Appliance - API repository

381

inside

Advisor

227

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

227

Solved

inside

Contributor

410

What are the new NAT options in SMS and GW for?

410

Solved

inside

Contributor

2732

Traffic initiated from Lan to VPN Endpoint Client Blocked

868

inside

Participant

1039

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

1039

Solved

inside

Advisor

3204

Quantum Force 9000 Appliance OS version Compatibility

485

inside

MVP Platinum

441

Help Shape the Future of AI at Check Point

242

inside

Contributor

1138

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

1138

Solved

inside

Collaborator

1075

Firewall - Automating Firewall Rule Cleanup Based on Usage

1075

inside

Employee

1133

CVE-2025-45582 - tar: Tar path traversal

1302

Solved

inside

Advisor

278

Peer certificate verification failed after certificate replacement

278

Solved

inside

Contributor

19141

How to list arp table and identify network devices with mac under Check Point FWs

19141

Solved

inside

Explorer

659

Remote Access VPN – Can specific routes be assigned to particular users?

659

inside

MVP Platinum

1225

R8x - Performance Tuning Tip - Appliance Sizing

1225

inside

Participant

3784

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

1330

Solved

inside

Contributor

467

add rule to policy via mgmt_Cli fails

467

inside

Explorer

257

Behaviour after regular contract/subscription expiration

334

Solved

inside

Advisor

598

Log file isn't shown automatically after upgrade to R82

598

Solved

inside

Explorer

492

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

492

Solved

inside

Explorer

1365

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

1365

inside

Participant

769

7000 appliance R81.20 iSO image install

769

inside

Explorer

171

Unable to take ssh for MGMT Port

171

Solved

inside

Advisor

387

Updatable (geo) objects and IP addresses, again

387

Solved

inside

Advisor

848

Renaming a Gateway Node in a Cluster

848

Solved

inside

Advisor

443

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

443

inside

MVP Platinum

285

R82.10 - Hardware Security Module (HSM) for TLS 1.3

285

Solved

inside

Advisor

2893

How do you keep track of the latest FW/OS updates?

2893

Solved

inside

Advisor

1662

Manual FTP transfers are always corrupted while scheduled backups are not

459

inside

Employee

187

Estimated R82 release recommended date?

3283

inside

Collaborator

3671

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

3671

Solved

inside

Explorer

372

Monitord process consume high cpu, does it safe to terminate the process during production hour?

372

inside

Collaborator

813

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

893

Solved

inside

Contributor

1000

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

1000

inside

MVP Platinum

4321

'fw ctl conntab -x' issue in R81.10

4321

Solved

inside

Advisor

1373

How to view the connections of the dynamic dispatcher's table

1373

Solved

inside

Collaborator

385

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

385

inside

Explorer

1621

A suspicious traffic log was observed during monitoring

379

inside

Admin

6631

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

6631

inside

Explorer

207

I need Check_Point_R81.20_T631_ScalablePlatform

441

inside

Participant

2997

Questions about User Mode and Kernel Mode

2997

inside

Explorer

622

Cannot start Mobile Access Portal Agent

622

inside

Advisor

352

Openserver Dell R660xs, anyone ever tried this machine?

352

inside

Explorer

794

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

1701

Solved

inside

Collaborator

28290

Unable to establish the SIC(Outgoing Policy)

284

inside

Employee

923

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

6393

inside

Admin

2849

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

2849

inside

MVP Gold

380

RA clients not able to access external cluster interface

380

inside

Explorer

358

Microsegmentation with Firewall Hardware

358

inside

Explorer

329

the new subnets are unable to communicate through the existing VPN tunnel

329

inside

Participant

551

SMS migration from XCP-NG to ProxMox

551

inside

Advisor

4377

Take logging out of the implied rules

878

inside

MVP Platinum

1649

SmartConsole Shortcuts - cheat sheet

1649

inside

Explorer

550

I can't find how my dns host is used within the FW object.

