General Topics

CheckMates Fest 2026
Join the Celebration!

AI Security Masters
E1: How AI is Reshaping Our World

MVP 2026: Submissions
Are Now Open!

More details here

What's New in R82.10?

Watch Now

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
R82.10 and Rationalizing Multi Vendor Security Policies

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Participant

26914

Issue connecting to the management server via smart console

26914

inside

Participant

26900

site to site VPN troubleshooting without monitoring blade

26900

inside

Contributor

26599

Configuring CLuster XL step by step

26400

Solved

inside

Collaborator

26300

SecureXL is enabled, but the traffic is not accelerated

26299

inside

Advisor

26198

R81 - SNMP does not support SHA1 anymore

25500

Solved

inside

Collaborator

25499

ICMP reply does not match a previous request

25499

Solved

inside

Contributor

25499

High CPU after upgrade from 77.30 to 80.10

25499

inside

Explorer

25399

Stealth rule vs Management Rule

24740

inside

Contributor

24700

Can't access SmartConsole ("Unable to connect to server") but can access WebUI...

24499

Solved

inside

Participant

24299

FW-1: [cul_load_freeze][CUL - Cluster] CUL should be OFF...

24299

inside

Collaborator

24199

How can I find Throughput statistics?

24099

inside

Contributor

23900

R80.10 gateway, can't set sim_clamp_vpn_mss

23900

Solved

inside

Participant

23799

What's different meaning of Redirect, Detect, Drop, Block and Prevent?

23799

inside

Contributor

23599

Aruba Clear Pass Integration - API

23197

Solved

inside

Collaborator

23099

Update R80.20+ Security Gateway Architecture (Logical Packet Flow)

22799

inside

Participant

22799

Get all the Gaia version and installed jumb hotfix

22799

inside

MVP Platinum

22791

R80.40 - Dynamic split of CoreXL

22791

inside

Participant

22599

Best practise - How often do you patch/upgrade your gateways?

22499

Solved

inside

Collaborator

22402

Dedicated routing table of Mgmt Port Require In checkpoint which is not available in present device

22402

inside

Collaborator

22400

How to get interface status of particular time slot

22400

inside

Participant

22399

HTTPS inspection with trusted certificate

22399

inside

Admin

22300

R77.30 Take 286: New Jumbo Hotfix GA Release

22300

inside

MVP Platinum

22300

Check Point Site-to-Site VPN Compatibility Matrix

22300

Solved

inside

Collaborator

22299

How to handle core-dumps and crash dumps

22299

Solved

inside

Contributor

22199

CheckPoint redirect to IP address 62.0.58.94

21799

inside

Explorer

21699

how to check VPN phase 1 and phase 2 status?

21699

inside

Advisor

21600

Outbound SSL Inspection: A war story

21600

inside

Contributor

21599

Monitoring standby member in a cluster

21599

inside

Contributor

21500

Discovering changes in topology table

21500

inside

Contributor

21499

R80.40 IPSEC VPN shows stuck at Phase I but is fully operational

21499

inside

MVP Gold

21399

"Max Power" Book Second Edition Released!

21399

inside

Participant

21299

Both security gateways are active in the Full HA cluster

21299

inside

Admin

21200

Security Gateway Performance Optimization Excerpt

21200

Solved

inside

Contributor

21199

Finding root cause for all the F2F traffic

21199

inside

Explorer

21112

Policy Based Routing and default route / features

21112

inside

Champion

21100

logical interface as next hop for routes on cluster members that DO NOT use VIPs in different subnet

21100

Solved

inside

Explorer

20799

How to check ThreatCloud URL Reputation?

20799

Solved

inside

Advisor

20799

RSS feed for checkpoint.com is not working any more

20799

Solved

inside

Advisor

20799

How to see what firewall rules match some traffic

20799

inside

MVP Platinum

20798

HP Server DL360/380 G9 reboot issue!

20798

inside

Advisor

20699

Remote Access VPN in a Load-sharing Cluster Environment

20499

Solved

inside

Collaborator

20299

DNS Resolution failing but ping to IP address is succesful.

