General Topics

Step Into the Future of
AI-Powered Cyber Security

When the Agents Attack
A Live Look at Agentic Exposure Validation

Bridge the CAASM Gap
with Exposure Management

Watch Here

AI Security Masters E8:
Claude Mythos: New Era in Cyber Security

Watch Now!

CheckMates Go:
CheckMates Fest

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Collaborator

18899

Do any Checkpoint appliances offer SSL offload?

18808

inside

Employee

18800

sk164752 - Installing DOOM on Gaia

18800

inside

Participant

18799

Combine VLAN and physical interface, which already has an assigned IP

18799

inside

Participant

18749

Untrusted TLS/SSL server X.509 certificate

18749

inside

Participant

18700

URL Filtering and Application Control in my R80.20 not dropping categories

18700

Solved

inside

Collaborator

18699

Check Point Deployment Shell internal error

18601

inside

MVP Diamond

18504

R81 is now available (Questions and Answers)

18504

inside

Contributor

18499

Application database update failed

18404

Solved

inside

MVP Diamond

18399

R8x - Gateway Performance Metrics

18399

inside

Participant

18399

Unable to ping from checkpoint gateway ip to gns3 router and vice versa

18300

inside

Collaborator

18300

Unable to connect to the checkpoint cloud check dns, gateway, proxy sever.

18262

inside

Explorer

18104

Showing logs "Missing OS Route" when place new CP Appliance (Suspect ARP issue)

18099

inside

Participant

18099

LDAP Authentication failed in SSL VPN

18099

Solved

inside

Participant

18099

R80.x Performance Tuning Tip - BIOS

18094

inside

Explorer

18036

Domain object is not working in R80.10 properly

18036

Solved

inside

Contributor

18031

NAT Exhaustion - Hide NAT failures

18031

inside

Employee

18000

Performance of a single connection ?

17999

inside

Advisor

17999

Is there any way to check fiber interface status?

17699

Solved

inside

Collaborator

17699

JAVA processes are very CPU intensive

17699

inside

Participant

17699

Request for VSX training Videos R80.10 or R77.X

17699

inside

Collaborator

17699

ISP Redundancy & Policy Based Routing

17699

inside

Contributor

17669

Delete a specific connection entry in Checkpoint Gateway

17599

inside

Champion

17595

Announcement – Check Point Firewall Administration R81.10+ book update

17595

Solved

inside

Contributor

17587

How to allow specific youtube video categories?

17587

inside

Contributor

17537

How to check telnet is enable or not.

17399

Solved

inside

Contributor

17398

R81.10 to R81.20 upgrade failing

17398

Solved

inside

MVP Diamond

17398

Meaning of "R" in firewall name?

17398

Solved

inside

Advisor

17392

VPN1-Edge | SBXW-166LHGE-4 - compatible software

17392

inside

Participant

17249

Tunnel mode VPN and Transport mode VPN

17249

inside

Participant

17101

Getting error “dropped by fwpslglue_chain Reason: PSL Drop: internal - streaming;"

17101

inside

Collaborator

17100

RX-DRP/rx_missed_errors on Interface

17100

inside

Explorer

17099

Creating multiple VPN site to site connections on CheckPoint

17099

inside

Contributor

17099

What does Sticky Decision Function DO?

17099

Solved

inside

Contributor

17099

SmartEvent - Error (CPSEMD not running)

17099

Solved

inside

Collaborator

17054

Unable to open URL Categorization link

17054

Solved

inside

Contributor

17000

High CPU utilization causing slowness

16999

Solved

inside

Contributor

16999

ISOmorphic Tools bootable flash creation for R80.40

16999

inside

Explorer

16999

can I export the list of web application categories

16999

inside

Participant

16999

Route Based VPN with Azure in Cluster Environment

16999

inside

Employee

16998

User-Space firewall support for R80.30 3.10 and above

16998

Solved

inside

Employee Alumnus

16998

Share your feedback for your chance to WIN new Apple AirPods Pro!

16998

inside

Contributor

16937

failover logic operation in VSX?

16936

inside

Collaborator

16900

Permit ICMP request only in several networks

16900

Solved

inside

Contributor

16900

Vulnerability-ssl-weak-message-authentication-code-algorithms for Port 8211

16900

inside

MVP Silver

16898

Setting Up Site-to-Site VPN to 3rd Party Gateway

16799

Solved

inside

Contributor

16799

How can I monitor BGP state using SNMP?

16799

Solved

inside

Explorer

16699

DNS problems possibly due to firewall issue

16699

Solved

inside

Contributor

16601

Quick mode Received Notification from Peer: invalid id information

16601

inside

Contributor

16599

Microsoft Activation negatively impacted by HTTPS Inspection

16599

inside

Contributor

16501

ClusterXl synchronization network bandwidth

16501

Solved

inside

Collaborator

16499

What is SNMP OID for CP FW number of new connections?

