General Topics

What’s New in Identity and Trust?
11 November @ 5pm CET / 11am EST

AI Security Masters
Security in the Pace of AI:
From Threat to Force Multiplier

CPX is Back!
Join us in Las Vegas, Vienna, and/or Bangkok!

Learn More

What’s New in Agentic Network Orchestration

Watch Here!

CheckMates Go:
Fun Ding

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Contributor

18599

NAT Exhaustion - Hide NAT failures

18599

inside

Advisor

18599

Showing logs "Missing OS Route" when place new CP Appliance (Suspect ARP issue)

18599

inside

Advisor

18599

LDAP Authentication failed in SSL VPN

18599

inside

Participant

18499

Request for VSX training Videos R80.10 or R77.X

18499

Solved

inside

Contributor

18499

SmartEvent - Error (CPSEMD not running)

18499

inside

Champion

18499

Announcement – Check Point Firewall Administration R81.10+ book update

18499

Solved

inside

Contributor

18487

How to allow specific youtube video categories?

18487

inside

Explorer

18396

Domain object is not working in R80.10 properly

18396

inside

Collaborator

18302

ISP Redundancy & Policy Based Routing

18302

inside

Employee

18300

DNS problems possibly due to firewall issue

18199

Solved

inside

Advisor

18100

ISOmorphic Tools bootable flash creation for R80.40

18099

Solved

inside

Contributor

18099

How to check telnet is enable or not.

18099

Solved

inside

Advisor

18099

VPN1-Edge | SBXW-166LHGE-4 - compatible software

18099

inside

Participant

18099

Route Based VPN with Azure in Cluster Environment

18099

inside

Participant

17999

Tunnel mode VPN and Transport mode VPN

17999

inside

Employee

17900

User-Space firewall support for R80.30 3.10 and above

17900

inside

Contributor

17900

failover logic operation in VSX?

17900

Solved

inside

Contributor

17900

Vulnerability-ssl-weak-message-authentication-code-algorithms for Port 8211

17900

Solved

inside

Participant

17899

High CPU utilization causing slowness

17899

inside

Participant

17899

Getting error “dropped by fwpslglue_chain Reason: PSL Drop: internal - streaming;"

17899

inside

Collaborator

17899

RX-DRP/rx_missed_errors on Interface

17899

inside

Contributor

17899

What does Sticky Decision Function DO?

17899

inside

Explorer

17899

Delete a specific connection entry in Checkpoint Gateway

17899

inside

Contributor

17800

Share your feedback for your chance to WIN new Apple AirPods Pro!

17799

inside

Contributor

17799

Quick mode Received Notification from Peer: invalid id information

17799

inside

MVP Silver

17699

Management problem with GAIA OS

17699

Solved

inside

Collaborator

17599

What is SNMP OID for CP FW number of new connections?

17599

inside

Contributor

17599

ClusterXl synchronization network bandwidth

17599

inside

Collaborator

17598

Question on traffic handling between Kernel Mode FW and Usermode FW

17598

inside

Explorer

17500

Creating multiple VPN site to site connections on CheckPoint

17500

Solved

inside

Contributor

17499

How can I monitor BGP state using SNMP?

17499

inside

Explorer

17498

can I export the list of web application categories

17498

Solved

inside

MVP Gold CHKP

17491

First impressions R80.30 on gateway - one step forward one (or two back)

17491

inside

Collaborator

17400

Permit ICMP request only in several networks

17400

inside

MVP Diamond

17399

R80.x - Performance Tuning Tip - Management Data Plane Separation

17399

inside

Contributor

17399

Unable to open URL Categorization link

17304

Solved

inside

Explorer

17300

r80.10 all-in-one evaluation license activation?

17300

Solved

inside

Contributor

17300

Installation failed. Reason: Load on Module failed - failed to load security policy

17199

inside

Contributor

17199

Setting Up Site-to-Site VPN to 3rd Party Gateway

17199

inside

MVP Gold

17199

https Traffic Dropped ... due to Out of sequence TCP packet retransmission. Stripping all packet dat