20299

inside

Advisor

20103

Problem IP Sec VPN Checkpoint > Juniper no response from peer. IKE failuret

20099

inside

Participant

20000

Which version is better? R80.10 or R77.30

19999

inside

Participant

19999

Site-to-site vpn Tunnel to a non Checkpoint Gateway

19999

inside

Contributor

19899

static NAT vs hide behind an IP

19899

inside

Collaborator

19899

Gaia Portal shows blank page after log in with Firefox 5x or Chrome 66 - Fixed in sk121373

19899

inside

Admin

19899

R80.30 Early Availability Program is started!

19899

inside

MVP Platinum

19802

Check Point Support Resources - Top 10

19802

inside

Explorer

19800

Packets from IPSec tunnel were dropped. It seems there is an issue on the coreXL connections table

19800

Solved

inside

Advisor

19800

Hide NAT: Simultaneous Connections to the same destination

19800

inside

Admin

19799

All Products and Where To Post About Them

19799

Solved

inside

Contributor

19797

Upgrading form R81.10 to R81.20

19700

inside

Champion

19500

Configuring dynamic routing in clustered VSX

19500

Solved

inside

Contributor

19495

How to list arp table and identify network devices with mac under Check Point FWs

19495

inside

Admin

19400

R80.30 Technical Update TechTalk

19400

inside

Admin

19400

Types of NAT used in checkpoint firewall

19399

Solved

inside

Contributor

19399

How to show the active connection to a specific host

19399

Solved

inside

Champion

19399

Gateway behind NAT. What limitations am I to be aware of?

19399

inside

Collaborator

19298

Let's create Check Point Super Cheat Sheet

19298

inside

Contributor

19200

Disable NAT on SIP payload - breaks ICE

19197

inside

Contributor

19100

How can I setup a primary and backup S2S VPN tunnels

19100

Solved

inside

MVP Gold

19099

Checkpoint 5600 - Alternative Virtual Appliance options for on premise deployment?

19037

inside

Participant

19000

IPSec Tunnel Failing to establish

19000

Solved

inside

MVP Platinum

19000

Increasing Fifo Buffers on Firewall Interface

18999

inside

Collaborator

18999

Pulling FW data fron MDS using a script.

18999

Solved

inside

Collaborator

18999

Blocking for specific file types in Check Point Firewall

18999

inside

Admin

18999

TechTalk Special Edition: The Apache log4j Vulnerability Explained

18999

Solved

inside

MVP Platinum

18899

R80.20 Issue : Monitoring standby cluster members via VPN

18899

Solved

inside

Contributor

18898

JHF 317 breaking sync connection and not coming back up

18865

Solved

inside

Participant

18800

R80.20 strange behaviour - random TCP session timeout values - fw ctl conntab

18800

Solved

inside

Employee

18800

Tip of the week: Support Center's Upgrade Wizard

18800

inside

Participant

18799

Can you explain the impact of using fwstop and cpstop ?

18799

inside

Advisor

18699

Check Point Clustering between two Datacenters

18699

inside

Participant

18599

syn-ack on every IP address on port tcp_80 during vulnerability scan

18599

inside

Employee

18500

Identity Awareness Agents SK with direct links - published!

18500

inside

Mentor

18446

101

"UDP checksum is incorrect" - 100s of IPv6 DROPs in fw.log - TP/IPS responsible?

18446

101

inside

Champion

18400

Identity Awareness getting DC Name only

18400

Solved

inside

Contributor

18399

Custom URL matching with HTTPS categorization

18399

inside

Explorer

18399

ISP Redundancy (load sharing) issue in R80.10

18399

inside

Advisor

18399

Activating Identity Awareness to Intergrate AD

18399

inside

Explorer

18201

Verify Enabled Cipher Suites in HTTPS Inspection

18201

inside

Explorer

18199

Https inspection Validation error

18198

inside

Explorer

18100

What is route and how to configure route?

18100

Solved

inside

Participant

18099

Check Point Support Tools - Top 10

17999

inside

Collaborator

17999

SecureXL R80.20 - Issue on ALL High TCP Ports

17999

inside

Contributor

17999

Do any Checkpoint appliances offer SSL offload?

