General Topics

Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages

Introduction to Lakera:
Securing the AI Frontier!

Watch Now!

Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Learn More

HTTPS Inspection
Help us to understand your needs better

Take the Survey

CheckMates Go:
SharePoint CVEs and More!

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Admin

26409

Domain Object when FQDN has multiple DNS results

26099

inside

Contributor

25999

Configuring CLuster XL step by step

25999

inside

Advisor

25973

SecureXL is enabled, but the traffic is not accelerated

25399

Solved

inside

Collaborator

25299

High CPU after upgrade from 77.30 to 80.10

24899

Solved

inside

Collaborator

24833

ICMP reply does not match a previous request

24833

inside

Explorer

24828

Stealth rule vs Management Rule

24440

Solved

inside

Advisor

24033

R81 - SNMP does not support SHA1 anymore

24033

inside

Contributor

23999

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

23744

Solved

inside

Participant

23510

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

23510

inside

Participant

23305

How can I find Throughput statistics?

23305

Solved

inside

Advisor

23099

R80.10 gateway, can't set sim_clamp_vpn_mss

22900

inside

Participant

22884

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

22814

inside

MVP Gold

22615

Get all the Gaia version and installed jumb hotfix

22338

inside

Admin

22199

HTTPS inspection with trusted certificate

21941

inside

Collaborator

21858

Aruba Clear Pass Integration - API

21858

inside

MVP Gold

21800

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

21800

inside

Advisor

21799

Best practise - How often do you patch/upgrade your gateways?

21799

Solved

inside

Collaborator

21746

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

21746

inside

Collaborator

21644

How to get interface status of particular time slot

21644

Solved

inside

Collaborator

21600

How to handle core-dumps and crash dumps

21600

inside

MVP Gold

21599

R80.40 - Dynamic split of CoreXL

21599

Solved

inside

Contributor

21597

R77.30 Take 286: New Jumbo Hotfix GA Release

21499

inside

MVP Gold

21499

Check Point Site-to-Site VPN Compatibility Matrix

21499

inside

Explorer

21237

how to check VPN phase 1 and phase 2 status?

21237

inside

Participant

21205

Monitoring standby member in a cluster

21205

inside

Contributor

21143

CheckPoint redirect to IP address 62.0.58.94

20900

inside

Champion

20866

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

20866

inside

Explorer

20699

Policy Based Routing and default route / features

20699

inside

Contributor

20640

Discovering changes in topology table

20640

inside

MVP Gold

20454

"Max Power" Book Second Edition Released!

20454

inside

Contributor

20400

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

20400

Solved

inside

Contributor

20395

Finding root cause for all the F2F traffic

20395

inside

Advisor

20102

Outbound SSL Inspection: A war story

20102

inside

MVP Gold

20082

HP Server DL360/380 G9 reboot issue!

20082

inside

Admin

20003

Security Gateway Performance Optimization Excerpt

20003

Solved

inside

Advisor

20003

How to see what firewall rules match some traffic

20003

inside

Advisor

19915

Both security gateways are active in the Full HA cluster

19815

Solved

inside

Explorer

19806

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

19721

Solved

inside

Participant

19699

All Products and Where To Post About Them

19547

Solved

inside

Advisor

19533

How to check ThreatCloud URL Reputation?

19533

inside

Collaborator

19525

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19525

inside

MVP Gold

19500

Check Point Support Resources - Top 10

19500

inside

Participant

19442

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19442

inside

Collaborator

19299

Remote Access VPN in a Load-sharing Cluster Environment

19276

inside

MVP Gold

19256

Which version is better? R80.10 or R77.30

19256

inside

Contributor

19237

static NAT vs hide behind an IP

19237

inside

Admin

19199

R80.30 Early Availability Program is started!

19199

inside

Explorer

19155

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19155

inside

Contributor

18984

Let's create Check Point Super Cheat Sheet

18944

inside

Explorer

18913

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

18913

inside

Collaborator

18899

Pulling FW data fron MDS using a script.