16499

inside

Explorer

16443

Site-to-Site VPN connection issue with CISCO ASA

16443

inside

Contributor

16400

Installation failed. Reason: Load on Module failed - failed to load security policy

16399

inside

Advisor

16306

How to create QoS rule to limit bandwith per user

16299

Solved

inside

Advisor

16299

Bandwidth limit per app /category

16209

Solved

inside

Admin

16199

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

16199

inside

Advisor

16199

Application Control can not catch Opera web browser VPN

16199

inside

Contributor

16141

Question on traffic handling between Kernel Mode FW and Usermode FW

16099

Solved

inside

MVP Gold CHKP

16099

First impressions R80.30 on gateway - one step forward one (or two back)

16099

Solved

inside

Contributor

16099

Ipsec VPN b/w checkpoint cluster and Azure gateway

16099

inside

Contributor

16090

R80.10 - VPND process utilizes a large amount of CPU

16090

inside

MVP Silver

16079

Management problem with GAIA OS

16079

Solved

inside

MVP Gold

16010

Encryption domain mismatch even though its set it up correctly

16010

inside

Participant

15999

fw_full process consumes 100% CPU

15999

inside

MVP Silver

15999

R80.x - Performance Tuning Tip - Management Data Plane Separation

15899

Solved

inside

Participant

15899

CoreXL option disabled in cpconfig

15899

inside

Employee

15899

New 3900 Branch office applainces were launched today 28/5

15899

Solved

inside

Admin

15806

Hacking DNS TechTalk: Video, Slides, and Q&A

15806

Solved

inside

Collaborator

15801

What different for Content Awareness and Data Loss Prevention blade

15801

Solved

inside

Contributor

15799

Problem with VPN AMAZON(AWS) CHECK POINT

15705

Solved

inside

Participant

15600

Checkpoint firewall logging source interface

15600

inside

Explorer

15600

Abnormality in pattern matching of APP CONTRL BLADE

15600

inside

Contributor

15599

Route Based VPN on one side and Domain Based VPN on other

15599

inside

Contributor

15599

High Memory after Install 110Take

15599

inside

Collaborator

15599

r80.10 all-in-one evaluation license activation?

15500

inside

Participant

15500

Connection rematch after policy installation

15499

Solved

inside

Advisor

15499

Basic commands used in checkpoint for troubleshooting and the features?

15413

inside

Advisor

15405

Slowness when Accessing HTTP traffic over Remote Access VPN

15405

Solved

inside

Collaborator

15400

R80.20 - SYN Defender on SecureXL Level

15317

inside

MVP Gold CHKP

15299

Security Gateway Performance Optimization - VSX

15299

inside

Contributor

15299

Firewall priority queues setting

15299

Solved

inside

Advisor

15298

Is Check Point Gaia vulnerable towards this new cve-2024-6387 in OpenSSH?

15298

Solved

inside

Contributor

15297

How to Prepare a lab for checkpoint using vmware

15297

inside

Admin

15199

fw ctl zdebug - this is wrong...

15199

Solved

inside

MVP Silver

15101

https Traffic Dropped ... due to Out of sequence TCP packet retransmission. Stripping all packet dat

15099

inside

Collaborator

15079

Manually define local VPN Domain per remote peer

15079

Solved

inside

Explorer

15009

Check Point Security Gateway as HTTP/HTTPS Proxy

15009

Solved

inside

Contributor

15000

Local backup issue /var/log is full

15000

inside

MVP Diamond

15000

Check Point configuration mistakes - Top 10

15000

Solved

inside

Contributor

14999

Change Management IP addresses in Cluster

14999

inside

Participant

14999

Does 4600 Appliances supports upgrade to R80.20?

14999

Solved

inside

Collaborator

14999

Failed to connect to SMTP server - smtp Traffic Rejected

14999

inside

Admin

14900

New updatable object for HTTPS Inspection: HTTPS Services Bypass

14900

inside

Explorer

14900

Zoom Meeting Issues with SecureXL

14900

Solved

inside

Contributor

14900

GAIA WebUi Failed to receive updates from Check Point Download Center. Please verify a valid license

14900

inside

Collaborator

14900

HTTPS inspection in R77.30 and R80.10 with various combinations of proxy and probe bypass

14900

Solved

inside

Advisor

14899

how to disable SecureXL for specific src to specific dst

14899

inside

Admin

14899

R80.20 has recommended status now!

14899

inside

Participant

14899

ICMP is sometimes drop when send via IPSec Tunnel

14899

inside

Contributor

14899

RFID token authentication with R81+ Raspberry Pi

14899

Solved

inside

Collaborator

14897

Disable SecureXL permanent R80.20

14897

inside

Employee Alumnus

14844

VPN tunnel with Dynamic IP address.

14844

inside

Advisor

14800

ONELINER - Check CVE-2024-24919 Vulnerability

14799

inside

Participant

14799

Issue with Checkpoint Identity Agent

14799

Solved

inside

Explorer

14799

Having trouble connecting to Check Point 1430/1450

14718

inside

MVP

14700

Exporting Objects/Groups in R77.30

14700

Solved

inside

Participant

14699

Security Policy Management without SmartConsole

14699

inside

Contributor

14613

R80 CCSA/CCSE training material and exams

14610

inside

Advisor

14600

CoreXL: only one SND core is busy

14599

Solved

inside

Contributor

14599

NMAP Shows Ports 5060 & 2000 Open

14599

inside

Contributor

14599

The license it is impossible to detach it in smartupdate

14599

inside

Admin

14564

Update appliance 1490 os R77.20.70 to R77.30 or R80?

