General Topics

What’s New in Agentic Network Orchestration
21 October @ 5pm CET / 11am EDT

AI Security Masters
LGTM: Bypassing an LLM Build Gate
When Prompt Injection Fails

Scaling Check Point Automation with Arodonata

Watch Here!

CheckMates Go:
Fun Ding

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Authority

18500

Performance of a single connection ?

18500

inside

Advisor

18500

Showing logs "Missing OS Route" when place new CP Appliance (Suspect ARP issue)

18499

Solved

inside

Contributor

18487

How to allow specific youtube video categories?

18487

inside

Participant

18400

Request for VSX training Videos R80.10 or R77.X

18400

Solved

inside

Contributor

18399

SmartEvent - Error (CPSEMD not running)

18399

inside

Champion

18399

Announcement – Check Point Firewall Administration R81.10+ book update

18399

inside

Explorer

18396

Domain object is not working in R80.10 properly

18396

Solved

inside

Contributor

18300

NAT Exhaustion - Hide NAT failures

18300

inside

Employee

18300

ISP Redundancy & Policy Based Routing

18199

Solved

inside

Explorer

18199

DNS problems possibly due to firewall issue

18199

inside

Contributor

18100

VPN1-Edge | SBXW-166LHGE-4 - compatible software

18099

inside

Participant

18099

Route Based VPN with Azure in Cluster Environment

18099

Solved

inside

Contributor

18000

ISOmorphic Tools bootable flash creation for R80.40

18000

Solved

inside

Contributor

18000

How to check telnet is enable or not.

17996

inside

Employee

17900

User-Space firewall support for R80.30 3.10 and above

17900

inside

Contributor

17900

failover logic operation in VSX?

17900

Solved

inside

Contributor

17900

Vulnerability-ssl-weak-message-authentication-code-algorithms for Port 8211

17900

inside

MVP Silver

17900

Tunnel mode VPN and Transport mode VPN

17899

inside

Participant

17899

Getting error “dropped by fwpslglue_chain Reason: PSL Drop: internal - streaming;"

17899

inside

Collaborator

17899

RX-DRP/rx_missed_errors on Interface

17899

inside

Explorer

17899

Delete a specific connection entry in Checkpoint Gateway

17899

Solved

inside

Participant

17800

High CPU utilization causing slowness

17800

inside

Contributor

17799

What does Sticky Decision Function DO?

17799

inside

Contributor

17699

Quick mode Received Notification from Peer: invalid id information

17699

inside

Contributor

17672

Share your feedback for your chance to WIN new Apple AirPods Pro!

17599

inside

Contributor

17599

ClusterXl synchronization network bandwidth

17599

inside

MVP Silver

17561

Management problem with GAIA OS

17561

inside

Explorer

17500

Creating multiple VPN site to site connections on CheckPoint

17500

inside

Collaborator

17499

Question on traffic handling between Kernel Mode FW and Usermode FW

17499

Solved

inside

Contributor

17499

How can I monitor BGP state using SNMP?

17499

inside

MVP Silver

17499

can I export the list of web application categories

17498

inside

Collaborator

17400

Permit ICMP request only in several networks

17400

Solved

inside

Collaborator

17399

What is SNMP OID for CP FW number of new connections?

17399

Solved

inside

MVP Gold CHKP

17399

First impressions R80.30 on gateway - one step forward one (or two back)

17399

Solved

inside

Collaborator

17304

Unable to open URL Categorization link

17304

inside

MVP Diamond

17299

R80.x - Performance Tuning Tip - Management Data Plane Separation

17299

inside

Contributor

17299

Setting Up Site-to-Site VPN to 3rd Party Gateway

17199

Solved

inside

Contributor

17199

Microsoft Activation negatively impacted by HTTPS Inspection

17191

inside

Collaborator

17102

Installation failed. Reason: Load on Module failed - failed to load security policy

17102

inside

MVP Gold

17099

https Traffic Dropped ... due to Out of sequence TCP packet retransmission. Stripping all packet dat

17099

Solved

inside

Explorer

17000

r80.10 all-in-one evaluation license activation?

17000

inside

Contributor

16999

CoreXL option disabled in cpconfig

16998

inside

Participant

16905

How to create QoS rule to limit bandwith per user

16905

inside

Collaborator

16900

Problem with VPN AMAZON(AWS) CHECK POINT

16799

inside

Explorer

16799

Site-to-Site VPN connection issue with CISCO ASA

16799

inside

Contributor

16799

Bandwidth limit per app /category

16799

inside

Advisor

16799

Application Control can not catch Opera web browser VPN

16799

inside

Contributor

16792

Ipsec VPN b/w checkpoint cluster and Azure gateway

16699

inside

Advisor

16699

Slowness when Accessing HTTP traffic over Remote Access VPN

16699

Solved

inside

Advisor

16699

fw_full process consumes 100% CPU

16600

Solved

inside

MVP Gold

16600

Checkpoint firewall logging source interface

16599

inside

Contributor

16599

Hacking DNS TechTalk: Video, Slides, and Q&A

16599

inside

Contributor

16501

R80.10 - VPND process utilizes a large amount of CPU

16501

Solved

inside

MVP Gold

16399

Encryption domain mismatch even though its set it up correctly

16399

Solved

inside

Collaborator

16399

What different for Content Awareness and Data Loss Prevention blade

16399

Solved

inside

MVP Silver

16399

R80.20 - SYN Defender on SecureXL Level

16300

Solved

inside

Contributor

16300

Route Based VPN on one side and Domain Based VPN on other

16300

Solved

inside

Advisor

16300

Is Check Point Gaia vulnerable towards this new cve-2024-6387 in OpenSSH?

