General Topics

AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You

Call For Papers
Your Expertise. Our Stage

Learn More!

Good, Better, Best:
Prioritizing Defenses Against Credential Abuse

Ink Dragon: A Major Nation-State Campaign

Watch Here

CheckMates Go:
CheckMates Fest

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Participant

27408

site to site VPN troubleshooting without monitoring blade

27408

Solved

inside

Collaborator

27300

Issue connecting to the management server via smart console

27200

inside

Contributor

27199

SecureXL is enabled, but the traffic is not accelerated

27116

inside

MVP Diamond

27020

Configuring CLuster XL step by step

26999

inside

Advisor

26799

R81 - SNMP does not support SHA1 anymore

26799

inside

Advisor

26786

ICMP reply does not match a previous request

26300

Solved

inside

Contributor

26100

High CPU after upgrade from 77.30 to 80.10

26100

inside

Explorer

26045

Stealth rule vs Management Rule

25262

Solved

inside

Participant

25199

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

25199

inside

Participant

25023

How can I find Throughput statistics?

25023

inside

Contributor

25000

Aruba Clear Pass Integration - API

24998

inside

Contributor

24910

R80.10 gateway, can't set sim_clamp_vpn_mss

24910

Solved

inside

Participant

24840

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

24840

inside

Collaborator

24806

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

24799

Solved

inside

Advisor

24400

RSS feed for checkpoint.com is not working any more

24400

inside

MVP Diamond

24299

R80.40 - Dynamic split of CoreXL

24299

inside

MVP Diamond

24199

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

24199

Solved

inside

Collaborator

24199

Get all the Gaia version and installed jumb hotfix

23300

inside

Advisor

23216

Best practise - How often do you patch/upgrade your gateways?

23216

Solved

inside

Collaborator

23200

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

23200

inside

MVP Platinum

23174

Check Point Site-to-Site VPN Compatibility Matrix

23174

Solved

inside

Collaborator

23129

How to handle core-dumps and crash dumps

23129

inside

Admin

23122

R77.30 Take 286: New Jumbo Hotfix GA Release

23122

inside

Collaborator

23105

How to get interface status of particular time slot

23105

inside

Advisor

23100

Outbound SSL Inspection: A war story

23100

inside

Contributor

23040

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

23040

inside

Mentor

23000

101

"UDP checksum is incorrect" - 100s of IPv6 DROPs in fw.log - TP/IPS responsible?

23000

101

inside

Participant

22876

HTTPS inspection with trusted certificate

22876

inside

Participant

22804

CheckPoint redirect to IP address 62.0.58.94

22804

inside

Admin

22800

Security Gateway Performance Optimization Excerpt

22800

Solved

inside

Contributor

22710

"Max Power" Book Second Edition Released!

22699

inside

Participant

22425

Both security gateways are active in the Full HA cluster

22425

inside

Contributor

22331

Discovering changes in topology table

22331

Solved

inside

Advisor

22299

How to check ThreatCloud URL Reputation?

22299

Solved

inside

Collaborator

22207

Blocking for specific file types in Check Point Firewall

22207

Solved

inside

Collaborator

22199

DNS Resolution failing but ping to IP address is succesful.

22199

inside

Contributor

22160

Finding root cause for all the F2F traffic

22139

inside

Explorer

22103

how to check VPN phase 1 and phase 2 status?

22103

inside

Participant

21999

Monitoring standby member in a cluster

21999

inside

Collaborator

21950

Policy Based Routing and default route / features

21901

inside

Advisor

21800

Remote Access VPN in a Load-sharing Cluster Environment

21800

Solved

inside

Explorer

21599

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

21599

Solved

inside

Advisor

21599

How to see what firewall rules match some traffic

21599

Solved

inside

Contributor

21599

Upgrading form R81.10 to R81.20

21599

inside

Participant

21598

syn-ack on every IP address on port tcp_80 during vulnerability scan

21598

inside

MVP Diamond

21539

HP Server DL360/380 G9 reboot issue!