14554

inside

Collaborator

14518

No authentication for port 18231 Policy Server Login (old)

14518

Solved

inside

Advisor

14500

Zero Downtime Upgrade - R80.10 - R80.40

14500

inside

Contributor

14499

Deploying Check Point Solution R80.40

14499

Solved

inside

Contributor

14499

Is CP planning to support Load-Sharing in future releases?

14499

inside

MVP

14499

Reg: policy installation failed on gateway

14496

Solved

inside

Contributor

14412

Duplicate services - which will be used?

14412

Solved

inside

Contributor

14400

Issues with Identity Awareness - some users are not seen and some traffic is incorrectly marked

14399

inside

Admin

14399

White Paper - How to Batch Categorize URLs

14399

Solved

inside

Participant

14399

Smartconsole cant connect to firewall in GNS3

14399

inside

Contributor

14329

Command to show history of ClusterXL member status

14329

inside

Collaborator

14314

getting certificate error when trying to connect to a site

14314

Solved

inside

Collaborator

14299

Domain objects (FQDN mode) vs Custom Applications/Sites

14299

inside

Collaborator

14298

Domain objects in R80.10 spamming DNS

14207

inside

Admin

14204

White Paper - URL Filtering Best Practices for the Large Scale Deployment

14204

inside

Participant

14200

6800 stability Issue - R80.10 w\/Take 203 or R80.20 w/ Take 74

14199

Solved

inside

MVP Gold

14199

Printernightmare CVE-2021-1675

14199

Solved

inside

Contributor

14147

Production cluster upgrade R77.30 to R80.10

14112

inside

Contributor

14100

How to Block TOR NODE is Checkpoint Firewall R80.30 Version

14100

Solved

inside

Collaborator

14099

interaction between VRRP and CXL - why is there a tickbox for ClusterXL when the cluster is VRRP

14099

inside

Contributor

14099

can ping internet but unable to browse

14099

Solved

inside

Explorer

14099

SPLAT R75.40 - disable TCP / ICMP timestamp

14099

inside

Admin

14032

Infinity R80.10 "Cool Feature of the Day" - Content Awareness

14032

inside

MVP Diamond

14028

R80.10: New Jumbo Hotfix (Take 154) GA-Release

14028

inside

Advisor

14028

R77.30: New Jumbo Hotfix (Take 338) GA-Release

14026

inside

Contributor

14019

WSDNSD high cpu + Strange messages

14019

Solved

inside

Contributor

14000

Error installation CP VPN E80.92

13999

inside

Contributor

13999

How does Domain Management Server (CMA) get to the internet?

13999

inside

Explorer

13999

need checkpoint document that has details of all field that are in logs

13904

inside

Employee

13900

Reminder for R80.20/30 End-of-Support on 30/9/2022

13900

inside

Participant

13899

What is the practical example to use Bridged Mode?

13899

inside

Advisor

13821

Custom Application Site url substring wildcard

13799

inside

Participant

13799

Identity Awareness issue - User identified but the rule is not matching

13799

inside

MVP Diamond

13792

Switch or Cable between ClusterXL members for the sync network?

13792

inside

MVP Diamond

13699

R80.x - Performance Tuning Tip - Control SecureXL / CoreXL Paths

13699

inside

Contributor

13599

why 3000 series CPU core higher than 5000 series?

13599

inside

Employee

13598

R81.10 End-of-Support extension

13598

inside

Collaborator

13569

R77.30 Sending Check Point Logs to a Syslog Server

13569

inside

Admin

13518

CheckMates Fest 2025: Video and Q&A

13518

inside

Contributor

13506

How to migrate Full HA Cluster(r77.30 to r80.10)?

13506

inside

MVP Gold

13500

Cannot ping remote VPN gateway external IP

13420

inside

Contributor

13403

Announcement: Check Point R82 - Recommended Release

13399

inside

Advisor

13399

LDAP groups in Remote Access VPN Rules

13399

inside

Collaborator

13399

Enable multiple email addresses associated with account.

13360

inside

Champion

13312

R80.40 - Multi Queue on VMWare vmxnet3 drivers.

13300

Solved

inside

Advisor

13300

Checkpoint IPSO vs SecurePlatform vs Gaia

13300

inside

MVP Diamond

13299

Performance Tuning - Bufferbloat

13299

inside

Participant

13268

The number of Virtual systems on VSX cluster with the HA license

13268

Solved

inside

Collaborator

13210

Meaning of flag in packet dropped

13210

inside

Collaborator

13204

I have a Check Point model L-50 (serial number - 1310436119900) and I just need to know the throughput the series 1100 can handle?

13126

inside

Participant

13100

Maestro integration with Cisco ACI

13100

inside

Participant

13099

Zero Downtime Upgrade From R77.30 to R80.20

13099

inside

Collaborator

13099

Identity awareness collector changes user identity for same IP while connecting to RDP

13099

Solved

inside

Explorer

13096

GotoAssist doesn't work when Inspection SSL is enable

13096

inside

Admin

13000

How To Open a Case with TAC and/or Account Services

13000

Solved

inside

Advisor

12999

"CRLs failed to be downloaded" error when access SmartConsole R80.30

12999

Solved

inside

Advisor

12999

Failed to deccrypt CP Site Response...

12999

Solved

inside

Participant

12999

New daemon or processes under R80.20!