16300

inside

Participant

16300

Firewall priority queues setting

16299

inside

MVP Diamond

16299

ONELINER - Check CVE-2024-24919 Vulnerability

16299

Solved

inside

Contributor

16200

How to Prepare a lab for checkpoint using vmware

16200

Solved

inside

Contributor

16199

Reg: policy installation failed on gateway

16199

inside

Contributor

16100

Connection rematch after policy installation

16099

inside

MVP Diamond

16099

RFID token authentication with R81+ Raspberry Pi

16099

inside

Participant

16096

Change Management IP addresses in Cluster

16002

Solved

inside

Participant

16000

Security Policy Management without SmartConsole

16000

inside

MVP Gold CHKP

16000

Security Gateway Performance Optimization - VSX

16000

Solved

inside

Advisor

15999

how to disable SecureXL for specific src to specific dst

15999

inside

Admin

15999

fw ctl zdebug - this is wrong...

15999

inside

Admin

15999

New updatable object for HTTPS Inspection: HTTPS Services Bypass

15999

Solved

inside

Participant

15999

Smartconsole cant connect to firewall in GNS3

15999

inside

Explorer

15900

Basic commands used in checkpoint for troubleshooting and the features?

15900

inside

Collaborator

15899

HTTPS inspection in R77.30 and R80.10 with various combinations of proxy and probe bypass

15899

inside

Explorer

15888

Zoom Meeting Issues with SecureXL

15888

Solved

inside

Collaborator

15802

Disable SecureXL permanent R80.20

15802

inside

Participant

15699

Does 4600 Appliances supports upgrade to R80.20?

15699

Solved

inside

MVP Diamond

15698

R80.20 has recommended status now!

15697

Solved

inside

Contributor

15599

NMAP Shows Ports 5060 & 2000 Open

15599

Solved

inside

Advisor

15599

Zero Downtime Upgrade - R80.10 - R80.40

15599

inside

MVP Diamond

15500

Check Point configuration mistakes - Top 10

15500

Solved

inside

Contributor

15499

Local backup issue /var/log is full

15499

inside

Collaborator

15499

Manually define local VPN Domain per remote peer

15499

inside

Contributor

15498

Announcement: Check Point R82 - Recommended Release

15400

Solved

inside

Explorer

15400

Check Point Security Gateway as HTTP/HTTPS Proxy

15400

inside

Participant

15400

Issue with Checkpoint Identity Agent

15400

inside

Advisor

15399

Lots of First packet isn't SYN

15399

inside

Admin

15399

ICMP is sometimes drop when send via IPSec Tunnel

15399

Solved

inside

Explorer

15398

Identity awareness collector changes user identity for same IP while connecting to RDP

15300

inside

Advisor

15300

White Paper - How to Batch Categorize URLs

15299

Solved

inside

Collaborator

15299

Failed to connect to SMTP server - smtp Traffic Rejected

15299

inside

MVP Silver

15299

Exporting Objects/Groups in R77.30

15299

Solved

inside

Authority

15299

Printernightmare CVE-2021-1675

15299

Solved

inside

Collaborator

15199

Domain objects (FQDN mode) vs Custom Applications/Sites

15199

Solved

inside

Contributor

15199

Is CP planning to support Load-Sharing in future releases?

15199

inside

Employee Alumnus

15199

VPN tunnel with Dynamic IP address.

15199

inside

Contributor

15193

The license it is impossible to detach it in smartupdate

15193

inside

Explorer

15101

Issues with Identity Awareness - some users are not seen and some traffic is incorrectly marked

15101

inside

Advisor

15099

Having trouble connecting to Check Point 1430/1450

15099

Solved

inside

Advisor

15099

Failed to deccrypt CP Site Response...

15099

Solved

inside

Explorer

15099

R80 CCSA/CCSE training material and exams

15099

inside

Collaborator

15099

getting certificate error when trying to connect to a site

15099

inside

Collaborator

15098

No authentication for port 18231 Policy Server Login (old)

15098

inside

Participant

15087

6800 stability Issue - R80.10 w\/Take 203 or R80.20 w/ Take 74

15087

inside

Contributor

14999

Deploying Check Point Solution R80.40

14999

Solved

inside

Collaborator

14997

interaction between VRRP and CXL - why is there a tickbox for ClusterXL when the cluster is VRRP

14997

inside

Contributor

14902

How to Block TOR NODE is Checkpoint Firewall R80.30 Version

14902

inside

Collaborator

14900

Identity Awareness issue - User identified but the rule is not matching

14900

Solved

inside

Collaborator

14898

CoreXL: only one SND core is busy

14898

inside

Contributor

14802

Update appliance 1490 os R77.20.70 to R77.30 or R80?

14802

Solved

inside

Collaborator

14800

Production cluster upgrade R77.30 to R80.10

14799

Solved

inside

Contributor

14799

Custom Application Site url substring wildcard

14799

inside

MVP Silver

14799

SPLAT R75.40 - disable TCP / ICMP timestamp

14798

Solved

inside

Contributor

14703

Duplicate services - which will be used?

14703

inside

Contributor

14702

WSDNSD high cpu + Strange messages

14702

inside

Participant

14700

Maestro integration with Cisco ACI

14700

inside

Contributor

14699

Command to show history of ClusterXL member status

14699

inside

Admin

14699

CheckMates Fest 2025: Video and Q&A

14699

inside

Explorer

14699

Performance Tuning - Bufferbloat

14699

inside

Employee

14698

R81.10 End-of-Support extension

14698

inside

Participant

14599

Switch or Cable between ClusterXL members for the sync network?

14599

Solved

inside

Contributor

14599

Domain objects in R80.10 spamming DNS

14599

inside

Collaborator

14597

R80.x - Performance Tuning Tip - Control SecureXL / CoreXL Paths

14501

Solved

inside

Collaborator

14500

OpenSSH Vulnerability detection

14500

inside

Advisor

14499

How does Domain Management Server (CMA) get to the internet?

14401

inside

Contributor

14400

can ping internet but unable to browse

14400

inside

Admin

14400

White Paper - URL Filtering Best Practices for the Large Scale Deployment

14400

inside

Contributor

14399

Error installation CP VPN E80.92

14399

inside

Contributor

14399

why 3000 series CPU core higher than 5000 series?