550

inside

Explorer

4123

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

4123

Solved

inside

Explorer

562

BGP route on Maestro Active/Active are showing as inactive/unusable

562

inside

Employee

299

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

299

Solved

inside

Contributor

833

LOM interface - Console Session

833

Solved

inside

Collaborator

782

Reducing /var/log partition size on Gaia OS

782

Solved

inside

Collaborator

13231

https inspection tip/feedback/suggestion

661

inside

Explorer

371

Disable Camelia Cipher on the firewall

371

inside

Collaborator

460

always-connect for standalone vpn client

460

Solved

inside

Collaborator

1272

Policy Installation Failed(Time out)-SMB Appliance

1272

Solved

inside

Admin

3134

New Products Introduction July 2025: Video, Slides, and Q&A

3134

Solved

inside

Advisor

514

Export all gateways IPs MDS + VSX

514

inside

Collaborator

771

Unable to access Site(CPNotEnoughDataForRuleMatch)

771

inside

Employee

352

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

352

Solved

inside

Advisor

2452

Clarification Needed on fwaccel stat

2452

Solved

inside

Explorer

434

How to renew GAIA web certificate.

434

Solved

inside

Advisor

983

Deleting a Checkpoint host object from smart console

385

Solved

inside

Contributor

763

Netflow Export with Physical Ip in cluster environment

186

Solved

inside

Advisor

522

Moving a Gateway from One CMA to Another

522

inside

Explorer

257

Logs not showing up in SmartConsole after policy install

257

inside

Collaborator

2370

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

202

inside

Admin

377

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

377

inside

Collaborator

276

synchronize Identity sharing between the active and passive node

276

Solved

inside

MVP Platinum

36638

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

257

Solved

inside

Advisor

396

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

396

Solved

inside

Employee Alumnus

3475

What is the difference between Custom Intelligence feed and Network Feeds ?

3475

inside

Explorer

505

Static Hide Behind Gateway NAT

1168

inside

Admin

297

From OT to Cloud: A Security Blueprint for Manufacturers EMEA - Recording

297

inside

Employee

8640

New 3900 Branch office applainces were launched today 28/5

8640

Solved

inside

Contributor

288

telnet showing open port on ILO when its not when going via FW

288

inside

Explorer

621

Allow rule for site hosted on akamai CDN, only the first dns response seems to work

621

Solved

inside

Explorer

473

Identity Awareness Agents SK with direct links - published!

17992

inside

Advisor

324

Fresh Install Without USB, Possible From Boot Menu?

324

Solved

inside

Advisor

460

simple question about ISOmorphic

460

inside

Advisor

218

IPSec tunnel Setup [HUB and SPOKE Scenario] with Both spokes being non-checkpoint VPN Gateway

759

Solved

inside

Advisor

200

At a gateway, how do I determine what domain the gateway belongs to?

778

inside

Advisor

818

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 11 Nov 2025 @ 10:00 AM (CET)

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA

Virtual

Tue 11 Nov 2025 @ 11:00 AM (EST)

Under the Hood: CloudGuard WAF for the GenAI Era

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CET)

Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 10:00 AM (CET)

The Netherlands: Hands-On CloudGuard Workshops

Virtual

Tue 11 Nov 2025 @ 10:00 AM (CET)

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA

Virtual

Tue 11 Nov 2025 @ 11:00 AM (EST)

Under the Hood: CloudGuard WAF for the GenAI Era

Virtual

Thu 13 Nov 2025 @ 10:00 AM (CET)

Cloud Architect Series - Guarding Generative AI: Next-Gen Application Security with CloudGuard WAF

Virtual

Fri 14 Nov 2025 @ 10:00 AM (CET)

CheckMates Live Netherlands - Veriti, Threat Exposure Management

Virtual

Wed 19 Nov 2025 @ 11:00 AM (EST)

TechTalk: Improve Your Security Posture with Threat Prevention and Policy Insights

Virtual

Thu 20 Nov 2025 @ 03:00 PM (CET)

Deep Dive EMEA: Management API Best Practices

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Tue 11 Nov 2025 @ 06:00 PM (COT)

San Pedro Sula: Risk Management al Horno: ERM, TEM & Pizza Night

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CET)

Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 10:00 AM (CET)

The Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CST)

Tulsa, OK: Hands-on CloudGuard Workshops

In-Person

Thu 13 Nov 2025 @ 09:00 AM (CST)

Oklahoma City, OK: Hands-on CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?