12998

Solved

inside

MVP Gold

12900

Lots of First packet isn't SYN

12899

inside

Participant

12880

VSX/ VS - Remote VPN clients connecting to 'other' VS in cluster

12809

inside

Advisor

12801

URL Filtering Doesn't work on HTTPS

12801

Solved

inside

Employee

12800

End-of-Support policy updates for R80.10 software version

12800

Solved

inside

Contributor

12799

Cluster Falover after every change on pbr, routing, ospf,...

12799

inside

Contributor

12799

HTTPS Categorization ... a drama

12799

inside

Collaborator

12705

End of Support for R77, R77.10, and R77.20

12699

inside

Explorer

12699

Destination Host Unreachable - 8.8.8.8 (intermittent)

12699

inside

Admin

12698

White Paper - Configuring NAT64 for Internet Access in R80.20

12698

inside

Collaborator

12697

RX-OVR drops and 10 gb hardware buffer

12697

Solved

inside

Explorer

12612

What is the default time that HIT count data is kept in R80?

12599

inside

Advisor

12599

TCP port reuse between Check Point Remote Access Gateway and Loadbalancer

12599

Solved

inside

Contributor

12599

When you enable HTTPS inspection, gmail does not work.

12534

inside

Explorer

12534

R80.20 SecureXL drop template support

12534

inside

Explorer

12532

Difference between interface based and zone based firewall?

12532

inside

Explorer

12531

Interesting traffic.. a parameter for Phase-2 negotiation?

12531

inside

Collaborator

12499

CVE-2024-3094 [CRITICAL Vulnerability Just Disclosed (CVSS-10)]

12499

inside

Explorer

12457

Vulnerability on CheckPoint Banner disclosure

12399

inside

Contributor

12399

Problem while installing upgrade tools - Cannot detect the version of the installed upgrade tools.

12399

inside

Employee

12399

Important: R80.10 End-of-Support will take place in May-2021

12399

inside

Participant

12301

Fragmented packet with IPS(R80.10)

12300

inside

Collaborator

12299

checkpoint not opening in WEB GUI

12299

Solved

inside

Collaborator

12299

CPSIZEME Download URL not working

12299

Solved

inside

Collaborator

12290

Configuration Migration From Checkpoint 4200 Appliance to CP 4800 Appliance

12290

inside

Explorer

12253

Rule base checking if Application control and URL filtering blade is enable?

12253

inside

Contributor

12219

Viewing Fan Status on non-Checkpoint Appliance

12219

inside

Participant

12214

Traffic dropped by Reason: PSL Drop: HTTP_DISPATCHER;

12214

inside

Participant

12211

Microsoft Office 365 Service Application Control

12200

Solved

inside

Participant

12200

No ssh access to VPN peer outside IP

12195

inside

Collaborator

12191

SSL Medium Strength Cipher Suites Supported

12191

Solved

inside

Contributor

12175

Checkpoint as a Reverse Proxy for Skype for Business

12175

inside

Champion

12153

Is SAML support available in r80.10?

12153

inside

Participant

12142

HA clusterXL with Bond interfaces with Cisco switch

12142

inside

Collaborator

12107

USFW on appliances with less than 40 cores

12106

inside

Participant

12100

command to check particular segment is already part of any encryption domain

12100

inside

Collaborator

12099

The difference between checkpoint creation domain and Custom Applications/Sites creation URL

12099

inside

Employee Alumnus

12099

R80.30 – default version (widely recommended)

12099

Solved

inside

MVP Diamond

12099

R80.20 - More then 40 Cores for CoreXL?

12099

Solved

inside

Explorer

12099

Syslog alert for power supply failure

12099

Solved

inside

Advisor

12095

Unable to access new checkpoint gateway using WebUI

12092

inside

Explorer

12053

SIP signalling traffic being dropped erroneously

12004

inside

Explorer

12000

R81 - Multi Queue (what's new)

11999

inside

Champion

11999

R77.30 Take 292: New Jumbo Hotfix GA Release

11960

Solved

inside

Contributor

11932

Natting to an IP range not directly connected

11932

Solved

inside

Participant

11932

Fragment Reassembly Time Exceeded Errors

11932

inside

Contributor

11923

Where can I check the phase 2 encryption domain on cli for existing vpn

11923

inside

MVP Diamond

415

Remote Access Location Awareness - DC Check

1408

Solved

inside

Advisor

1012

Pasting clish BGP MD5 secrets?

1012

inside

Participant

1197

Remote Access Authentication with Certificate and Group Membership Retrieval

1197

inside

Admin

1049

Software Blade effectiveness with and without HTTPS Inspection - sk184185

1049

Solved

inside

MVP Diamond

2833

SmartConsole Extension Issue in R81.20/R82

2833

inside

Participant

520

Remote Access VPN & Site-to-Site tunnels broken (“invalid cookie” / SA desync) after upgrade

520

inside

MVP Diamond

2815

Check Point Appliances - Overview

2815

Solved

inside

Collaborator

1043

R77.30 VS migration from legacy VSX cluster to new one on R81.20

1043

Solved

inside

Advisor

1042

Can I implement Identity Awareness without using a PDP/PEP Broker?