14399

inside

MVP Diamond

14300

R80.40 - Multi Queue on VMWare vmxnet3 drivers.

14300

inside

Admin

14299

Infinity R80.10 "Cool Feature of the Day" - Content Awareness

14299

inside

Employee

14299

What is the practical example to use Bridged Mode?

14299

Solved

inside

Advisor

14299

Checkpoint IPSO vs SecurePlatform vs Gaia

14299

inside

Advisor

14200

R77.30: New Jumbo Hotfix (Take 338) GA-Release

14200

inside

Participant

14200

R80.10: New Jumbo Hotfix (Take 154) GA-Release

14199

inside

Employee

14199

Reminder for R80.20/30 End-of-Support on 30/9/2022

14199

inside

Participant

14100

need checkpoint document that has details of all field that are in logs

14099

inside

Contributor

14099

Zero Downtime Upgrade From R77.30 to R80.20

13904

inside

Advisor

13902

LDAP groups in Remote Access VPN Rules

13902

inside

Contributor

13902

How to migrate Full HA Cluster(r77.30 to r80.10)?

13902

inside

Participant

13899

The number of Virtual systems on VSX cluster with the HA license

13899

inside

Champion

13899

Cannot ping remote VPN gateway external IP

13799

Solved

inside

Explorer

13799

GotoAssist doesn't work when Inspection SSL is enable

13799

inside

Collaborator

13704

R77.30 Sending Check Point Logs to a Syslog Server

13704

Solved

inside

Advisor

13702

"CRLs failed to be downloaded" error when access SmartConsole R80.30

13702

inside

Admin

13699

Check Point Engage 2026 - Call for Papers

13699

inside

Collaborator

13699

CPSIZEME Download URL not working

13686

Solved

inside

MVP Gold

13600

CVE-2024-3094 [CRITICAL Vulnerability Just Disclosed (CVSS-10)]

13600

Solved

inside

Contributor

13599

Cluster Falover after every change on pbr, routing, ospf,...

13599

inside

Admin

13599

White Paper - Configuring NAT64 for Internet Access in R80.20

13599

Solved

inside

Explorer

13599

I have a Check Point model L-50 (serial number - 1310436119900) and I just need to know the throughput the series 1100 can handle?

13599

inside

Admin

13599

How To Open a Case with TAC and/or Account Services

13599

inside

Participant

13599

Destination Host Unreachable - 8.8.8.8 (intermittent)

13503

inside

Employee

13499

Notes on Script to Identify vulnerable Security Gateways for CVE-2024-24919

13499

Solved

inside

Collaborator

13497

Meaning of flag in packet dropped

13497

inside

Collaborator

13401

RX-OVR drops and 10 gb hardware buffer

13401

inside

Explorer

13400

New daemon or processes under R80.20!

13400

inside

Explorer

13399

VSX/ VS - Remote VPN clients connecting to 'other' VS in cluster

13399

inside

Contributor

13399

HTTPS Categorization ... a drama

13399

inside

Champion

13399

Enable multiple email addresses associated with account.

13399

Solved

inside

Contributor

13399

Problem while installing upgrade tools - Cannot detect the version of the installed upgrade tools.

13299

Solved

inside

Explorer

13199

URL Filtering Doesn't work on HTTPS

13199

inside

Contributor

13199

User data Failed to Upgrade R81 to R81.10 CPUSE GAIA PORTAL.

13199

inside

Participant

13199

WEB_API constant log in - log out

13199

Solved

inside

Employee

13199

End-of-Support policy updates for R80.10 software version

13199

inside

Employee

13199

Important: R80.10 End-of-Support will take place in May-2021

13199

inside

Champion

13104

Is SAML support available in r80.10?

13104

Solved

inside

Participant

13101

No ssh access to VPN peer outside IP

13101

inside

Collaborator

13099

When you enable HTTPS inspection, gmail does not work.

13099

Solved

inside

Participant

13000

Viewing Fan Status on non-Checkpoint Appliance

13000

inside

Explorer

13000

Configuration Migration From Checkpoint 4200 Appliance to CP 4800 Appliance

12999

inside

Admin

12999

End of Support for R77, R77.10, and R77.20

12999

inside

Collaborator

12999

What is the default time that HIT count data is kept in R80?

12999

inside

Employee

12999

R82: Parallel Processing Based Packet Flow

12999

inside

Admin

12999

May the 4th + 4 Paradigm Shift: Video, Slides, and Q&A

12999

Solved

inside

Participant

12999

R80.20 SecureXL drop template support

12999

inside

Advisor

12993

TCP port reuse between Check Point Remote Access Gateway and Loadbalancer

12993

inside

MVP Diamond

12899

R81 - Multi Queue (what's new)

12899

inside

Contributor

12899

R80.40 policy install diff changes breaks the network

12899

inside

Collaborator

12899

The difference between checkpoint creation domain and Custom Applications/Sites creation URL

12899

inside

Participant

12899

SIP signalling traffic being dropped erroneously

12800

inside

Explorer

12799

Unable to access new checkpoint gateway using WebUI

12799

inside

Participant

12799

Traffic dropped by Reason: PSL Drop: HTTP_DISPATCHER;

12799

inside

Collaborator

12798

DNS Passive Learning Design Question

12798

inside

Advisor

12798

Vulnerability on CheckPoint Banner disclosure

12798

inside

Participant

12791

command to check particular segment is already part of any encryption domain

12791

inside

Explorer

12700

Fragmented packet with IPS(R80.10)

12700

inside

Explorer

12699

Interesting traffic.. a parameter for Phase-2 negotiation?

12699

inside

Explorer

12699

Difference between interface based and zone based firewall?