18899

Solved

inside

Contributor

18899

How to list arp table and identify network devices with mac under Check Point FWs

18899

Solved

inside

Contributor

18878

How to show the active connection to a specific host

18878

inside

Admin

18827

TechTalk Special Edition: The Apache log4j Vulnerability Explained

18827

inside

Participant

18699

Types of NAT used in checkpoint firewall

18699

Solved

inside

Advisor

18699

Hide NAT: Simultaneous Connections to the same destination

18699

inside

Admin

18605

R80.30 Technical Update TechTalk

18605

Solved

inside

Advisor

18565

Disable NAT on SIP payload - breaks ICE

18565

inside

Contributor

18544

How can I setup a primary and backup S2S VPN tunnels

18544

inside

Admin

18530

Gateway behind NAT. What limitations am I to be aware of?

18500

Solved

inside

Contributor

18331

R80.20 Issue : Monitoring standby cluster members via VPN

18317

Solved

inside

Collaborator

18303

DNS Resolution failing but ping to IP address is succesful.

18303

inside

Participant

18299

IPSec Tunnel Failing to establish

18299

Solved

inside

Contributor

18199

Upgrading form R81.10 to R81.20

18199

inside

Participant

18115

Can you explain the impact of using fwstop and cpstop ?

18115

Solved

inside

MVP Gold

18099

Check Point Clustering between two Datacenters

18073

inside

Contributor

17999

Increasing Fifo Buffers on Firewall Interface

17999

inside

Champion

17998

Configuring dynamic routing in clustered VSX

17998

inside

Advisor

17966

Activating Identity Awareness to Intergrate AD

17966

Solved

inside

Contributor

17919

Custom URL matching with HTTPS categorization

17919

Solved

inside

MVP Gold

17897

What is route and how to configure route?

17788

inside

MVP Gold

17676

Check Point Support Tools - Top 10

17676

inside

Explorer

17648

ISP Redundancy (load sharing) issue in R80.10

17648

inside

Employee

17610

Identity Awareness Agents SK with direct links - published!

17610

inside

Explorer

17599

Verify Enabled Cipher Suites in HTTPS Inspection

17599

Solved

inside

Advisor

17597

RSS feed for checkpoint.com is not working any more

17597

inside

Advisor

17542

Stateful Inspection on Gateways

17542

inside

Collaborator

17540

Check Point Deployment Shell internal error

17540

inside

Advisor

17500

Do any Checkpoint appliances offer SSL offload?

17500

inside

Explorer

17468

Blocking for specific file types in Check Point Firewall

17414

inside

Champion

17399

Identity Awareness getting DC Name only

17399

inside

Explorer

17382

Domain object is not working in R80.10 properly

17382

Solved

inside

Participant

17329

R80.20 strange behaviour - random TCP session timeout values - fw ctl conntab

17329

inside

Participant

17324

Untrusted TLS/SSL server X.509 certificate

17324

Solved

inside

Employee

17323

Tip of the week: Support Center's Upgrade Wizard

17323

inside

Collaborator

17300

JHF 317 breaking sync connection and not coming back up

17300

inside

Contributor

17281

Open Server - HCL for multi queue network cards

17235

inside

Collaborator

17199

SecureXL R80.20 - Issue on ALL High TCP Ports

17199

inside

Employee

17147

Https inspection Validation error

17031

inside

Advisor

16899

Showing logs "Missing OS Route" when place new CP Appliance (Suspect ARP issue)

16899

inside

Advisor

16899

LDAP Authentication failed in SSL VPN

16899

inside

Explorer

16868

Combine VLAN and physical interface, which already has an assigned IP

16844

inside

Collaborator

16835

Report show spam category with "accept" actions but not blocking

16835

inside

Explorer

16778

Delete a specific connection entry in Checkpoint Gateway

16778

inside

MVP Gold

16701

Performance of a single connection ?