17999

inside

Advisor

17999

Stateful Inspection on Gateways

17999

inside

Collaborator

17903

Check Point Deployment Shell internal error

17903

inside

Participant

17899

Untrusted TLS/SSL server X.509 certificate

17899

inside

MVP Platinum

17799

Open Server - HCL for multi queue network cards

17799

Solved

inside

Contributor

17700

Report show spam category with "accept" actions but not blocking

17699

inside

Participant

17685

Physical memory vs FW memory. Explanation needed!

17685

Solved

inside

Participant

17599

Domain object is not working in R80.10 properly

17599

Solved

inside

Advisor

17499

CheckPoint TLS 1.3 support: When?

17499

inside

Advisor

17400

What does high si mean on a FW Worker core?

17400

inside

Employee

17400

Combine VLAN and physical interface, which already has an assigned IP

17399

inside

Admin

17399

upgarde to R80.30 using CPUSE failing

17396

inside

Explorer

17299

LDAP Authentication failed in SSL VPN

17298

inside

Advisor

17210

Showing logs "Missing OS Route" when place new CP Appliance (Suspect ARP issue)

17210

inside

Participant

17199

Application database update failed

17099

inside

MVP Gold

17099

Performance of a single connection ?

17099

inside

Participant

17095

Best Practices for Identity Collector Architecture

17095

inside

Explorer

17011

Delete a specific connection entry in Checkpoint Gateway

17011

Solved

inside

Contributor

17000

NAT Exhaustion - Hide NAT failures

17000

Solved

inside

Advisor

16999

Custom Intelligence Feed Exceptions Not Working

16999

Solved

inside

Participant

16900

Announcement: Check Point R81.20 - Recommended Release

16900

inside

Advisor

16899

URL Filtering and Application Control in my R80.20 not dropping categories

16899

inside

Employee

16800

sk164752 - Installing DOOM on Gaia

16800

inside

Participant

16799

Request for VSX training Videos R80.10 or R77.X

16799

Solved

inside

MVP Platinum

16799

R8x - Gateway Performance Metrics

16799

inside

MVP Platinum

378

Tips and Tricks 2025 #12 - Check Point PRO Support Overview & Update

147

Solved

inside

Contributor

743

Are Logs Still Visible If Only the index File Remains?

353

Solved

inside

Participant

55723

Best way to whitelist KnowBe4 Phishing domains?

55723

inside

MVP Platinum

557

Special functions via policy - name field

557

Solved

inside

Collaborator

595

Using Identity Awareness Collector with Cisco FTD Syslogging

595

inside

Participant

536

Firewall is freezing/crashing randomly after upgrade to R82

536

inside

Participant

555

How to allow redirects on Cloudflare

555

inside

Explorer

291

R82 http proxy and dns proxy forwarding domains not working

291

inside

Admin

997

BRICKSTORM: A Stealthy Espionage Campaign Targeting Enterprise Infrastructure (sk184082)

997

inside

MVP Gold

2946

Ongoing issue: high CPU load fw_workers + rad

2946

inside

Advisor

417

How to safely reuse an existing cluster

417

inside

Contributor

487

Policy installation fails with "Error code 2000025" and sk177710

487

inside

Explorer

679

Threat Emulation update failed

679

inside

Advisor

3855

unable to ssh to device after JHF upgrade

3855

Solved

inside

Advisor

908

Difference Between Configuring Proxy on Firewall CLI vs Cluster Object in SmartConsole

908

Solved

inside

Participant

2703

Proxy HTTP/HTTPS - two sessions

2703

Solved

inside

MVP Silver

604

What should be the settings for ingesting logs in SIEM for self managed spark devices

240

Solved

inside

Explorer

1013

Unable to remote save snapshot via SCP.

1013

inside

Advisor

2118

forklifting 5xxx appliances -> 9100 UPPAK observations

2118

inside

Advisor

284

ISP redundancy and VPNs to azure

284

Solved

inside

MVP Platinum

225

An idea from customer about web UI jumbo hotfix install

225

Solved

inside

Collaborator

1459

HTTPS inspection - Create a CSR for an external CA to use for the outbound certificate

1459

inside

Employee

1274

Jumbo Hotfix Accumulator for Quantum Force 3900 Appliances take #22 has been released today

1274

Solved

inside

Contributor

739

Migrate eth interface to a VLAN interface in bond

739

Solved

inside

Participant

741

Strange BGP announcement of a /31 network as /32

741

Solved

inside

Advisor

621

Clarification on “Check Point 6200P” Model

621

Solved

inside

Explorer

536

Memory cache usage on 16200 appliance – expected behavior?