12699

Solved

inside

MVP Gold

12698

USFW on appliances with less than 40 cores

12698

inside

Collaborator

12696

SSL Medium Strength Cipher Suites Supported

12696

inside

Collaborator

12600

checkpoint not opening in WEB GUI

12600

inside

Collaborator

12600

FTP causes 100% CPU on one core

12600

inside

MVP Diamond

12600

Homekit (Siri) integration with R81 Dynamic Objects

12600

inside

Employee Alumnus

12599

R80.30 – default version (widely recommended)

12599

inside

Champion

12599

Syslog alert for power supply failure

12599

inside

Employee

12598

CPUSE (Deployment Agent) new GUI

12598

inside

Explorer

12500

Microsoft Office 365 Service Application Control

12500

inside

Participant

12499

HA clusterXL with Bond interfaces with Cisco switch

12499

Solved

inside

Advisor

12499

Rule base checking if Application control and URL filtering blade is enable?

12499

inside

Participant

12499

Fragment Reassembly Time Exceeded Errors

12498

inside

Advisor

12498

R80.30 - Slow DMZ transfer performance

12498

Solved

inside

Contributor

12497

Configuring Cluster Addresses on Different Subnets

12497

Solved

inside

Contributor

12399

Firewall crashed reboots - vmcore crash file R80.30

12399

inside

Admin

12399

Platform URLs You'll Find Useful

12399

inside

Advisor

12399

Two Numbered VTI's between gateways managed by same Security Management?

12399

inside

Contributor

12399

Failed to get metadata for the package

12399

inside

Contributor

12399

CoreXL affinity on VSX R80.10 does not survive reboot?

12399

inside

Champion

12300

Precedence in the rule order processing in R80.20

12300

Solved

inside

Contributor

12299

Natting to an IP range not directly connected

12299

Solved

inside

Contributor

12299

Checkpoint as a Reverse Proxy for Skype for Business

12299

inside

Contributor

12299

Where can I check the phase 2 encryption domain on cli for existing vpn

12299

inside

Advisor

12299

Users reported web traffic stopped working

12299

Solved

inside

Advisor

12299

Import a trusted CA cert to Gaia OS

12299

inside

MVP Diamond

12290

New VPN daemons in R81.10 / R81.20

12290

inside

Collaborator

12206

should i be worried about a key install to an unknown ip from the firewall?

12206

inside

Contributor

12200

Site to Site vpn with 3rd party DAIP gateway

12200

inside

Collaborator

12199

IKE Failure on Site to site IPSec VPN with Zyxel USG - open for suggestions

12199

inside

Participant

12199

Messages of mux error on a cluster (active-standby) in r80.20

12199

Solved

inside

MVP Diamond

12199

R80.20 - More then 40 Cores for CoreXL?

12199

inside

Participant

12199

What are to the point differences between Automatic & Manual NAT?

12199

Solved

inside

Participant

12199

Port forwarding to internal IP connected to other firewall.

12099

inside

Advisor

12099

IPSec Tunel - no nat in outbound traffic

12099

inside

MVP Diamond

12099

R77.30 Take 292: New Jumbo Hotfix GA Release

12099

inside

Contributor

12099

Error encountered processing a template

12099

inside

Participant

12099

Move External Interface to different NIC

12098

inside

Participant

12097

What happens when session timeout of 720 minutes ends in Identity Awareness

12097

Solved

inside

Participant

12094

Upgrade Reporter Progress (R80.30->R80.40 Standalone) - Stuck on Importing IPS Data ...

12088

inside

Champion

12000

Should HTTPS inspection be accounted for in the appliance sizing charts?

12000

inside

Participant

12000

whitelist AWS S3 buckets using complex URI / URL patterns?

12000

inside

Admin

12000

Introducing the CheckMates MVP Program - Submissions for 2026 are now CLOSED!

12000

inside

Explorer

11999

Wimax branch offices not able to browse

11999

inside

Contributor

11999

General community posting questions

11999

Solved

inside

Participant

11999

AES-GCM support - IPsec Phase1

11999

inside

Collaborator

11999

Cluster down and policy installation failure after enabling HTTPS inspection

11999

inside

Employee Alumnus

11903

Brainstorming for a new DLP platform – we want to hear from you!

11903

inside

MVP Diamond

11899

R80.40 - Performance Tuning Tip - CPU Spike Detective

11899

inside

Mentor

11899

fw monitor/tcpdump and "fwaccel off" - yes or no

11899

Solved

inside

Advisor

11899

Check Point Diagnostic Console (cdc)

11899

Solved

inside

Collaborator

11801

High Performance Firewalls - ESX vs. Open Server

11800

inside

Explorer

11800

Need help to configure log forwarding to syslog server SIEM from checkpoint management server

11800

inside

Contributor

11799

Renew external (3rd party) certificate for IPSEC VPN

11799

inside

Participant

11799

SMTP Server Non-standard Port Detection

11799

Solved

inside

Contributor

11799

Trouble uploading video on course from linkedin

11799

Solved

inside

Contributor

11799

Update failed. Contract entitlement check failed. Gateway can not access internet

11799

inside

Participant

11799

Blocked HTTPS requests are not getting a UserCheck message

11798

Solved

inside

Advisor

3481

Support site security advisories link

3481

inside

MVP Diamond

2032

2025 CP community and company achievements

2032

Solved

inside

Employee Alumnus

59974

Policy Insights: Your AI-Powered Firewall Assistant

5083

Solved

inside

Explorer

2778

Firewall behavior when handling terminated TCP connections

2778

inside

Participant

5030

error Clear text packet should be encrypted

5030

inside

Collaborator

1673

Checkpoint Endpoint VPN - 2 VPNs, only one works (via Endpoint VPN)

1673

inside

Admin

1955

Happy New Year - Let's Celebrate 2026 Together

1955

Solved

inside

Collaborator

11046

VPN Redundancy b/w two Gateways

1676

Solved

inside

MVP Gold

3341

CVE-2025-68615 Net-SNMP snmptrapd crash

3341

inside

Explorer

1027

Request for enhancements for filtering in SmartConsole

994

Solved

inside

Advisor

3312

Unlocking the Power of Policy Insights: Features, Benefits, and a Technical Deep-Dive Video

1633

inside

Employee

2269

Adaptive IPS – Smarter Performance-Aware Intrusion Prevention

2269

Solved

inside

Collaborator

3838

Checkpoint FW R81 don't block SYN FLOOD

3838

Solved

inside

Collaborator

6801

Domain objects in remote access encryption domain.