16701

Solved

inside

Contributor

16699

Unable to open URL Categorization link

16540

Solved

inside

Contributor

16530

NAT Exhaustion - Hide NAT failures

16530

inside

Participant

16521

Application database update failed

16521

inside

Contributor

16504

syn-ack on every IP address on port tcp_80 during vulnerability scan

16464

Solved

inside

Advisor

16450

CheckPoint TLS 1.3 support: When?

16450

inside

Advisor

16436

What does high si mean on a FW Worker core?

16436

Solved

inside

Participant

16378

Request for VSX training Videos R80.10 or R77.X

16306

Solved

inside

Contributor

16221

upgarde to R80.30 using CPUSE failing

16221

inside

Advisor

16199

Creating multiple VPN site to site connections on CheckPoint

16146

inside

Collaborator

16134

ISP Redundancy & Policy Based Routing

16134

Solved

inside

MVP Gold

16099

R8x - Gateway Performance Metrics

16099

inside

Participant

16032

URL Filtering and Application Control in my R80.20 not dropping categories

16032

inside

Contributor

15999

How to check telnet is enable or not.

15967

inside

Employee

15934

sk164752 - Installing DOOM on Gaia

15934

inside

Contributor

15932

Unable to connect to the checkpoint cloud check dns, gateway, proxy sever.

15932

Solved

inside

Contributor

779

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

779

inside

MVP Gold

4158

'fw ctl conntab -x' issue in R81.10

4158

Solved

inside

Advisor

1311

How to view the connections of the dynamic dispatcher's table

1311

Solved

inside

Collaborator

313

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

313

inside

Explorer

1318

Remote Access Location Awareness - DC Check

761

inside

Explorer

321

A suspicious traffic log was observed during monitoring

321

inside

Admin

5976

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

5976

inside

Explorer

166

I need Check_Point_R81.20_T631_ScalablePlatform

371

inside

Participant

2574

Questions about User Mode and Kernel Mode

2574

inside

Explorer

442

Cannot start Mobile Access Portal Agent

442

inside

Advisor

297

Openserver Dell R660xs, anyone ever tried this machine?

297

inside

Explorer

604

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

938

Solved

inside

Collaborator

27840

Unable to establish the SIC(Outgoing Policy)

242

inside

Employee

852

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

5862

inside

Admin

2641

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

2641

inside

MVP Gold

296

RA clients not able to access external cluster interface

296

inside

Explorer

302

Microsegmentation with Firewall Hardware

302

inside

Explorer

259

the new subnets are unable to communicate through the existing VPN tunnel

259

inside

Participant

412

SMS migration from XCP-NG to ProxMox

412

inside

Advisor

4258

Take logging out of the implied rules

723

inside

MVP Gold

1443

SmartConsole Shortcuts - cheat sheet

1443

inside

Explorer

436

I can't find how my dns host is used within the FW object.

436

inside

Explorer

3876

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

3876

Solved

inside

Explorer

480

BGP route on Maestro Active/Active are showing as inactive/unusable

480

inside

Employee

219

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

219

Solved

inside

Contributor

655

LOM interface - Console Session

655

Solved

inside

Collaborator

614

Reducing /var/log partition size on Gaia OS

614

Solved

inside

Collaborator

12469

https inspection tip/feedback/suggestion

557

inside

Explorer

308

Disable Camelia Cipher on the firewall

308

inside

Collaborator

380

always-connect for standalone vpn client

380

Solved

inside

Collaborator

1045

Policy Installation Failed(Time out)-SMB Appliance

1045

Solved

inside

Admin

2742

New Products Introduction July 2025: Video, Slides, and Q&A

2742

Solved

inside

Advisor

422

Export all gateways IPs MDS + VSX

422

inside

Collaborator

637

Unable to access Site(CPNotEnoughDataForRuleMatch)

637

inside

Employee

310

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

310

Solved

inside

Advisor

2071

Clarification Needed on fwaccel stat

2071

Solved

inside

Explorer

333

How to renew GAIA web certificate.