1042

Solved

inside

Collaborator

1439

Gateway blades suddenly expiring despite having valid licenses

1439

inside

MVP Diamond

3522

Bootable USB from ISO for open servers

2756

Solved

inside

Explorer

7045

Management Interface (eth0) assigned via DHCP - cannot remove the static IP of the interface

7045

Solved

inside

Collaborator

1008

Identity Awarness upgrade (cross platform)

1008

Solved

inside

Participant

2235

P2P Config compatibility in Active/Standby Cluster

1714

Solved

inside

Participant

1126

Introducing new Acceleration NIC 4x10/25G for Quantum Force appliances

5008

inside

Contributor

5971

CCSA/CCSE Labs on HP Notebook - Performance Issue

5971

inside

MVP Diamond

694

Evolution of Check Point's website 1996 - 2025

694

Solved

inside

Contributor

1822

CPX 2001 - An Internet Security Event

940

inside

MVP Silver

1995

R82 Streamed SmartConsole (Smart-1 Cloud) issue with Gateways and Servers view

1995

inside

Contributor

1421

Get interfaces WITH/WITHOUT topology

1421

inside

Contributor

3025

VPN IPSec Tunnel with Sophos IKEv2 Issue

3025

inside

Advisor

5053

Traffic is not visible on management.

5053

Solved

inside

Advisor

992

9800 interfaces links down but switchports up

1242

inside

Contributor

1292

Best Practices for Websites and Applications

1292

Solved

inside

Advisor

1661

CVE-2025-32728 - permanent solution?

1661

inside

MVP Diamond

1461

VSX on Check Point 9300/9400 Appliances

1461

Solved

inside

Collaborator

1933

IPsec VPN between Checkpoint and Remote Server

1933

inside

Explorer

793

Management-Server: Addition NIC or VSX-Cluster?

793

inside

Collaborator

3245

Port 19009 on MGMT Server Accessible from Internet via Implied Rule Despite GUI Clients List

3245

inside

Admin

428

Tips and Tricks 2025 #13 - Strategic Cyber Assessments: How to Strengthen Your Security Posture

428

inside

Admin

1349

Learn About CheckMates October 2025

1349

inside

MVP Diamond

5919

HowTo: Configure a VPN between FortiGate & Check Point

5919

Solved

inside

Explorer

3593

Unable to export Checkpoint firewall rulebase

3593

Solved

inside

MVP Gold

1138

Can I configure complex views using smart reporter?

1138

Solved

inside

Contributor

526

turning off secureXL resolves mac flapping?

526

Solved

inside

MVP Gold

1167

Identifying failed ISP in case of ISP redundancy

1167

Solved

inside

Advisor

768

Minimum RAM and CPU requirements for S1C Management

768

Solved

inside

Participant

2074

How are you keeping up with Check Point VPN/SIC Certificates

1330

inside

Authority

1280

Notification about changes within Support Life Cycle

1280

inside

Collaborator

2998

SIC not automatically renewing certificate in VSX

786

Solved

inside

Explorer

788

Secondary MDS Migration and IP Change

788

Solved

inside

Advisor

3803

ClusterXL – Should the standby member ever generate traffic with the VIP?

3803

Solved

inside

Advisor

1489

R82 - ssl inspection auto bypass question

1489

inside

MVP Diamond

764

Tips and Tricks 2025 #12 - Check Point PRO Support Overview & Update

289

Solved

inside

Collaborator

699

Are Logs Still Visible If Only the index File Remains?

699

Solved

inside

Participant

60948

Best way to whitelist KnowBe4 Phishing domains?

60948

inside

MVP Diamond

897

Special functions via policy - name field

897

Solved

inside

Collaborator

1090

Using Identity Awareness Collector with Cisco FTD Syslogging

1090

inside

Participant

1033

Firewall is freezing/crashing randomly after upgrade to R82

1033

inside

Participant

1030

How to allow redirects on Cloudflare

1030

inside

Explorer

5260

R82 http proxy and dns proxy forwarding domains not working

5260

inside

Admin

1832

BRICKSTORM: A Stealthy Espionage Campaign Targeting Enterprise Infrastructure (sk184082)

1832

inside

MVP Gold

3842

Ongoing issue: high CPU load fw_workers + rad

3842

inside

Advisor

787

How to safely reuse an existing cluster

787

inside

Advisor

6775

unable to ssh to device after JHF upgrade

6775

Solved

inside

Advisor

1787

Difference Between Configuring Proxy on Firewall CLI vs Cluster Object in SmartConsole

1787

Solved

inside

Participant

3279

Proxy HTTP/HTTPS - two sessions

3279

inside

MVP Gold

459

What should be the settings for ingesting logs in SIEM for self managed spark devices

459

Solved

inside

Explorer

2210

Unable to remote save snapshot via SCP.

2210

inside

Advisor

3223

forklifting 5xxx appliances -> 9100 UPPAK observations

3223

inside

Advisor

595

ISP redundancy and VPNs to azure

595

Solved

inside

MVP Diamond

466

An idea from customer about web UI jumbo hotfix install

466

Solved

inside

Collaborator

2894

HTTPS inspection - Create a CSR for an external CA to use for the outbound certificate

2894

inside

Employee

1851

Jumbo Hotfix Accumulator for Quantum Force 3900 Appliances take #22 has been released today

1851

Solved

inside

Contributor

1409

Migrate eth interface to a VLAN interface in bond

1409

Solved

inside

Participant

1303

Strange BGP announcement of a /31 network as /32

1303

Solved

inside

Advisor

1264

Clarification on “Check Point 6200P” Model

1264

Solved

inside

Explorer

1062

Memory cache usage on 16200 appliance – expected behavior?

