General Topics

Policy Insights and Policy Auditor in Action
19 November @ 5pm CET / 11am ET

Access Control and Threat Prevention Best Practices

Watch Here

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
Maestro Madness

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

MVP Platinum

28835

When will R80.30 GA be available?

28835

inside

Explorer

28500

What happens when a license expires?

28500

inside

Advisor

28453

How to recover Gaia Admin password on VMware

28453

Solved

inside

Collaborator

28310

R80.10 User-Mode Firewall and performance impact

27251

inside

Admin

27158

Check Point R80.20 Production and Public EA

27158

inside

Participant

26900

Domain Object when FQDN has multiple DNS results

26900

inside

Participant

26845

Issue connecting to the management server via smart console

26845

inside

Admin

26742

site to site VPN troubleshooting without monitoring blade

26724

inside

Contributor

26264

Configuring CLuster XL step by step

26216

inside

Advisor

26116

SecureXL is enabled, but the traffic is not accelerated

25848

Solved

inside

Collaborator

25736

ICMP reply does not match a previous request

25199

inside

MVP Platinum

25199

High CPU after upgrade from 77.30 to 80.10

25174

inside

Explorer

25054

R81 - SNMP does not support SHA1 anymore

24744

Solved

inside

Explorer

24608

Stealth rule vs Management Rule

24608

inside

Contributor

24299

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

24099

Solved

inside

Participant

24032

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

24032

inside

Collaborator

23972

How can I find Throughput statistics?

23748

inside

Contributor

23366

R80.10 gateway, can't set sim_clamp_vpn_mss

23366

Solved

inside

Advisor

23302

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

23301

inside

Contributor

23300

Get all the Gaia version and installed jumb hotfix

22555

Solved

inside

Collaborator

22540

Aruba Clear Pass Integration - API

22506

inside

Participant

22261

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

22260

inside

MVP Platinum

22203

R80.40 - Dynamic split of CoreXL

22203

inside

Participant

22187

HTTPS inspection with trusted certificate

22187

inside

Advisor

22055

Best practise - How often do you patch/upgrade your gateways?

22055

Solved

inside

Collaborator

22052

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

22052

inside

Collaborator

22036

How to get interface status of particular time slot

22036

inside

Admin

21909

R77.30 Take 286: New Jumbo Hotfix GA Release

21909

Solved

inside

Contributor

21900

Check Point Site-to-Site VPN Compatibility Matrix

21899

Solved

inside

Collaborator

21898

How to handle core-dumps and crash dumps

21898

inside

Explorer

21454

how to check VPN phase 1 and phase 2 status?

21454

inside

Participant

21390

Monitoring standby member in a cluster

21390

inside

Participant

21358

CheckPoint redirect to IP address 62.0.58.94

21358

inside

Contributor

21343

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

21029

inside

Contributor

21021

Discovering changes in topology table

21021

inside

Champion

21001

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

21001

inside

MVP Gold

20971

"Max Power" Book Second Edition Released!

20971

inside

Explorer

20952

Policy Based Routing and default route / features

20952

Solved

inside

Contributor

20799

Finding root cause for all the F2F traffic

20799

inside

Advisor

20744

Outbound SSL Inspection: A war story

20744

inside

Admin

20569

Security Gateway Performance Optimization Excerpt

20569

inside

Participant

20499

Both security gateways are active in the Full HA cluster

20499

Solved

inside

Explorer

20479

How to see what firewall rules match some traffic

20365

inside

MVP Platinum

20327

HP Server DL360/380 G9 reboot issue!

20327

inside

Advisor

20284

How to check ThreatCloud URL Reputation?

20118

Solved

inside

Participant

20044

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

19955

inside

Advisor

19919

Remote Access VPN in a Load-sharing Cluster Environment

19799

inside

Collaborator

19740

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19740

inside

Participant

19676

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19676

inside

Admin

19673

All Products and Where To Post About Them

19673

inside

MVP Platinum

19653

Check Point Support Resources - Top 10

19653

inside

Contributor

19602

static NAT vs hide behind an IP

19602

inside

MVP Platinum

19553

Which version is better? R80.10 or R77.30

19553

inside

Admin

19549

R80.30 Early Availability Program is started!

19549

inside

Explorer

19511

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19511

Solved

inside

Collaborator

19199

DNS Resolution failing but ping to IP address is succesful.

19199

Solved

inside

Contributor

19158

How to list arp table and identify network devices with mac under Check Point FWs

19158

Solved

inside

Contributor

19132

How to show the active connection to a specific host

19132

Solved

inside

Advisor

19126

Hide NAT: Simultaneous Connections to the same destination

19126

inside

Collaborator

19104

Let's create Check Point Super Cheat Sheet

19104

inside

Contributor

19103

RSS feed for checkpoint.com is not working any more

19097

inside

Admin

19005

R80.30 Technical Update TechTalk

19005

inside

Explorer

18971

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

18971

inside

Participant

18970

Types of NAT used in checkpoint firewall

18970

inside

Collaborator

18957

Pulling FW data fron MDS using a script.