6801

inside

Collaborator

629

How to lock change method authentication VPN on Client Security

629

inside

Employee

1423

Introducing AIOps: Real-Time Visibility, Automation, and Predictive Insights - The Video

1423

Solved

inside

Collaborator

3645

Block .lzn file extension in MTA Blade

3645

inside

Explorer

1463

R81.20 SmartConsole unresponsive

1463

Solved

inside

Explorer

5091

CoreXL is turned off by default on a brand new 9800

5091

Solved

inside

Participant

6117

Warning Messages: cp_timed_blocker_handler

2685

inside

Admin

8377

What's New In R82.10 December 2025: Video, Slides, and Q&A

8377

Solved

inside

Contributor

1405

Smart Console Hits count column

1405

inside

Employee

2974

Harmony DLP Browse: Control, Monitor, and Protect Sensitive Data

2974

Solved

inside

Advisor

2038

Introducing AIOps: Real-Time Visibility, Automation, and Predictive Insights

3689

Solved

inside

Participant

2148

Unable to Access the SAP Server form the VPN tunnel

2533

Solved

inside

Participant

1156

Quantum Gateways - NGTP and NGFW

1156

Solved

inside

Advisor

3599

Log distribution performance - Impact on GWs verse log servers

3599

Solved

inside

Contributor

6381

One interface active cause ssh/https connectivity?

7636

Solved

inside

Advisor

1097

HTTPS Traffic Accepted via Implied Rules

1097

inside

Explorer

7818

Configure site to site vpn between aws and checkpoint

7818

inside

Explorer

993

R82 SecureXL Flowchart - non accelerated packets

5730

inside

Mentor

30492

101

"UDP checksum is incorrect" - 100s of IPv6 DROPs in fw.log - TP/IPS responsible?

30492

101

Solved

inside

Advisor

983

can Check Point enforce image recognition?

983

Solved

inside

Collaborator

17551

What is SNMP OID for CP FW number of new connections?

17551

Solved

inside

Contributor

8014

SIC problem after upgrade to R81.20

8014

Solved

inside

Collaborator

2791

Process 'usim_x86' running for months, using 600+% CPU

2791

Solved

inside

Advisor

2490

Clarification When Upgrading to R82

1633

inside

Admin

548

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT

548

Solved

inside

MVP Diamond

1068

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT recording

1068

inside

Advisor

4082

Your First Response: Immediate Actions for Cyber Incident Containment- AMER - Recording

785

inside

MVP Diamond

2978

Post Quantum Cryptography (PQC)

2978

Solved

inside

Advisor

3522

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA - Recording

519

inside

Contributor

8678

Error logs in Threat Emulation

8678

inside

Collaborator

499

Why Doesn't Checkpoint MTA Detect Obfuscated JS in Email HTML Body (eval/atob)?

499

inside

MVP Diamond

960

Https inspection and urlf/appc blade settings I found work the best

960

inside

Collaborator

7385

arping responses not showing on newer appliances

4996

inside

Advisor

5234

MFA Behavior on Gaia Portal – R81.20 Jumbo Hotfix Take 118 and 113

1793

inside

Explorer

1438

Site to Site VPN issue (Checkpoint To ASA)

1438

Solved

inside

MVP Diamond

8439

What is UPPAK, KPPAK vs. USFW, KSFW

8439

inside

MVP Diamond

5000

Performance Tuning Tip - VPN Speed Test

5000

inside

Explorer

716

Deny Multiple Services in a Single Rule

1550

Solved

inside

Advisor

752

R82.x Architecture and Performance Tuning - Link Collection

1317756

295

Solved

inside

Contributor

4517

Migrating from ClusterXL to ElasticXL steps

3516

Solved

inside

Collaborator

1913

Proxy arp issue - automatic NAT rule

1913

Solved

inside

Participant

6081

Setting up Checkpoint 5800 appliances behind a Residential AT&T modem/router

6081

inside

Explorer

5550

Cannot access to Product Evaluation

1283

Solved

inside

Explorer

3399

Allow older clients to connect to this gateway disabling L2TP+IPSec mode

3399

Solved

inside

MVP Diamond

910

VXLAN - Perfomance optimation question

910

inside

Advisor

1361

ClusterXL Forced Failover command

1361

inside

MVP Diamond

1963

Mini Concept – VPN Layer 2 tunneling between two data centers

1152

inside

MVP Diamond

529

Remote Access Location Awareness - DC Check

1644

Solved

inside

Advisor

1316

Pasting clish BGP MD5 secrets?

1316

inside

Contributor

1587

Remote Access Authentication with Certificate and Group Membership Retrieval

1587

inside

Admin

1393

Software Blade effectiveness with and without HTTPS Inspection - sk184185

1393

Solved

inside

MVP Diamond

3384

SmartConsole Extension Issue in R81.20/R82

3384

inside

Participant

756

Remote Access VPN & Site-to-Site tunnels broken (“invalid cookie” / SA desync) after upgrade

756

inside

MVP Diamond

3984

Check Point Appliances - Overview

3984

Solved

inside

Collaborator

1269

R77.30 VS migration from legacy VSX cluster to new one on R81.20

1269

Solved

inside

Advisor

1291

Can I implement Identity Awareness without using a PDP/PEP Broker?