333

Solved

inside

Advisor

790

Deleting a Checkpoint host object from smart console

323

Solved

inside

Contributor

636

Netflow Export with Physical Ip in cluster environment

152

Solved

inside

Advisor

433

Moving a Gateway from One CMA to Another

433

inside

Explorer

202

Logs not showing up in SmartConsole after policy install

202

inside

Collaborator

2278

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

168

inside

Admin

321

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

321

inside

Collaborator

218

synchronize Identity sharing between the active and passive node

218

Solved

inside

MVP Gold

34860

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

209

Solved

inside

Advisor

324

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

324

Solved

inside

Employee Alumnus

3253

What is the difference between Custom Intelligence feed and Network Feeds ?

3253

inside

Explorer

414

Static Hide Behind Gateway NAT

873

inside

Admin

250

From OT to Cloud: A Security Blueprint for Manufacturers EMEA - Recording

250

inside

Employee

7188

New 3900 Branch office applainces were launched today 28/5

7188

Solved

inside

Contributor

235

telnet showing open port on ILO when its not when going via FW

235

inside

Explorer

500

Allow rule for site hosted on akamai CDN, only the first dns response seems to work

500

Solved

inside

Explorer

413

Identity Awareness Agents SK with direct links - published!

17657

inside

Advisor

272

Fresh Install Without USB, Possible From Boot Menu?

272

Solved

inside

Advisor

372

simple question about ISOmorphic

372

inside

Advisor

173

IPSec tunnel Setup [HUB and SPOKE Scenario] with Both spokes being non-checkpoint VPN Gateway

590

Solved

inside

Advisor

159

At a gateway, how do I determine what domain the gateway belongs to?

587

inside

Advisor

659

Policy location on a gateway R80

7592

Solved

inside

MVP Silver

211

GMSA/automated password rotation for Identity

211

inside

Collaborator

7692

Identity awareness collector changes user identity for same IP while connecting to RDP

7692

inside

Explorer

191

SNMP Issue after JHF 99 R81.20 VSX cluster

191

Solved

inside

MVP Gold

2488

Upgrade is failing from R81.10 to R82

2488

inside

Participant

4266

exclude checkpoint public/external ip from encryption domain?

4266

inside

Collaborator

775

Clarification on DNS Reputation Logs

775

inside

Employee

1318

Quantum Force performance boost is available post the release of R82 Jumbo #3 ( Take 25)

1318

inside

Advisor

561

Cluster Falover after every change on pbr, routing, ospf,...

8509

inside

Explorer

615

Capsule VPN mobile users can't connect

615

inside

Champion

45097

Can I directly search through solr indices using curl like elasticserch?

230

Solved

inside

Contributor

919

lowering mtu on remote access vpn?

919

Solved

inside

Contributor

679

CP21800 (R80.40 Jumbo T211) - reply not from Cluster IP

679

inside

Advisor

572

Is It Safe to Change SecureXL on a Cluster?

572

inside

Employee

284

Meet Your New Assistant: Infinity AI Copilot - video and materials

8094

inside

Collaborator

493

portal certificate can not upload file

493

Solved

inside

Collaborator

6067

BSI Common Criteria EAL4+ R82 Version + Jumbo Hotfix

425

inside

Employee

285

Security Engineer Eyes Only - Behind the Miercom Results

285

Solved

inside

Explorer

2057

Firewall-Blades Order of Operation

2057

inside

Participant

568

Hack Like a Pro: Break Into a Server Using the Kill Chain - Americas Recording

197

inside

Admin

248

Hack Like a Pro: Break Into a Server Using the Kill Chain - EMEA recording

248

inside

MVP Silver

440

Thales Mandatory Security Update - STA RADIUS Server to Enforce Message-Authenticator by July 31, 20

440

inside

Employee

1197

Upgrading Gateway to R82 while MDS on R81.20

466

inside

MVP Silver

944

Trellix application not available in App objects

1227

Solved

inside

Explorer

1201

Upgrading Gateway 9100 to R82 via blink package

1201

Solved

inside

MVP Gold

365

Any idea when https inspection policy rules hit count will be available?