18957

inside

Admin

18918

TechTalk Special Edition: The Apache log4j Vulnerability Explained

18918

Solved

inside

Champion

18915

Gateway behind NAT. What limitations am I to be aware of?

18915

Solved

inside

Contributor

18911

Upgrading form R81.10 to R81.20

18911

inside

Admin

18863

How can I setup a primary and backup S2S VPN tunnels

18822

Solved

inside

Advisor

18817

Disable NAT on SIP payload - breaks ICE

18817

inside

Champion

18660

Configuring dynamic routing in clustered VSX

18660

Solved

inside

MVP Platinum

18600

R80.20 Issue : Monitoring standby cluster members via VPN

18600

Solved

inside

Contributor

18594

IPSec Tunnel Failing to establish

18579

Solved

inside

MVP Platinum

18557

Increasing Fifo Buffers on Firewall Interface

18442

inside

Participant

18425

Can you explain the impact of using fwstop and cpstop ?

18425

Solved

inside

Contributor

18399

Check Point Clustering between two Datacenters

18347

Solved

inside

MVP Gold

18336

Activating Identity Awareness to Intergrate AD

18152

Solved

inside

Contributor

18136

Custom URL matching with HTTPS categorization

18136

Solved

inside

Employee

18132

Tip of the week: Support Center's Upgrade Wizard

18132

Solved

inside

Collaborator

18108

Blocking for specific file types in Check Point Firewall

18108

inside

Employee

18027

Identity Awareness Agents SK with direct links - published!

18027

inside

Explorer

17956

ISP Redundancy (load sharing) issue in R80.10

17956

inside

Explorer

17952

What is route and how to configure route?

17952

Solved

inside

Participant

17934

R80.20 strange behaviour - random TCP session timeout values - fw ctl conntab

17934

inside

Explorer

17904

Verify Enabled Cipher Suites in HTTPS Inspection

17904

inside

MVP Platinum

17850

Check Point Support Tools - Top 10

17850

inside

Explorer

17828

JHF 317 breaking sync connection and not coming back up

17824

inside

Champion

17811

Identity Awareness getting DC Name only

17811

inside

Advisor

17800

Stateful Inspection on Gateways

17800

inside

Advisor

17734

Do any Checkpoint appliances offer SSL offload?

17734

inside

Collaborator

17733

Check Point Deployment Shell internal error

17733

Solved

inside

Participant

17665

Untrusted TLS/SSL server X.509 certificate

17638

inside

Contributor

17594

Https inspection Validation error

17594

inside

Collaborator

17572

SecureXL R80.20 - Issue on ALL High TCP Ports

17572

inside

Contributor

17555

Open Server - HCL for multi queue network cards

17499

inside

Explorer

17487

Domain object is not working in R80.10 properly

17487

inside

Participant

17442

syn-ack on every IP address on port tcp_80 during vulnerability scan

17442

inside

Collaborator

17297

Report show spam category with "accept" actions but not blocking

17297

inside

Employee

17235

Combine VLAN and physical interface, which already has an assigned IP

17102

inside

Advisor

17101

LDAP Authentication failed in SSL VPN

17101

Solved

inside

Admin

7709

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

7709

Solved

inside

Contributor

310

Single VSY within VSX environment wont send logs to dedicated log server

310

inside

Champion

18684

Configuring dynamic routing in clustered VSX

18684

inside

Collaborator

656

Failed login SmartConsole after upgrade Win11

656

Solved

inside

Advisor

1034

Tip: How to deal with RAD errors

697

inside

Explorer

299

Server Error in '/owa' Application

299

inside

Contributor

2796

VPN issue stuck in Phase 1 and sometimes disconnects

2796

Solved

inside

MVP Gold

441

new transciever CPAC-TR-25SR-DM

275

inside

MVP Gold

259

UPDATE - DigiCert Certificate Expiration Mitigated

3600

inside

Advisor

368

idrac - how to create account with admin role

368

inside

Employee

3186

Introducing the New Interactive Ideas Portal – Join the Pilot!