1249

inside

Employee

8791

Announcement: Check Point R82 - Recommended Release

8791

inside

Advisor

290

Global Policy Package - Skip/Goes to Domain Layer action

290

Solved

inside

Collaborator

1092

Question About Default Threat Prevention Profiles

260

Solved

inside

Advisor

406

R81.20 Global Properties Stateful Inspection default settings

406

inside

MVP Silver

688

Common Criteria for Harmony Endpoint Security with compliance to 2 NIAP Protection Profiles

1164

Solved

inside

Admin

9927

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

9927

Solved

inside

Contributor

422

Single VSY within VSX environment wont send logs to dedicated log server

422

inside

Champion

19551

Configuring dynamic routing in clustered VSX

19551

inside

Collaborator

908

Failed login SmartConsole after upgrade Win11

908

Solved

inside

Advisor

1286

Tip: How to deal with RAD errors

898

inside

Explorer

380

Server Error in '/owa' Application

380

inside

Contributor

3720

VPN issue stuck in Phase 1 and sometimes disconnects

3720

Solved

inside

MVP Gold

556

new transciever CPAC-TR-25SR-DM

372

inside

MVP Gold

343

UPDATE - DigiCert Certificate Expiration Mitigated

4162

inside

Advisor

488

idrac - how to create account with admin role

488

inside

Employee

3512

Introducing the New Interactive Ideas Portal – Join the Pilot!

3512

inside

Contributor

1588

Process file types known to contain malware

1588

Solved

inside

Participant

33162

useful debug command in checkpoint

33162

inside

Contributor

560

Route Based VPN Network SA no route

560

inside

MVP Gold

392

Can not access smart console over site-site VPN

392

Solved

inside

Explorer

301

External Certificates for IPSEC VPN

301

inside

Advisor

423

Rewriting internet access policy

423

Solved

inside

Participant

4266

Site to site vpn drops on policy install

4266

inside

Contributor

325

Customer FTP traffic keeps triggering new IPS protections

325

inside

Collaborator

4022

Trusted CA List is missing a lot

4022

inside

Advisor

752

Install Policy pushed but still visible by other admin

236

Solved

inside

Advisor

1154

CPUSE v2606 manual installation failure

888

inside

Employee

263

R82 Jumbo Hotfix Accumulator take 39 has been released

263

inside

Advisor

775

Best Way to Export Policy Package for Reporting

775

Solved

inside

Advisor

2081

Regenerate Token for MaaS Tunnel

2081

inside

Collaborator

440

a third-party certificate on a clustered and centrally managed Appliance 1900

264

Solved

inside

Participant

469

Checkpoint 19000 Supported Transceivers Sync

469

Solved

inside

MVP Gold

668

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

668

inside

Explorer

388

Testing primary and secondary bond interfaces

388

Solved

inside

Participant

518

Best Practices for Threat Prevention API Calls to Appliance - API repository

518

inside

Advisor

295

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

295

Solved

inside

Collaborator

532

What are the new NAT options in SMS and GW for?

532

Solved

inside

Contributor

3831

Traffic initiated from Lan to VPN Endpoint Client Blocked

1292

inside

Participant

1398

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

1398

Solved

inside

Advisor

4547

Quantum Force 9000 Appliance OS version Compatibility

630

inside

MVP Platinum

574

Help Shape the Future of AI at Check Point

346

inside

Collaborator

1558

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

1558

Solved

inside

Collaborator

1284

Firewall - Automating Firewall Rule Cleanup Based on Usage

1284

inside

Employee

1459

CVE-2025-45582 - tar: Tar path traversal

1662

Solved

inside

Advisor

433

Peer certificate verification failed after certificate replacement

433

Solved

inside

Contributor

19533

How to list arp table and identify network devices with mac under Check Point FWs

19533

Solved

inside

Explorer

893

Remote Access VPN – Can specific routes be assigned to particular users?