21539

Solved

inside

Participant

21240

Which version is better? R80.10 or R77.30

21199

inside

Champion

21099

Configuring dynamic routing in clustered VSX

21099

Solved

inside

Advisor

21060

Hide NAT: Simultaneous Connections to the same destination

21060

inside

Admin

21000

R80.30 Early Availability Program is started!

21000

inside

Collaborator

20899

JHF 317 breaking sync connection and not coming back up

20899

inside

Explorer

20699

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

20699

inside

Advisor

20600

Increasing Fifo Buffers on Firewall Interface

20599

inside

Contributor

20541

static NAT vs hide behind an IP

20541

inside

Admin

20527

Site-to-site vpn Tunnel to a non Checkpoint Gateway

20520

inside

Explorer

20516

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

20516

Solved

inside

Advisor

20501

Custom Intelligence Feed Exceptions Not Working

20501

Solved

inside

Champion

20499

Gateway behind NAT. What limitations am I to be aware of?

20499

Solved

inside

Employee

20469

Tip of the week: Support Center's Upgrade Wizard

20469

inside

Participant

20456

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

20426

Solved

inside

MVP Gold

20399

Check Point Support Resources - Top 10

20399

inside

Participant

20399

Physical memory vs FW memory. Explanation needed!

20399

inside

Admin

20398

R80.30 Technical Update TechTalk

20398

inside

Admin

20161

All Products and Where To Post About Them

20161

Solved

inside

Contributor

20131

How to list arp table and identify network devices with mac under Check Point FWs

20131

Solved

inside

Participant

20105

R80.20 strange behaviour - random TCP session timeout values - fw ctl conntab

20105

inside

Advisor

20099

Types of NAT used in checkpoint firewall

20067

Solved

inside

Contributor

19902

How to show the active connection to a specific host

19902

Solved

inside

Explorer

19900

Ikev2 Phase2 is not getting up

19900

Solved

inside

Advisor

19899

Disable NAT on SIP payload - breaks ICE

19899

inside

Admin

19799

IPSec Tunnel Failing to establish

19700

inside

Advisor

19699

Check Point Clustering between two Datacenters

19699

inside

Collaborator

19699

Let's create Check Point Super Cheat Sheet

19699

inside

Contributor

19699

How can I setup a primary and backup S2S VPN tunnels

19628

inside

Champion

19599

Identity Awareness getting DC Name only

19599

Solved

inside

Participant

19598

R80.20 Issue : Monitoring standby cluster members via VPN

19500

inside

Employee

19470

Identity Awareness Agents SK with direct links - published!

19470

inside

Participant

19399

Can you explain the impact of using fwstop and cpstop ?

19399

Solved

inside

Contributor

19300

Custom URL matching with HTTPS categorization

19300

inside

Explorer

19299

ISP Redundancy (load sharing) issue in R80.10

19299

inside

Admin

19244

TechTalk Special Edition: The Apache log4j Vulnerability Explained

19244

inside

Explorer

19231

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

19231

inside

Contributor

19199

Https inspection Validation error

19199

inside

Collaborator

19155

Pulling FW data fron MDS using a script.

19155

inside

Contributor

19100

SecureXL R80.20 - Issue on ALL High TCP Ports

19082

inside

Explorer

19034

Announcement: Check Point R81.20 - Recommended Release

19000

inside

Contributor

18999

Verify Enabled Cipher Suites in HTTPS Inspection

18999

Solved

inside

Contributor

18998

Activating Identity Awareness to Intergrate AD

18925

inside

Collaborator

18844

Report show spam category with "accept" actions but not blocking

18844

inside

Advisor

18799

Stateful Inspection on Gateways

18799

inside

MVP Diamond

18686

Open Server - HCL for multi queue network cards

18686

inside

MVP Platinum

18644

Check Point Support Tools - Top 10

18644

inside

Advisor

18619

What does high si mean on a FW Worker core?