2572

inside

Employee

13472

Announcement: Check Point R82 - Recommended Release

13472

inside

Advisor

572

Global Policy Package - Skip/Goes to Domain Layer action

572

Solved

inside

Collaborator

2074

Question About Default Threat Prevention Profiles

541

Solved

inside

Advisor

818

R81.20 Global Properties Stateful Inspection default settings

818

inside

MVP Silver

1189

Common Criteria for Harmony Endpoint Security with compliance to 2 NIAP Protection Profiles

1479

Solved

inside

Admin

16296

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

16296

Solved

inside

Contributor

991

Single VSY within VSX environment wont send logs to dedicated log server

991

inside

Champion

22050

Configuring dynamic routing in clustered VSX

22050

inside

Collaborator

2096

Failed login SmartConsole after upgrade Win11

2096

Solved

inside

Advisor

2218

Tip: How to deal with RAD errors

1921

inside

Explorer

768

Server Error in '/owa' Application

768

inside

Contributor

7273

VPN issue stuck in Phase 1 and sometimes disconnects

7273

Solved

inside

MVP Gold

1021

new transciever CPAC-TR-25SR-DM

723

inside

MVP Gold

600

UPDATE - DigiCert Certificate Expiration Mitigated

5293

inside

Advisor

886

idrac - how to create account with admin role

886

inside

Employee

4589

Introducing the New Interactive Ideas Portal – Join the Pilot!

4589

inside

Contributor

2104

Process file types known to contain malware

2104

Solved

inside

Participant

34843

useful debug command in checkpoint

34843

inside

Contributor

953

Route Based VPN Network SA no route

953

inside

MVP Gold

957

Can not access smart console over site-site VPN

957

Solved

inside

Explorer

543

External Certificates for IPSEC VPN

543

inside

Advisor

710

Rewriting internet access policy

710

Solved

inside

Participant

4747

Site to site vpn drops on policy install

4747

inside

Collaborator

641

Customer FTP traffic keeps triggering new IPS protections

641

inside

Collaborator

5426

Trusted CA List is missing a lot

5426

inside

Advisor

1237

Install Policy pushed but still visible by other admin

424

Solved

inside

Advisor

2064

CPUSE v2606 manual installation failure

1392

inside

Employee

436

R82 Jumbo Hotfix Accumulator take 39 has been released

436

inside

Advisor

1243

Best Way to Export Policy Package for Reporting

1243

Solved

inside

Advisor

3552

Regenerate Token for MaaS Tunnel

3552

inside

Collaborator

1034

a third-party certificate on a clustered and centrally managed Appliance 1900

469

Solved

inside

Participant

800

Checkpoint 19000 Supported Transceivers Sync

800

Solved

inside

MVP Gold

1095

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

1095

inside

Explorer

718

Testing primary and secondary bond interfaces

718

Solved

inside

Participant

929

Best Practices for Threat Prevention API Calls to Appliance - API repository

929

inside

Advisor

536

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

536

Solved

inside

Collaborator

942

What are the new NAT options in SMS and GW for?

942

Solved

inside

Contributor

8371

Traffic initiated from Lan to VPN Endpoint Client Blocked

2349

inside

Participant

2848

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

2848

Solved

inside

Advisor

8450

Quantum Force 9000 Appliance OS version Compatibility

1029

inside

MVP Diamond

881

Help Shape the Future of AI at Check Point

611

inside

Collaborator

2762

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

2762

Solved

inside

Collaborator

2008

Firewall - Automating Firewall Rule Cleanup Based on Usage

2008

inside

Employee

2728

CVE-2025-45582 - tar: Tar path traversal

2733

Solved

inside

Advisor

1100

Peer certificate verification failed after certificate replacement

1100

Solved

inside

Contributor

20652

How to list arp table and identify network devices with mac under Check Point FWs

20652

Solved

inside

Explorer

1511

Remote Access VPN – Can specific routes be assigned to particular users?

1511

inside

MVP Diamond

2027

R8x - Performance Tuning Tip - Appliance Sizing

2027

inside

Participant

4799

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

3254

Solved

inside

Contributor

1145

add rule to policy via mgmt_Cli fails

1145

inside

Explorer

696

Behaviour after regular contract/subscription expiration

885

Solved

inside

Advisor

1459

Log file isn't shown automatically after upgrade to R82

1459

Solved

inside

Explorer

1007

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

1007

Solved

inside

Explorer

3029

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

3029

inside

Participant

1480

7000 appliance R81.20 iSO image install

1480

inside

Explorer

438

Unable to take ssh for MGMT Port

438

Solved

inside

Advisor

842

Updatable (geo) objects and IP addresses, again

842

Solved

inside

Advisor

1673

Renaming a Gateway Node in a Cluster

1673

Solved

inside

Advisor

1091

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

1091

inside

MVP Diamond

726

R82.10 - Hardware Security Module (HSM) for TLS 1.3

726

Solved

inside

Advisor

4593

How do you keep track of the latest FW/OS updates?

4593

Solved

inside

Advisor

4348

Manual FTP transfers are always corrupted while scheduled backups are not

1783

inside

Employee

527

Estimated R82 release recommended date?