17199

inside

Contributor

17191

Microsoft Activation negatively impacted by HTTPS Inspection

17191

Solved

inside

Participant

17100

CoreXL option disabled in cpconfig

17100

inside

Contributor

16999

How to create QoS rule to limit bandwith per user

16905

inside

Contributor

16900

Bandwidth limit per app /category

16900

inside

Collaborator

16900

Application Control can not catch Opera web browser VPN

16899

Solved

inside

Advisor

16800

Problem with VPN AMAZON(AWS) CHECK POINT

16799

inside

Explorer

16799

Site-to-Site VPN connection issue with CISCO ASA

16799

inside

Advisor

16772

Slowness when Accessing HTTP traffic over Remote Access VPN

16772

Solved

inside

MVP Gold

16700

Checkpoint firewall logging source interface

16699

inside

Participant

16699

fw_full process consumes 100% CPU

16699

inside

Advisor

16699

R80.10 - VPND process utilizes a large amount of CPU

16699

Solved

inside

Contributor

16699

Ipsec VPN b/w checkpoint cluster and Azure gateway

16699

Solved

inside

Contributor

16699

Hacking DNS TechTalk: Video, Slides, and Q&A

16699

inside

Contributor

16699

Reg: policy installation failed on gateway

16504

Solved

inside

MVP Silver

16500

Encryption domain mismatch even though its set it up correctly

16499

inside

MVP Silver

16499

Is Check Point Gaia vulnerable towards this new cve-2024-6387 in OpenSSH?

16499

inside

Participant

16400

Route Based VPN on one side and Domain Based VPN on other

16399

inside

Contributor

16399

Firewall priority queues setting

16399

Solved

inside

Collaborator

16399

What different for Content Awareness and Data Loss Prevention blade

16399

inside

MVP Diamond

16300

R80.20 - SYN Defender on SecureXL Level

16300

inside

MVP Diamond

16299

ONELINER - Check CVE-2024-24919 Vulnerability

16299

inside

Contributor

16298

How to Prepare a lab for checkpoint using vmware

16296

inside

Admin

16293

New updatable object for HTTPS Inspection: HTTPS Services Bypass

16293

Solved

inside

Participant

16199

Security Policy Management without SmartConsole

16199

Solved

inside

Collaborator

16199

Connection rematch after policy installation

16199

inside

MVP Diamond

16199

RFID token authentication with R81+ Raspberry Pi

16199

Solved

inside

Participant

16100

Smartconsole cant connect to firewall in GNS3

16100

Solved

inside

Contributor

16099

Change Management IP addresses in Cluster

16099

inside

Admin

16099

fw ctl zdebug - this is wrong...

16099

Solved

inside

Advisor

16098

how to disable SecureXL for specific src to specific dst

16098

inside

MVP Gold CHKP

16098

Security Gateway Performance Optimization - VSX

16098

inside

Participant

16096

Zoom Meeting Issues with SecureXL

15999

Solved

inside

Collaborator

15999

Disable SecureXL permanent R80.20

15999

inside

Explorer

15900

Basic commands used in checkpoint for troubleshooting and the features?

15900

Solved

inside

MVP Diamond

15900

HTTPS inspection in R77.30 and R80.10 with various combinations of proxy and probe bypass

15899

inside

Advisor

15799

Lots of First packet isn't SYN

15799

Solved

inside

Contributor

15798

NMAP Shows Ports 5060 & 2000 Open

15798

inside

Participant

15699

Does 4600 Appliances supports upgrade to R80.20?

15699

inside

Employee

15699

Announcement: Check Point R82 - Recommended Release

15699

inside

Admin

15697

R80.20 has recommended status now!

15697

Solved

inside

Advisor

15681

Zero Downtime Upgrade - R80.10 - R80.40

15681

inside

Contributor

15600

Check Point configuration mistakes - Top 10

15500

Solved

inside

Explorer

15500

Check Point Security Gateway as HTTP/HTTPS Proxy

15500

Solved

inside

Contributor

15499

Local backup issue /var/log is full

15499

inside

Collaborator

15499

Manually define local VPN Domain per remote peer

15499

Solved

inside

Explorer

15499

White Paper - How to Batch Categorize URLs

15403

Solved

inside

Authority

15403

Printernightmare CVE-2021-1675

15403

Solved

inside

Collaborator

15401

Domain objects (FQDN mode) vs Custom Applications/Sites

15401

inside

MVP Silver

15400

Exporting Objects/Groups in R77.30

15400

inside

Collaborator

15400

Identity awareness collector changes user identity for same IP while connecting to RDP

15400

inside

Participant

15400

Issue with Checkpoint Identity Agent

15400

inside

Admin

15399

ICMP is sometimes drop when send via IPSec Tunnel

15399

Solved

inside

Contributor

15300

Is CP planning to support Load-Sharing in future releases?