18619

inside

Explorer

18614

What is route and how to configure route?

18614

inside

Advisor

18501

Do any Checkpoint appliances offer SSL offload?

18501

Solved

inside

Contributor

18500

upgarde to R80.30 using CPUSE failing

18500

inside

Participant

18499

Untrusted TLS/SSL server X.509 certificate

18499

Solved

inside

Advisor

18433

CheckPoint TLS 1.3 support: When?

18433

inside

Collaborator

18339

Check Point Deployment Shell internal error

18339

inside

Participant

18301

Updatable objects with geo policy

18301

inside

Participant

18300

Best Practices for Identity Collector Architecture

18300

inside

Participant

18298

Combine VLAN and physical interface, which already has an assigned IP

18298

Solved

inside

Mentor

18298

R81 SmartConsole Access issue after install of recent TAKE 81

18298

inside

Contributor

18294

Check Point R80.40 has been released!

18200

inside

Participant

17993

Application database update failed

17993

inside

Employee

17899

sk164752 - Installing DOOM on Gaia

17899

Solved

inside

MVP Gold

17899

Terrapin Vulnerability - All Linux servers are vulnerable globally including CheckPoint

17899

Solved

inside

Participant

17899

Edit Permission profile for CPMI & LEA

17899

inside

Participant

17878

URL Filtering and Application Control in my R80.20 not dropping categories

17878

inside

Explorer

17868

Domain object is not working in R80.10 properly

17868

inside

Explorer

17860

Unable to connect to the checkpoint cloud check dns, gateway, proxy sever.

17831

inside

MVP

17821

LDAP Authentication failed in SSL VPN

17821

inside

Contributor

17810

R81 is now available (Questions and Answers)

17799

inside

MVP Diamond

946757

375

163

R81.x Security Gateway Architecture (Logical Packet Flow)

946757

375

163

inside

MVP Silver

2612

Check Point Firewall: Configuring a Layer 2 Bridge (Transparent Firewall)

2612

Solved

inside

MVP Silver

1101

Feature Request - HTML Health Check Reports

628

Solved

inside

Advisor

1492

Support site security advisories link

1492

inside

MVP Diamond

1632

2025 CP community and company achievements

1632

Solved

inside

Employee Alumnus

54922

Policy Insights: Your AI-Powered Firewall Assistant

2090

Solved

inside

Explorer

1580

Firewall behavior when handling terminated TCP connections

1580

inside

Participant

3764

error Clear text packet should be encrypted

3764

inside

Collaborator

888

Checkpoint Endpoint VPN - 2 VPNs, only one works (via Endpoint VPN)

888

inside

Admin

1023

Happy New Year - Let's Celebrate 2026 Together

1023

Solved

inside

Collaborator

6459

VPN Redundancy b/w two Gateways

848

Solved

inside

MVP Gold

2007

CVE-2025-68615 Net-SNMP snmptrapd crash

2007

inside

Explorer

583

Request for enhancements for filtering in SmartConsole

535

Solved

inside

Advisor

1429

Unlocking the Power of Policy Insights: Features, Benefits, and a Technical Deep-Dive Video

1276

inside

Employee

951

Adaptive IPS – Smarter Performance-Aware Intrusion Prevention

951

Solved

inside

Collaborator

2994

Checkpoint FW R81 don't block SYN FLOOD

2994

Solved

inside

Collaborator

5491

Domain objects in remote access encryption domain.