893

inside

MVP Platinum

1373

R8x - Performance Tuning Tip - Appliance Sizing

1373

inside

Participant

4009

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

1724

Solved

inside

Contributor

664

add rule to policy via mgmt_Cli fails

664

inside

Explorer

349

Behaviour after regular contract/subscription expiration

464

Solved

inside

Advisor

808

Log file isn't shown automatically after upgrade to R82

808

Solved

inside

Explorer

614

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

614

Solved

inside

Explorer

1674

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

1674

inside

Participant

907

7000 appliance R81.20 iSO image install

907

inside

Explorer

240

Unable to take ssh for MGMT Port

240

Solved

inside

Advisor

503

Updatable (geo) objects and IP addresses, again

503

Solved

inside

Advisor

1005

Renaming a Gateway Node in a Cluster

1005

Solved

inside

Advisor

591

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

591

inside

MVP Platinum

395

R82.10 - Hardware Security Module (HSM) for TLS 1.3

395

Solved

inside

Advisor

3311

How do you keep track of the latest FW/OS updates?

3311

Solved

inside

Advisor

2359

Manual FTP transfers are always corrupted while scheduled backups are not

763

inside

Employee

249

Estimated R82 release recommended date?

4414

inside

Collaborator

4122

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

4122

Solved

inside

Explorer

482

Monitord process consume high cpu, does it safe to terminate the process during production hour?

482

inside

Collaborator

1034

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

1246

Solved

inside

Contributor

1252

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

1252

inside

MVP Platinum

4638

'fw ctl conntab -x' issue in R81.10

4638

Solved

inside

Advisor

1459

How to view the connections of the dynamic dispatcher's table

1459

Solved

inside

Collaborator

518

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

518

inside

Explorer

2208

A suspicious traffic log was observed during monitoring

480

inside

Admin

7217

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

7217

inside

Explorer

283

I need Check_Point_R81.20_T631_ScalablePlatform

642

inside

Participant

3792

Questions about User Mode and Kernel Mode

3792

inside

Explorer

871

Cannot start Mobile Access Portal Agent

871

inside

Advisor

455

Openserver Dell R660xs, anyone ever tried this machine?

455

inside

Explorer

1058

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

2170

Solved

inside

Collaborator

28917

Unable to establish the SIC(Outgoing Policy)

393

inside

Employee

1036

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

7270

inside

Admin

3074

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

3074

inside

MVP Gold

472

RA clients not able to access external cluster interface

472

inside

Explorer

485

Microsegmentation with Firewall Hardware

485

inside

Explorer

473

the new subnets are unable to communicate through the existing VPN tunnel

473

inside

Participant

804

SMS migration from XCP-NG to ProxMox

804

inside

Advisor

4587

Take logging out of the implied rules

1087

inside

MVP Platinum

1949

SmartConsole Shortcuts - cheat sheet

1949

inside

Explorer

701

I can't find how my dns host is used within the FW object.

701

inside

Explorer

4386

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

4386

Solved

inside

Explorer

773

BGP route on Maestro Active/Active are showing as inactive/unusable

773

inside

Employee

391

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

391

Solved

inside

Contributor

1077

LOM interface - Console Session

1077

Solved

inside

Collaborator

1046

Reducing /var/log partition size on Gaia OS

1046

Solved

inside

Collaborator

14702

https inspection tip/feedback/suggestion

856

inside

Explorer

456

Disable Camelia Cipher on the firewall

456

inside

Collaborator

626

always-connect for standalone vpn client

626

Solved

inside

Collaborator

1574

Policy Installation Failed(Time out)-SMB Appliance

1574

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 08 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 1: How AI is Reshaping Our World

Virtual

Fri 09 Jan 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 42: Looking back & forward

Wed 14 Jan 2026 @ 05:00 PM (CET)

CheckMates Fest 2026

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Thu 12 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 3: Exposing AI Vulnerabilities: CP<R> Latest Security Findings

Virtual

Thu 26 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 4: Powering Prevention: The AI Driving Check Point’s ThreatCloud

Virtual

Thu 08 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 1: How AI is Reshaping Our World

Virtual

Fri 09 Jan 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 42: Looking back & forward

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Virtual

Thu 26 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 4: Powering Prevention: The AI Driving Check Point’s ThreatCloud

CheckMates Events

Are you a member of CheckMates?