7935

inside

Collaborator

5781

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

5781

Solved

inside

Participant

838

Monitord process consume high cpu, does it safe to terminate the process during production hour?

838

inside

Collaborator

2014

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

2113

Solved

inside

Contributor

2171

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

2171

inside

MVP Diamond

5606

'fw ctl conntab -x' issue in R81.10

5606

Solved

inside

Advisor

1748

How to view the connections of the dynamic dispatcher's table

1748

Solved

inside

Collaborator

1019

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

1019

inside

Explorer

4867

A suspicious traffic log was observed during monitoring

860

inside

Admin

8106

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

8106

inside

Explorer

544

I need Check_Point_R81.20_T631_ScalablePlatform

1238

inside

Participant

7794

Questions about User Mode and Kernel Mode

7794

inside

Explorer

1769

Cannot start Mobile Access Portal Agent

1769

inside

Advisor

813

Openserver Dell R660xs, anyone ever tried this machine?

813

inside

Explorer

1989

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

2723

Solved

inside

Collaborator

31345

Unable to establish the SIC(Outgoing Policy)

750

inside

Employee

1361

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

9709

inside

Admin

3789

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

3789

inside

MVP Gold

792

RA clients not able to access external cluster interface

792

inside

Explorer

902

Microsegmentation with Firewall Hardware

902

inside

Explorer

857

the new subnets are unable to communicate through the existing VPN tunnel

857

inside

Participant

1508

SMS migration from XCP-NG to ProxMox

1508

inside

Advisor

5112

Take logging out of the implied rules

1809

inside

MVP Diamond

3070

SmartConsole Shortcuts - cheat sheet

3070

inside

Explorer

1136

I can't find how my dns host is used within the FW object.

1136

inside

Explorer

5293

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

5293

Solved

inside

Explorer

1342

BGP route on Maestro Active/Active are showing as inactive/unusable

1342

inside

Employee

692

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

692

Solved

inside

Contributor

2140

LOM interface - Console Session

2140

Solved

inside

Advisor

1918

Reducing /var/log partition size on Gaia OS

1918

Solved

inside

Collaborator

19003

https inspection tip/feedback/suggestion

1589

inside

Explorer

819

Disable Camelia Cipher on the firewall

819

inside

Collaborator

1253

always-connect for standalone vpn client

1253

Solved

inside

Collaborator

2640

Policy Installation Failed(Time out)-SMB Appliance

2640

Solved

inside

Admin

5994

New Products Introduction July 2025: Video, Slides, and Q&A

5994

Solved

inside

Advisor

1006

Export all gateways IPs MDS + VSX

1006

inside

Collaborator

1713

Unable to access Site(CPNotEnoughDataForRuleMatch)

1713

inside

Employee

699

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

699

Solved

inside

Advisor

4974

Clarification Needed on fwaccel stat

4974

Solved

inside

Explorer

1151

How to renew GAIA web certificate.

1151

Solved

inside

Advisor

2786

Deleting a Checkpoint host object from smart console

891

Solved

inside

Contributor

2366

Netflow Export with Physical Ip in cluster environment

505

Solved

inside

Advisor

1123

Moving a Gateway from One CMA to Another

1123

inside

Explorer

852

Logs not showing up in SmartConsole after policy install

852

inside

Collaborator

2993

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

439

inside

Admin

731

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

731

inside

Collaborator

752

synchronize Identity sharing between the active and passive node

752

Solved

inside

MVP Diamond

48620

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

631

Solved

inside

Advisor

1194

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

1194

Solved

inside

Employee Alumnus

5124

What is the difference between Custom Intelligence feed and Network Feeds ?

5124

inside

Explorer

1164

Static Hide Behind Gateway NAT

3979

inside

Admin

627

From OT to Cloud: A Security Blueprint for Manufacturers EMEA - Recording

627

inside

Employee

15916

New 3900 Branch office applainces were launched today 28/5

15916

Solved

inside

Collaborator

825

telnet showing open port on ILO when its not when going via FW

825

inside

Explorer

1589

Allow rule for site hosted on akamai CDN, only the first dns response seems to work

1589

Solved

inside

Explorer

1135

Identity Awareness Agents SK with direct links - published!

20092

inside

Advisor

785

Fresh Install Without USB, Possible From Boot Menu?

785

Solved

inside

Advisor

1314

simple question about ISOmorphic

1314

inside

Advisor

538

IPSec tunnel Setup [HUB and SPOKE Scenario] with Both spokes being non-checkpoint VPN Gateway

1874

Solved

inside

Advisor

521

At a gateway, how do I determine what domain the gateway belongs to?

1947

inside

Advisor

1914

Policy location on a gateway R80

9427

Solved

inside

MVP Silver

660

GMSA/automated password rotation for Identity

660

inside

Collaborator

13105

Identity awareness collector changes user identity for same IP while connecting to RDP

13105

inside

Explorer

651

SNMP Issue after JHF 99 R81.20 VSX cluster

651

Solved

inside

MVP Gold

5926

Upgrade is failing from R81.10 to R82

5926

inside

Collaborator

1895

Clarification on DNS Reputation Logs

1895

inside

Employee

2306

Quantum Force performance boost is available post the release of R82 Jumbo #3 ( Take 25)

2306

inside

Advisor

1439

Cluster Falover after every change on pbr, routing, ospf,...