365

inside

Admin

1121

CPX 2025 Recap with Surprise Guest Veriti: Video and Slides

1121

inside

Advisor

3301

Traffic dropped only in clean-up rule??

3301

Solved

inside

Employee

17355

Tip of the week: Support Center's Upgrade Wizard

17355

Solved

inside

Collaborator

1731

route based VPN requires VPN domain

1731

inside

Explorer

438

Security Group name dinamec change

438

Solved

inside

Collaborator

1448

VPN gateway random UDP traffic to CP peers?

5793

Solved

inside

Advisor

12350

how to disable SecureXL for specific src to specific dst

12350

inside

Advisor

1374

policy installation mode - set permanently

645

Solved

inside

Advisor

732

Safe to delete /var/log/CPda/repository?

732

Solved

inside

Participant

911

Application filter based on risk - do not include URL...

461

Solved

inside

Advisor

384

SIC Failure when creating new virtual systems in VSX

430

inside

Admin

242

Building a Scalable Cybersecurity Skill Development Program: 4 Strategies for Success - AMER Video

242

inside

Admin

184

Building a Scalable Cybersecurity Skill Development Program: 4 Strategies for Success - EMEA Video

184

inside

Advisor

254

MAS Tunnel Down After Cluster update

254

Solved

inside

Advisor

1339

URL Filtering Not Blocking Some Categorized Sites

1339

Solved

inside

Advisor

1347

SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS

734

inside

Admin

465

ATAM 360°: Elevate Your Cybersecurity Strategy with Proactive Services - Materials

465

inside

Admin

429

Spotlight on AI-Powered Cyber Security Platform Assessment 2025, Americas: Video and Slides

429

inside

Admin

2146

Spotlight on AI-Powered Cyber Security Platform Assessment 2025, EMEA - Materials

2146

inside

Advisor

425

Change to Global Properties – Session Timeout Settings

1364

Solved

inside

Advisor

1389

No SFTP any longer only Aspera in Service Requests

1449

inside

Explorer

321

Threat Emulation error | Autonomous Threat Prevention Policy

1159

inside

Advisor

851

How to change the state of a cluster XL member using CLI commands

889

Solved

inside

Participant

303

Application Control/URL Filtering request instructions

303

inside

Explorer

436

OpenSSH Vulnerability detection

3444

Solved

inside

Contributor

656

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

Tue 07 Oct 2025 @ 10:00 AM (CEST)

Cloud Architect Series: AI-Powered API Security with CloudGuard WAF

In-Person

Wed 08 Oct 2025 @ 09:00 AM (EDT)

Washington DC: Hands-On CloudGuard Workshops

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

In-Person

Mon 13 Oct 2025 @ 08:00 AM (CEST)

Madrid: Hands-On CloudGuard Workshops

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

Virtual

Wed 22 Oct 2025 @ 11:00 AM (EDT)

Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents Outages

Virtual

Thu 23 Oct 2025 @ 03:00 PM (CEST)

EMEA Deep Dive: Troubleshooting 101

Virtual

Wed 29 Oct 2025 @ 03:00 PM (CET)

EMEA Deep Dive: Maestro Best Practices

Virtual

Wed 29 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Maestro Best Practices

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

In-Person

Wed 08 Oct 2025 @ 09:00 AM (EDT)

Washington DC: Hands-On CloudGuard Workshops

In-Person

Mon 13 Oct 2025 @ 08:00 AM (CEST)

Madrid: Hands-On CloudGuard Workshops

In-Person

Tue 14 Oct 2025 @ 10:00 AM (CEST)

CheckMates Austria Road Show - CheckMates Live Graz

In-Person

Wed 15 Oct 2025 @ 09:00 AM (EDT)

Atlanta, GA: Hands-on CloudGuard Workshops

In-Person

Wed 22 Oct 2025 @ 09:00 AM (EDT)

Tampa, FL: Hands-on CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?