5491

inside

Collaborator

360

How to lock change method authentication VPN on Client Security

360

inside

Employee

957

Introducing AIOps: Real-Time Visibility, Automation, and Predictive Insights - The Video

957

Solved

inside

Collaborator

2275

Block .lzn file extension in MTA Blade

2275

inside

Explorer

885

R81.20 SmartConsole unresponsive

885

Solved

inside

Explorer

3597

CoreXL is turned off by default on a brand new 9800

3597

Solved

inside

Participant

5007

Warning Messages: cp_timed_blocker_handler

2107

inside

Admin

5359

What's New In R82.10 December 2025: Video, Slides, and Q&A

5359

Solved

inside

Contributor

767

Smart Console Hits count column

767

inside

Employee

1087

Harmony DLP Browse: Control, Monitor, and Protect Sensitive Data

1087

Solved

inside

Advisor

1136

Introducing AIOps: Real-Time Visibility, Automation, and Predictive Insights

1552

Solved

inside

Participant

1242

Unable to Access the SAP Server form the VPN tunnel

1400

Solved

inside

Participant

602

Quantum Gateways - NGTP and NGFW

602

Solved

inside

Advisor

2782

Log distribution performance - Impact on GWs verse log servers

2782

Solved

inside

Contributor

4639

One interface active cause ssh/https connectivity?

4065

Solved

inside

Advisor

717

HTTPS Traffic Accepted via Implied Rules

717

inside

Explorer

6999

Configure site to site vpn between aws and checkpoint

6999

inside

Explorer

629

R82 SecureXL Flowchart - non accelerated packets

4127

inside

Mentor

23018

101

"UDP checksum is incorrect" - 100s of IPv6 DROPs in fw.log - TP/IPS responsible?

23018

101

Solved

inside

Advisor

575

can Check Point enforce image recognition?

575

Solved

inside

Collaborator

15753

What is SNMP OID for CP FW number of new connections?

15753

Solved

inside

Contributor

6318

SIC problem after upgrade to R81.20

6318

Solved

inside

Collaborator

1401

Process 'usim_x86' running for months, using 600+% CPU

1401

inside

Collaborator

2021

DigiCert TLS Certificate Lifetimes Will Officially Reduce to 47 Days

2021

Solved

inside

Advisor

1701

Clarification When Upgrading to R82

1009

inside

Admin

367

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT

367

Solved

inside

MVP Diamond

774

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT recording

774

inside

Advisor

2737

Your First Response: Immediate Actions for Cyber Incident Containment- AMER - Recording

537

inside

MVP Diamond

1265

Post Quantum Cryptography (PQC)

1265

Solved

inside

Advisor

2072

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA - Recording

284

inside

Contributor

5005

Error logs in Threat Emulation

5005

inside

Collaborator

288

Why Doesn't Checkpoint MTA Detect Obfuscated JS in Email HTML Body (eval/atob)?

288

inside

MVP Diamond

601

Https inspection and urlf/appc blade settings I found work the best

601

inside

Collaborator

5219

arping responses not showing on newer appliances

3158

inside

Advisor

4667

MFA Behavior on Gaia Portal – R81.20 Jumbo Hotfix Take 118 and 113

961

inside

Explorer

823

Site to Site VPN issue (Checkpoint To ASA)

823

Solved

inside

MVP Diamond

5732

What is UPPAK, KPPAK vs. USFW, KSFW

5732

inside

MVP Diamond

3630

Performance Tuning Tip - VPN Speed Test

3630

inside

Explorer

384

Deny Multiple Services in a Single Rule

922

Solved

inside

Advisor

499

R81.x Architecture and Performance Tuning - Link Collection

1268811

294

Solved

inside

Contributor

3569

Migrating from ClusterXL to ElasticXL steps

2074

Solved

inside

Contributor

1022

Proxy arp issue - automatic NAT rule

1022

Solved

inside

Participant

3776

Setting up Checkpoint 5800 appliances behind a Residential AT&T modem/router

3776

inside

Explorer

4627

Cannot access to Product Evaluation

752

Solved

inside

Explorer

1934

Allow older clients to connect to this gateway disabling L2TP+IPSec mode

1934

Solved

inside

MVP Diamond

543

VXLAN - Perfomance optimation question

543

inside

Advisor

828

ClusterXL Forced Failover command

828

inside

MVP Diamond

1502

Mini Concept – VPN Layer 2 tunneling between two data centers

618

inside

MVP Diamond

321

Remote Access Location Awareness - DC Check

1248

Solved

inside

Advisor

811

Pasting clish BGP MD5 secrets?