12824

inside

Explorer

1814

Capsule VPN mobile users can't connect

1814

inside

Champion

52313

Can I directly search through solr indices using curl like elasticserch?

814

Solved

inside

Contributor

3672

lowering mtu on remote access vpn?

3672

Solved

inside

Contributor

1918

CP21800 (R80.40 Jumbo T211) - reply not from Cluster IP

1918

inside

Advisor

1173

Is It Safe to Change SecureXL on a Cluster?

1173

inside

Employee

581

Meet Your New Assistant: Infinity AI Copilot - video and materials

10682

inside

Collaborator

1192

portal certificate can not upload file

1192

Solved

inside

Collaborator

11081

BSI Common Criteria EAL4+ R82 Version + Jumbo Hotfix

947

inside

Employee

706

Security Engineer Eyes Only - Behind the Miercom Results

706

Solved

inside

Explorer

4427

Firewall-Blades Order of Operation

4427

inside

Participant

1629

Hack Like a Pro: Break Into a Server Using the Kill Chain - Americas Recording

493

inside

Admin

567

Hack Like a Pro: Break Into a Server Using the Kill Chain - EMEA recording

567

inside

MVP Silver

1215

Thales Mandatory Security Update - STA RADIUS Server to Enforce Message-Authenticator by July 31, 20

1215

inside

Employee

2578

Upgrading Gateway to R82 while MDS on R81.20

1324

inside

MVP Silver

1818

Trellix application not available in App objects

2916

Solved

inside

Explorer

3417

Upgrading Gateway 9100 to R82 via blink package

3417

Solved

inside

MVP Diamond

835

Any idea when https inspection policy rules hit count will be available?

835

inside

Admin

2149

CPX 2025 Recap with Surprise Guest Veriti: Video and Slides

2149

inside

Advisor

6582

Traffic dropped only in clean-up rule??

6582

Solved

inside

Employee

21550

Tip of the week: Support Center's Upgrade Wizard

21550

Solved

inside

Collaborator

4294

route based VPN requires VPN domain

4294

inside

Explorer

1029

Security Group name dinamec change

1029

Solved

inside

Collaborator

4065

VPN gateway random UDP traffic to CP peers?

9561

Solved

inside

Advisor

14919

how to disable SecureXL for specific src to specific dst

14919

inside

Advisor

3058

policy installation mode - set permanently

1432

Solved

inside

Advisor

2195

Safe to delete /var/log/CPda/repository?

2195

Solved

inside

Participant

2088

Application filter based on risk - do not include URL...

1237

Solved

inside

Advisor

1057

SIC Failure when creating new virtual systems in VSX

1068

inside

Admin

557

Building a Scalable Cybersecurity Skill Development Program: 4 Strategies for Success - AMER Video

557

inside

Admin

490

Building a Scalable Cybersecurity Skill Development Program: 4 Strategies for Success - EMEA Video

490

inside

Advisor

642

MAS Tunnel Down After Cluster update

642

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 11 Jun 2026 @ 11:00 AM (EDT)

Tips and Tricks 2026 #8: Say Yes to AI Without Saying Yes to Risk

In-Person

Fri 12 Jun 2026 @ 09:00 AM (CEST)

Netzwerk- & Cloud-Workshop: Wien

Virtual

Fri 12 Jun 2026 @ 10:00 AM (CEST)

CheckMates Live Netherlands - Sessie 47: Continuous Threat Exposure Management

In-Person

Tue 16 Jun 2026 @ 09:30 AM (BST)

DDOS MasterClass in London!

In-Person

Tue 16 Jun 2026 @ 08:00 AM (EDT)

Montreal: P’tits déj Cyber! | Cyber Breakfasts!

Virtual

Tue 16 Jun 2026 @ 05:00 PM (CEST)

Under the Hood: Check Point SASE | Internet Access Optimization & Performance Tuning

Virtual

Thu 11 Jun 2026 @ 11:00 AM (EDT)

Tips and Tricks 2026 #8: Say Yes to AI Without Saying Yes to Risk

Virtual

Fri 12 Jun 2026 @ 10:00 AM (CEST)

CheckMates Live Netherlands - Sessie 47: Continuous Threat Exposure Management

Virtual

Tue 16 Jun 2026 @ 05:00 PM (CEST)

Under the Hood: Check Point SASE | Internet Access Optimization & Performance Tuning

Virtual

Thu 18 Jun 2026 @ 10:00 AM (CEST)

The Cloud Architects Series: Check Point WAF - The Next Generation of AI powered protection

Virtual

Thu 18 Jun 2026 @ 03:00 PM (EDT)

Americas Deep Dive: Remote Access and SASE Best Practices

Virtual

Tue 23 Jun 2026 @ 05:00 PM (CEST)

Under the Hood: Check Point Cloud Firewall | Securing all of your clouds: Art of the possible

In-Person

Fri 12 Jun 2026 @ 09:00 AM (CEST)

Netzwerk- & Cloud-Workshop: Wien

In-Person

Tue 16 Jun 2026 @ 09:30 AM (BST)

DDOS MasterClass in London!

In-Person

Tue 16 Jun 2026 @ 08:00 AM (EDT)

Montreal: P’tits déj Cyber! | Cyber Breakfasts!

CheckMates Events

Are you a member of CheckMates?