1291

Solved

inside

Collaborator

1733

Gateway blades suddenly expiring despite having valid licenses

1733

inside

MVP Diamond

4157

Bootable USB from ISO for open servers

3513

Solved

inside

Explorer

9285

Management Interface (eth0) assigned via DHCP - cannot remove the static IP of the interface

9285

Solved

inside

Collaborator

1267

Identity Awarness upgrade (cross platform)

1267

Solved

inside

Participant

2885

P2P Config compatibility in Active/Standby Cluster

2139

Solved

inside

Participant

1492

Introducing new Acceleration NIC 4x10/25G for Quantum Force appliances

6173

inside

Contributor

7567

CCSA/CCSE Labs on HP Notebook - Performance Issue

7567

inside

MVP Diamond

876

Evolution of Check Point's website 1996 - 2025

876

Solved

inside

Contributor

2228

CPX 2001 - An Internet Security Event

1211

inside

MVP Silver

2491

R82 Streamed SmartConsole (Smart-1 Cloud) issue with Gateways and Servers view

2491

inside

Contributor

1969

Get interfaces WITH/WITHOUT topology

1969

inside

Contributor

4111

VPN IPSec Tunnel with Sophos IKEv2 Issue

4111

inside

Advisor

6137

Traffic is not visible on management.

6137

Solved

inside

Advisor

1261

9800 interfaces links down but switchports up

1608

inside

Contributor

1695

Best Practices for Websites and Applications

1695

Solved

inside

Advisor

2040

CVE-2025-32728 - permanent solution?

2040

inside

MVP Diamond

1873

VSX on Check Point 9300/9400 Appliances

1873

Solved

inside

Collaborator

2590

IPsec VPN between Checkpoint and Remote Server

2590

inside

Explorer

1050

Management-Server: Addition NIC or VSX-Cluster?

1050

inside

Collaborator

4225

Port 19009 on MGMT Server Accessible from Internet via Implied Rule Despite GUI Clients List

4225

inside

Admin

549

Tips and Tricks 2025 #13 - Strategic Cyber Assessments: How to Strengthen Your Security Posture

549

inside

Admin

1787

Learn About CheckMates October 2025

1787

inside

MVP Diamond

7866

HowTo: Configure a VPN between FortiGate & Check Point

7866

Solved

inside

MVP Gold

1497

Can I configure complex views using smart reporter?

1497

Solved

inside

Contributor

709

turning off secureXL resolves mac flapping?

709

Solved

inside

MVP Gold

1529

Identifying failed ISP in case of ISP redundancy

1529

Solved

inside

Advisor

1063

Minimum RAM and CPU requirements for S1C Management

1063

Solved

inside

Participant

2559

How are you keeping up with Check Point VPN/SIC Certificates

1788

inside

Authority

1660

Notification about changes within Support Life Cycle

1660

inside

Collaborator

4014

SIC not automatically renewing certificate in VSX

1069

Solved

inside

Explorer

1052

Secondary MDS Migration and IP Change

1052

Solved

inside

Advisor

4647

ClusterXL – Should the standby member ever generate traffic with the VIP?

4647

Solved

inside

Advisor

1882

R82 - ssl inspection auto bypass question

1882

inside

MVP Diamond

1009

Tips and Tricks 2025 #12 - Check Point PRO Support Overview & Update

381

Solved

inside

Collaborator

865

Are Logs Still Visible If Only the index File Remains?

865

Solved

inside

Participant

64870

Best way to whitelist KnowBe4 Phishing domains?

64870

inside

MVP Diamond

1133

Special functions via policy - name field

1133

Solved

inside

Collaborator

1466

Using Identity Awareness Collector with Cisco FTD Syslogging

1466

inside

Participant

1402

Firewall is freezing/crashing randomly after upgrade to R82

1402

inside

Participant

1401

How to allow redirects on Cloudflare

1401

inside

Explorer

6911

R82 http proxy and dns proxy forwarding domains not working

6911

inside

Admin

1970

BRICKSTORM: A Stealthy Espionage Campaign Targeting Enterprise Infrastructure (sk184082)

1970

inside

MVP Platinum

4259

Ongoing issue: high CPU load fw_workers + rad

4259

inside

Advisor

992

How to safely reuse an existing cluster

992

inside

Advisor

8211

unable to ssh to device after JHF upgrade

8211

Solved

inside

Advisor

2391

Difference Between Configuring Proxy on Firewall CLI vs Cluster Object in SmartConsole

2391

Solved

inside

Participant

3588

Proxy HTTP/HTTPS - two sessions

3588

inside

MVP Gold

556

What should be the settings for ingesting logs in SIEM for self managed spark devices

556

Solved

inside

Explorer

2926

Unable to remote save snapshot via SCP.

2926

inside

Advisor

3679

forklifting 5xxx appliances -> 9100 UPPAK observations

3679

inside

Advisor

690

ISP redundancy and VPNs to azure

690

Solved

inside

MVP Diamond

575

An idea from customer about web UI jumbo hotfix install

575

Solved

inside

Collaborator

3667

HTTPS inspection - Create a CSR for an external CA to use for the outbound certificate

3667

inside

Employee

2097

Jumbo Hotfix Accumulator for Quantum Force 3900 Appliances take #22 has been released today

2097

Solved

inside

Contributor

1868

Migrate eth interface to a VLAN interface in bond

1868

Solved

inside

Participant

1583

Strange BGP announcement of a /31 network as /32

1583

Solved

inside

Advisor

1719

Clarification on “Check Point 6200P” Model

1719

Solved

inside

Explorer

1273

Memory cache usage on 16200 appliance – expected behavior?

3369

inside

Employee

15575

Announcement: Check Point R82 - Recommended Release

15575

inside

Advisor

710

Global Policy Package - Skip/Goes to Domain Layer action

710

Solved

inside

Collaborator

2703

Question About Default Threat Prevention Profiles

751

Solved

inside

Advisor

1107

R81.20 Global Properties Stateful Inspection default settings

1107

inside

MVP Silver

1488

Common Criteria for Harmony Endpoint Security with compliance to 2 NIAP Protection Profiles

1611

Solved

inside

Admin

19168

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

19168

Solved

inside

Contributor

1350

Single VSY within VSX environment wont send logs to dedicated log server

1350

inside

Champion

23483

Configuring dynamic routing in clustered VSX

23483

inside

Collaborator

2779

Failed login SmartConsole after upgrade Win11

2779

Solved

inside

Advisor

2894

Tip: How to deal with RAD errors

2601

inside

Explorer

977

Server Error in '/owa' Application

977

inside

Contributor

9449

VPN issue stuck in Phase 1 and sometimes disconnects

9449

Solved

inside

MVP Gold

1342

new transciever CPAC-TR-25SR-DM

951

inside

MVP Gold

785

UPDATE - DigiCert Certificate Expiration Mitigated

5680

inside

Advisor

1064

idrac - how to create account with admin role

1064

inside

Employee

5257

Introducing the New Interactive Ideas Portal – Join the Pilot!