3186

inside

Contributor

1429

Process file types known to contain malware

1429

Solved

inside

Participant

32572

useful debug command in checkpoint

32572

inside

Contributor

473

Route Based VPN Network SA no route

473

inside

MVP Gold

256

Can not access smart console over site-site VPN

256

Solved

inside

Explorer

248

External Certificates for IPSEC VPN

248

inside

Advisor

322

Rewriting internet access policy

322

Solved

inside

Participant

4157

Site to site vpn drops on policy install

4157

inside

Contributor

216

Customer FTP traffic keeps triggering new IPS protections

216

inside

Collaborator

3621

Trusted CA List is missing a lot

3621

inside

Advisor

608

Install Policy pushed but still visible by other admin

192

Solved

inside

Advisor

879

CPUSE v2606 manual installation failure

749

inside

Employee

219

R82 Jumbo Hotfix Accumulator take 39 has been released

219

inside

Advisor

603

Best Way to Export Policy Package for Reporting

603

Solved

inside

Advisor

1623

Regenerate Token for MaaS Tunnel

1623

inside

Collaborator

308

a third-party certificate on a clustered and centrally managed Appliance 1900

206

Solved

inside

Participant

367

Checkpoint 19000 Supported Transceivers Sync

367

Solved

inside

MVP Gold

544

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

544

inside

Explorer

315

Testing primary and secondary bond interfaces

315

Solved

inside

Participant

397

Best Practices for Threat Prevention API Calls to Appliance - API repository

397

inside

Advisor

236

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

236

Solved

inside

Contributor

425

What are the new NAT options in SMS and GW for?

425

Solved

inside

Contributor

2917

Traffic initiated from Lan to VPN Endpoint Client Blocked

950

inside

Participant

1083

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

1083

Solved

inside

Advisor

3337

Quantum Force 9000 Appliance OS version Compatibility

497

inside

MVP Platinum

449

Help Shape the Future of AI at Check Point

248

inside

Contributor

1161

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

1161

Solved

inside

Collaborator

1096

Firewall - Automating Firewall Rule Cleanup Based on Usage

1096

inside

Employee

1162

CVE-2025-45582 - tar: Tar path traversal

1328

Solved

inside

Advisor

297

Peer certificate verification failed after certificate replacement

297

Solved

inside

Contributor

19180

How to list arp table and identify network devices with mac under Check Point FWs

19180

Solved

inside

Explorer

673

Remote Access VPN – Can specific routes be assigned to particular users?

673

inside

MVP Platinum

1241

R8x - Performance Tuning Tip - Appliance Sizing

1241

inside

Participant

3803

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

1375

Solved

inside

Contributor

482

add rule to policy via mgmt_Cli fails

482

inside

Explorer

263

Behaviour after regular contract/subscription expiration

345

Solved

inside

Advisor

624

Log file isn't shown automatically after upgrade to R82

624

Solved

inside

Explorer

498

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

498

Solved

inside

Explorer

1385

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

1385

inside

Participant

774

7000 appliance R81.20 iSO image install

774

inside

Explorer

179

Unable to take ssh for MGMT Port

179

Solved

inside

Advisor

406

Updatable (geo) objects and IP addresses, again

406

Solved

inside

Advisor

878

Renaming a Gateway Node in a Cluster

878

Solved

inside

Advisor

455

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

455

inside

MVP Platinum

297

R82.10 - Hardware Security Module (HSM) for TLS 1.3

297

Solved

inside

Advisor

2907

How do you keep track of the latest FW/OS updates?

2907

Solved

inside

Advisor

1796

Manual FTP transfers are always corrupted while scheduled backups are not

488

inside

Employee

193

Estimated R82 release recommended date?

3413

inside

Collaborator

3719

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

3719

Solved

inside

Explorer

377

Monitord process consume high cpu, does it safe to terminate the process during production hour?

377

inside

Collaborator

857

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

938

Solved

inside

Contributor

1017

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

1017

inside

MVP Platinum

4375

'fw ctl conntab -x' issue in R81.10

4375

Solved

inside

Advisor

1385

How to view the connections of the dynamic dispatcher's table

1385

Solved

inside

Collaborator

394

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

394

inside

Explorer

1651

A suspicious traffic log was observed during monitoring

387

inside

Admin

6730

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

6730

inside

Explorer

212

I need Check_Point_R81.20_T631_ScalablePlatform

452

inside

Participant

3063

Questions about User Mode and Kernel Mode

3063

inside

Explorer

654

Cannot start Mobile Access Portal Agent

654

inside

Advisor

360

Openserver Dell R660xs, anyone ever tried this machine?

360

inside

Explorer

817

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

1796

Solved

inside

Collaborator

28344

Unable to establish the SIC(Outgoing Policy)

290

inside

Employee

933

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

6476

inside

Admin

2874

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

2874

inside

MVP Gold

384

RA clients not able to access external cluster interface

384

inside

Explorer

370

Microsegmentation with Firewall Hardware

370

inside

Explorer

336

the new subnets are unable to communicate through the existing VPN tunnel

336

inside

Participant

563

SMS migration from XCP-NG to ProxMox

563

inside

Advisor

4393

Take logging out of the implied rules

904

inside

MVP Platinum

1669

SmartConsole Shortcuts - cheat sheet

1669

inside

Explorer

569

I can't find how my dns host is used within the FW object.