811

inside

Participant

932

Remote Access Authentication with Certificate and Group Membership Retrieval

932

inside

Admin

764

Software Blade effectiveness with and without HTTPS Inspection - sk184185

764

Solved

inside

MVP Diamond

2272

SmartConsole Extension Issue in R81.20/R82

2272

inside

Participant

331

Remote Access VPN & Site-to-Site tunnels broken (“invalid cookie” / SA desync) after upgrade

331

inside

MVP Platinum

2144

Check Point Appliances - Overview

2144

Solved

inside

Collaborator

844

R77.30 VS migration from legacy VSX cluster to new one on R81.20

844

Solved

inside

Advisor

837

Can I implement Identity Awareness without using a PDP/PEP Broker?

837

Solved

inside

Collaborator

1143

Gateway blades suddenly expiring despite having valid licenses

1143

inside

MVP Diamond

3097

Bootable USB from ISO for open servers

1994

Solved

inside

Explorer

5188

Management Interface (eth0) assigned via DHCP - cannot remove the static IP of the interface

5188

Solved

inside

Collaborator

786

Identity Awarness upgrade (cross platform)

786

Solved

inside

Participant

1666

P2P Config compatibility in Active/Standby Cluster

1340

Solved

inside

Participant

872

Introducing new Acceleration NIC 4x10/25G for Quantum Force appliances

4290

inside

Contributor

4322

CCSA/CCSE Labs on HP Notebook - Performance Issue

4322

inside

MVP Platinum

584

Evolution of Check Point's website 1996 - 2025

584

Solved

inside

Contributor

1534

CPX 2001 - An Internet Security Event

782

inside

MVP Silver

1514

R82 Streamed SmartConsole (Smart-1 Cloud) issue with Gateways and Servers view

1514

inside

Contributor

1074

Get interfaces WITH/WITHOUT topology

1074

inside

Contributor

2297

VPN IPSec Tunnel with Sophos IKEv2 Issue

2297

inside

Advisor

4080

Traffic is not visible on management.

4080

Solved

inside

Advisor

736

9800 interfaces links down but switchports up

1010

inside

Contributor

994

Best Practices for Websites and Applications

994

Solved

inside

Advisor

1367

CVE-2025-32728 - permanent solution?

1367

inside

MVP Diamond

1180

VSX on Check Point 9300/9400 Appliances

1180

Solved

inside

Collaborator

1557

IPsec VPN between Checkpoint and Remote Server

1557

inside

Explorer

586

Management-Server: Addition NIC or VSX-Cluster?

586

inside

Collaborator

2598

Port 19009 on MGMT Server Accessible from Internet via Implied Rule Despite GUI Clients List

2598

inside

Admin

336

Tips and Tricks 2025 #13 - Strategic Cyber Assessments: How to Strengthen Your Security Posture

336

inside

Admin

1046

Learn About CheckMates October 2025

1046

inside

MVP Platinum

4345

HowTo: Configure a VPN between FortiGate & Check Point

4345

Solved

inside

Explorer

2754

Unable to export Checkpoint firewall rulebase

2754

Solved

inside

MVP Gold

892

Can I configure complex views using smart reporter?

892

Solved

inside

Contributor

390

turning off secureXL resolves mac flapping?