5257

inside

Contributor

2446

Process file types known to contain malware

2446

Solved

inside

Participant

35879

useful debug command in checkpoint

35879

inside

Contributor

1229

Route Based VPN Network SA no route

1229

inside

MVP Gold

1394

Can not access smart console over site-site VPN

1394

Solved

inside

Explorer

771

External Certificates for IPSEC VPN

771

inside

Advisor

912

Rewriting internet access policy

912

Solved

inside

Participant

4953

Site to site vpn drops on policy install

4953

inside

Collaborator

802

Customer FTP traffic keeps triggering new IPS protections

802

inside

Collaborator

6306

Trusted CA List is missing a lot

6306

inside

Advisor

1506

Install Policy pushed but still visible by other admin

538

Solved

inside

Advisor

2676

CPUSE v2606 manual installation failure

1662

inside

Employee

530

R82 Jumbo Hotfix Accumulator take 39 has been released

530

inside

Advisor

1627

Best Way to Export Policy Package for Reporting

1627

Solved

inside

Advisor

4600

Regenerate Token for MaaS Tunnel

4600

inside

Collaborator

1285

a third-party certificate on a clustered and centrally managed Appliance 1900

562

Solved

inside

Participant

1163

Checkpoint 19000 Supported Transceivers Sync

1163

Solved

inside

MVP Gold

1299

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

1299

inside

Explorer

1002

Testing primary and secondary bond interfaces

1002

Solved

inside

Participant

1175

Best Practices for Threat Prevention API Calls to Appliance - API repository

1175

inside

Advisor

704

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

704

Solved

inside

Collaborator

1154

What are the new NAT options in SMS and GW for?

1154

Solved

inside

Contributor

10365

Traffic initiated from Lan to VPN Endpoint Client Blocked

2760

inside

Participant

3757

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

3757

Solved

inside

Advisor

10864

Quantum Force 9000 Appliance OS version Compatibility

1345

inside

MVP Diamond

1095

Help Shape the Future of AI at Check Point

804

inside

Collaborator

3501

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

3501

Solved

inside

Collaborator

2467

Firewall - Automating Firewall Rule Cleanup Based on Usage

2467

inside

Employee

3439

CVE-2025-45582 - tar: Tar path traversal

3266

Solved

inside

Advisor

1532

Peer certificate verification failed after certificate replacement

1532

Solved

inside

Contributor

21265

How to list arp table and identify network devices with mac under Check Point FWs

21265

Solved

inside

Explorer

1854

Remote Access VPN – Can specific routes be assigned to particular users?

1854

inside

MVP Diamond

2692

R8x - Performance Tuning Tip - Appliance Sizing

2692

inside

Participant

5233

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

4049

Solved

inside

Collaborator

1403

add rule to policy via mgmt_Cli fails

1403

inside

Explorer

855

Behaviour after regular contract/subscription expiration

1152

Solved

inside

Advisor

1834

Log file isn't shown automatically after upgrade to R82

1834

Solved

inside

Explorer

1217

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

1217

Solved

inside

Explorer

3825

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

3825

inside

Participant

1898

7000 appliance R81.20 iSO image install

1898

inside

Explorer

550

Unable to take ssh for MGMT Port

550

Solved

inside

Advisor

1056

Updatable (geo) objects and IP addresses, again

1056

Solved

inside

Advisor

2094

Renaming a Gateway Node in a Cluster

2094

Solved

inside

Advisor

1404

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

1404

inside

MVP Diamond

881

R82.10 - Hardware Security Module (HSM) for TLS 1.3

881

Solved

inside

Advisor

5314

How do you keep track of the latest FW/OS updates?

5314

Solved

inside

Advisor

5828

Manual FTP transfers are always corrupted while scheduled backups are not

2307

inside

Employee

761

Estimated R82 release recommended date?

9721

inside

Collaborator

6779

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

6779

Solved

inside

Participant

1038

Monitord process consume high cpu, does it safe to terminate the process during production hour?

1038

inside

Collaborator

2533

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

2643

Solved

inside

Contributor

2508

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

2508

inside

MVP Diamond

6232

'fw ctl conntab -x' issue in R81.10

6232

Solved

inside

Advisor

1915

How to view the connections of the dynamic dispatcher's table

1915

inside

Explorer

6449

A suspicious traffic log was observed during monitoring

1022

inside

Admin

8470

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

8470

inside

Explorer

706

I need Check_Point_R81.20_T631_ScalablePlatform

1563

inside

Participant

9553

Questions about User Mode and Kernel Mode

9553

inside

Explorer

2392

Cannot start Mobile Access Portal Agent

2392

inside

Advisor

1046

Openserver Dell R660xs, anyone ever tried this machine?

1046

inside

Explorer

2534

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

3054

Solved

inside

Collaborator

32452

Unable to establish the SIC(Outgoing Policy)

915

inside

Employee

1579

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

10901

inside

Admin

4177

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

4177

inside

MVP Gold

988

RA clients not able to access external cluster interface

988

inside

Explorer

1137

Microsegmentation with Firewall Hardware

1137

inside

Explorer

1017

the new subnets are unable to communicate through the existing VPN tunnel

1017

inside

Participant

1864

SMS migration from XCP-NG to ProxMox

1864

inside

Advisor

5466

Take logging out of the implied rules

2281

inside

MVP Diamond

3689

SmartConsole Shortcuts - cheat sheet

3689

inside

Explorer

1397

I can't find how my dns host is used within the FW object.