569

inside

Explorer

4132

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

4132

Solved

inside

Explorer

585

BGP route on Maestro Active/Active are showing as inactive/unusable

585

inside

Employee

311

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

311

Solved

inside

Contributor

849

LOM interface - Console Session

849

Solved

inside

Collaborator

798

Reducing /var/log partition size on Gaia OS

798

Solved

inside

Collaborator

13349

https inspection tip/feedback/suggestion

673

inside

Explorer

376

Disable Camelia Cipher on the firewall

376

inside

Collaborator

477

always-connect for standalone vpn client

477

Solved

inside

Collaborator

1298

Policy Installation Failed(Time out)-SMB Appliance

1298

Solved

inside

Admin

3178

New Products Introduction July 2025: Video, Slides, and Q&A

3178

Solved

inside

Advisor

531

Export all gateways IPs MDS + VSX

531

inside

Collaborator

795

Unable to access Site(CPNotEnoughDataForRuleMatch)

795

inside

Employee

363

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

363

Solved

inside

Advisor

2480

Clarification Needed on fwaccel stat

2480

Solved

inside

Explorer

456

How to renew GAIA web certificate.

456

Solved

inside

Advisor

1009

Deleting a Checkpoint host object from smart console

399

Solved

inside

Contributor

808

Netflow Export with Physical Ip in cluster environment

202

Solved

inside

Advisor

531

Moving a Gateway from One CMA to Another

531

inside

Explorer

264

Logs not showing up in SmartConsole after policy install

264

inside

Collaborator

2385

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

205

inside

Admin

387

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

387

inside

Collaborator

286

synchronize Identity sharing between the active and passive node

286

Solved

inside

MVP Platinum

36952

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

265

Solved

inside

Advisor

410

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

410

Solved

inside

Employee Alumnus

3511

What is the difference between Custom Intelligence feed and Network Feeds ?

3511

inside

Explorer

517

Static Hide Behind Gateway NAT

1211

inside

Admin

302

From OT to Cloud: A Security Blueprint for Manufacturers EMEA - Recording

302

inside

Employee

8861

New 3900 Branch office applainces were launched today 28/5

8861

Solved

inside

Contributor

297

telnet showing open port on ILO when its not when going via FW

297

inside

Explorer

646

Allow rule for site hosted on akamai CDN, only the first dns response seems to work

646

Solved

inside

Explorer

491

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CET)

Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 10:00 AM (CET)

The Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CST)

Tulsa, OK: Hands-on CloudGuard Workshops

Virtual

Thu 13 Nov 2025 @ 10:00 AM (CET)

Cloud Architect Series - Guarding Generative AI: Next-Gen Application Security with CloudGuard WAF

In-Person

Thu 13 Nov 2025 @ 09:00 AM (CST)

Oklahoma City, OK: Hands-on CloudGuard Workshops

In-Person

Thu 13 Nov 2025 @ 06:00 PM (COT)

Tegucigalpa: Risk Management al Horno: ERM, TEM & Pizza Night para la Comunidad CheckMates

Virtual

Thu 13 Nov 2025 @ 10:00 AM (CET)

Cloud Architect Series - Guarding Generative AI: Next-Gen Application Security with CloudGuard WAF

Virtual

Fri 14 Nov 2025 @ 10:00 AM (CET)

CheckMates Live Netherlands - Veriti, Threat Exposure Management

Virtual

Wed 19 Nov 2025 @ 11:00 AM (EST)

TechTalk: Improve Your Security Posture with Threat Prevention and Policy Insights

Virtual

Thu 20 Nov 2025 @ 03:00 PM (CET)

Deep Dive EMEA: Management API Best Practices

Virtual

Thu 20 Nov 2025 @ 05:00 PM (CET)

Hacking LLM Applications: latest research and insights from our LLM pen testing projects - AMER

Virtual

Thu 20 Nov 2025 @ 10:00 AM (CST)

Hacking LLM Applications: latest research and insights from our LLM pen testing projects - EMEA

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CET)

Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 10:00 AM (CET)

The Netherlands: Hands-On CloudGuard Workshops

In-Person

Wed 12 Nov 2025 @ 09:00 AM (CST)

Tulsa, OK: Hands-on CloudGuard Workshops

In-Person

Thu 13 Nov 2025 @ 09:00 AM (CST)

Oklahoma City, OK: Hands-on CloudGuard Workshops

In-Person

Thu 13 Nov 2025 @ 06:00 PM (COT)

Tegucigalpa: Risk Management al Horno: ERM, TEM & Pizza Night para la Comunidad CheckMates

In-Person

Thu 13 Nov 2025 @ 06:00 PM (COT)

Tegucigalpa: Risk Management al Horno: ERM, TEM & Pizza Night

CheckMates Events

Are you a member of CheckMates?