390

Solved

inside

MVP Gold

903

Identifying failed ISP in case of ISP redundancy

903

Solved

inside

Advisor

591

Minimum RAM and CPU requirements for S1C Management

591

Solved

inside

Participant

1697

How are you keeping up with Check Point VPN/SIC Certificates

1035

inside

Authority

1031

Notification about changes within Support Life Cycle

1031

inside

Collaborator

2267

SIC not automatically renewing certificate in VSX

632

Solved

inside

Explorer

638

Secondary MDS Migration and IP Change

638

Solved

inside

Advisor

3057

ClusterXL – Should the standby member ever generate traffic with the VIP?

3057

Solved

inside

Advisor

1154

R82 - ssl inspection auto bypass question

1154

inside

MVP Diamond

644

Tips and Tricks 2025 #12 - Check Point PRO Support Overview & Update

225

Solved

inside

Collaborator

549

Are Logs Still Visible If Only the index File Remains?

549

Solved

inside

Participant

59053

Best way to whitelist KnowBe4 Phishing domains?

59053

inside

MVP Diamond

742

Special functions via policy - name field

742

Solved

inside

Collaborator

911

Using Identity Awareness Collector with Cisco FTD Syslogging

911

inside

Participant

847

Firewall is freezing/crashing randomly after upgrade to R82

847

inside

Participant

839

How to allow redirects on Cloudflare

839

inside

Explorer

518

R82 http proxy and dns proxy forwarding domains not working

518

inside

Admin

1656

BRICKSTORM: A Stealthy Espionage Campaign Targeting Enterprise Infrastructure (sk184082)

1656

inside

MVP Gold

3462

Ongoing issue: high CPU load fw_workers + rad

3462

inside

Advisor

610

How to safely reuse an existing cluster

610

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Wed 15 Apr 2026 @ 10:00 AM (BST)

AI Security Workshop - London

Virtual

Wed 15 Apr 2026 @ 05:00 PM (CEST)

Agentic AI and Why Email Security Must Evolve Now

Virtual

Wed 15 Apr 2026 @ 07:00 PM (CST)

Defensa en Tiempo Real: Amenazas Actuales y Cómo Check Point te Protege Hoy

In-Person

Thu 16 Apr 2026 @ 10:00 AM (CEST)

AI Security Workshop - Munich

Virtual

Thu 16 Apr 2026 @ 11:00 AM (EDT)

Tips and Tricks 2026 #4: PRO Support

Virtual

Tue 21 Apr 2026 @ 05:00 PM (IDT)

AI Security Masters E7: How CPR Broke ChatGPT's Isolation and What It Means for You

Virtual

Wed 15 Apr 2026 @ 05:00 PM (CEST)

Agentic AI and Why Email Security Must Evolve Now

Virtual

Wed 15 Apr 2026 @ 07:00 PM (CST)

Defensa en Tiempo Real: Amenazas Actuales y Cómo Check Point te Protege Hoy

Virtual

Thu 16 Apr 2026 @ 11:00 AM (EDT)

Tips and Tricks 2026 #4: PRO Support

Virtual

Tue 21 Apr 2026 @ 05:00 PM (IDT)

AI Security Masters E7: How CPR Broke ChatGPT's Isolation and What It Means for You

Virtual

Thu 23 Apr 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Management API Best Practices

Virtual

Tue 28 Apr 2026 @ 06:00 PM (IDT)

Under the Hood: Securing your GenAI-enabled Web Applications with Check Point WAF

In-Person

Wed 15 Apr 2026 @ 10:00 AM (BST)

AI Security Workshop - London

In-Person

Thu 16 Apr 2026 @ 10:00 AM (CEST)

AI Security Workshop - Munich

In-Person

Wed 22 Apr 2026 @ 08:00 AM (EDT)

P’tits déj Cyber! | Cyber Breakfasts!

In-Person

Thu 30 Apr 2026 @ 03:00 PM (PDT)

Hillsboro, OR: Securing The AI Transformation and Exposure Management

In-Person

Thu 07 May 2026 @ 01:30 PM (AEST)

CheckMates Live Sydney

CheckMates Events

Are you a member of CheckMates?