1397

inside

Explorer

5947

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

5947

Solved

inside

Explorer

1640

BGP route on Maestro Active/Active are showing as inactive/unusable

1640

inside

Employee

869

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

869

Solved

inside

Contributor

2813

LOM interface - Console Session

2813

Solved

inside

Advisor

2500

Reducing /var/log partition size on Gaia OS

2500

Solved

inside

Collaborator

22145

https inspection tip/feedback/suggestion

1918

inside

Explorer

1040

Disable Camelia Cipher on the firewall

1040

inside

Collaborator

1667

always-connect for standalone vpn client

1667

Solved

inside

Collaborator

3191

Policy Installation Failed(Time out)-SMB Appliance

3191

Solved

inside

Admin

6681

New Products Introduction July 2025: Video, Slides, and Q&A

6681

Solved

inside

Advisor

1275

Export all gateways IPs MDS + VSX

1275

inside

Collaborator

2161

Unable to access Site(CPNotEnoughDataForRuleMatch)

2161

inside

Employee

849

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

849

Solved

inside

Advisor

5977

Clarification Needed on fwaccel stat

5977

Solved

inside

Explorer

1502

How to renew GAIA web certificate.

1502

Solved

inside

Advisor

3418

Deleting a Checkpoint host object from smart console

1122

Solved

inside

Contributor

3021

Netflow Export with Physical Ip in cluster environment

647

Solved

inside

Advisor

1342

Moving a Gateway from One CMA to Another

1342

inside

Explorer

1074

Logs not showing up in SmartConsole after policy install

1074

inside

Collaborator

3333

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

557

inside

Admin

809

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

809

inside

Collaborator

962

synchronize Identity sharing between the active and passive node

962

Solved

inside

MVP Diamond

53119

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

729

Solved

inside

Advisor

1564

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

1564

Solved

inside

Employee Alumnus

5929

What is the difference between Custom Intelligence feed and Network Feeds ?

5929

inside

Explorer

1473

Static Hide Behind Gateway NAT

5050

inside

Admin

721

From OT to Cloud: A Security Blueprint for Manufacturers EMEA - Recording

721

inside

Employee

18958

New 3900 Branch office applainces were launched today 28/5

18958

Solved

inside

Collaborator

976

telnet showing open port on ILO when its not when going via FW

976

inside

Explorer

3224

Allow rule for site hosted on akamai CDN, only the first dns response seems to work

3224

Solved

inside

Explorer

1534

Identity Awareness Agents SK with direct links - published!

21033

inside

Advisor

1021

Fresh Install Without USB, Possible From Boot Menu?

1021

Solved

inside

Advisor

1850

simple question about ISOmorphic

1850

inside

Advisor

685

IPSec tunnel Setup [HUB and SPOKE Scenario] with Both spokes being non-checkpoint VPN Gateway

2256

Solved

inside

Advisor

695

At a gateway, how do I determine what domain the gateway belongs to?

2367

inside

Advisor

2504

Policy location on a gateway R80

10152

Solved

inside

MVP Silver

885

GMSA/automated password rotation for Identity

885

inside

Collaborator

15331

Identity awareness collector changes user identity for same IP while connecting to RDP

15331

inside

Explorer

834

SNMP Issue after JHF 99 R81.20 VSX cluster

834

Solved

inside

MVP Gold

6859

Upgrade is failing from R81.10 to R82

6859

inside

Collaborator

2442

Clarification on DNS Reputation Logs

2442

inside

Employee

2782

Quantum Force performance boost is available post the release of R82 Jumbo #3 ( Take 25)

2782

inside

Advisor

1835

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Tue 13 Oct 2026 @ 06:00 PM (IDT)

AI Security Masters: LGTM: Bypassing an LLM Build Gate When Prompt Injection Fails

Virtual

Wed 14 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Secure Load Balancing

Wed 14 Oct 2026 @ 01:00 PM (EDT)

Securing AI Apps & Agents

Virtual

Thu 15 Oct 2026 @ 05:00 PM (CEST)

What If Email Security Ran Your Security Awareness Program?

Virtual

Tue 20 Oct 2026 @ 05:00 PM (CEST)

EMEA: Beyond the Basics: Designing Identity Awareness for Large-Scale Environments

Virtual

Tue 20 Oct 2026 @ 03:00 PM (EDT)

AMER: Beyond the Basics: Designing Identity Awareness for Large-Scale Environments

Virtual

Wed 14 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Secure Load Balancing

Virtual

Thu 15 Oct 2026 @ 05:00 PM (CEST)

What If Email Security Ran Your Security Awareness Program?

Virtual

Tue 20 Oct 2026 @ 05:00 PM (CEST)

EMEA: Beyond the Basics: Designing Identity Awareness for Large-Scale Environments

Virtual

Tue 20 Oct 2026 @ 03:00 PM (EDT)

AMER: Beyond the Basics: Designing Identity Awareness for Large-Scale Environments

Virtual

Wed 21 Oct 2026 @ 11:00 AM (EDT)

TechTalk: What’s new in Agentic Network Orchestration

Virtual

Thu 22 Oct 2026 @ 11:00 AM (EDT)

Under the Hood: Check Point SASE | Enterprise Browser

In-Person

Wed 21 Oct 2026 @ 09:00 AM (BST)

AI Security Workshop - Glasgow

In-Person

Tue 27 Oct 2026 @ 08:00 AM (CET)

Cloud & SASE Security Workshops, London

In-Person

Thu 29 Oct 2026 @ 11:00 AM (PDT)

Irvine, CA: Secure the Network, the App, and the Workforce: A Hybrid Mesh & SASE Briefing

In-Person

Wed 04 Nov 2026 @ 11:00 AM (EST)

Toronto: Agentic AI Security Deep Dive & Hands-On

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?