15300

inside

Advisor

15300

VPN tunnel with Dynamic IP address.

15300

Solved

inside

Collaborator

15299

Failed to connect to SMTP server - smtp Traffic Rejected

15299

inside

Collaborator

15299

getting certificate error when trying to connect to a site

15299

Solved

inside

Advisor

15200

Failed to deccrypt CP Site Response...

15200

inside

Contributor

15199

Deploying Check Point Solution R80.40

15199

Solved

inside

Collaborator

15199

interaction between VRRP and CXL - why is there a tickbox for ClusterXL when the cluster is VRRP

15199

inside

Explorer

15199

Issues with Identity Awareness - some users are not seen and some traffic is incorrectly marked

15199

inside

Participant

15199

Having trouble connecting to Check Point 1430/1450

15199

Solved

inside

Explorer

15199

R80 CCSA/CCSE training material and exams

15199

inside

Contributor

15193

The license it is impossible to detach it in smartupdate

15193

inside

Participant

15099

Identity Awareness issue - User identified but the rule is not matching

15099

inside

Collaborator

15098

No authentication for port 18231 Policy Server Login (old)

15098

inside

Participant

15087

6800 stability Issue - R80.10 w\/Take 203 or R80.20 w/ Take 74

15087

Solved

inside

Contributor

15000

Custom Application Site url substring wildcard

15000

inside

Contributor

14999

How to Block TOR NODE is Checkpoint Firewall R80.30 Version

14999

Solved

inside

Collaborator

14991

CoreXL: only one SND core is busy

14991

Solved

inside

Collaborator

14900

Maestro integration with Cisco ACI

14900

inside

Collaborator

14900

SPLAT R75.40 - disable TCP / ICMP timestamp

14900

inside

Contributor

14899

Update appliance 1490 os R77.20.70 to R77.30 or R80?

14899

inside

MVP Diamond

14899

Performance Tuning - Bufferbloat

14899

Solved

inside

MVP Gold CHKP

14801

Domain objects in R80.10 spamming DNS

14801

inside

Employee

14800

R81.10 End-of-Support extension

14800

inside

Participant

14799

Production cluster upgrade R77.30 to R80.10

14799

Solved

inside

Contributor

14799

WSDNSD high cpu + Strange messages

14799

inside

Explorer

14799

Duplicate services - which will be used?

14703

inside

Participant

14700

Command to show history of ClusterXL member status

14699

inside

Advisor

14699

OpenSSH Vulnerability detection

14699

inside

Admin

14699

CheckMates Fest 2025: Video and Q&A

14699

inside

MVP Diamond

14599

R80.x - Performance Tuning Tip - Control SecureXL / CoreXL Paths

14599

inside

MVP Diamond

14599

Switch or Cable between ClusterXL members for the sync network?

14599

Solved

inside

Contributor

14599

What is the practical example to use Bridged Mode?

14500

inside

Contributor

14499

can ping internet but unable to browse

14499

Solved

inside

Advisor

14499

Checkpoint IPSO vs SecurePlatform vs Gaia

14499

inside

Contributor

14401

How does Domain Management Server (CMA) get to the internet?

14401

inside

Admin

14400

White Paper - URL Filtering Best Practices for the Large Scale Deployment

14400

inside

MVP Diamond

14399

R80.40 - Multi Queue on VMWare vmxnet3 drivers.

14399

inside

Contributor

14399

Error installation CP VPN E80.92

14399

inside

Contributor

14399

why 3000 series CPU core higher than 5000 series?

14399

inside

Participant

14399

Reminder for R80.20/30 End-of-Support on 30/9/2022

14300

inside

Admin

14299

Infinity R80.10 "Cool Feature of the Day" - Content Awareness

14299

inside

MVP Diamond

14299

R77.30: New Jumbo Hotfix (Take 338) GA-Release

14299

Solved

inside

Admin

14299

Check Point Engage 2026 - Call for Papers

14299

inside

Advisor

14200

R80.10: New Jumbo Hotfix (Take 154) GA-Release

14199

Solved

inside

Advisor

14196

116

Check Point GAIA and PHP CVE-2026-109618 and CVE-2026-109619

14196

116

inside

Contributor

14100

How to migrate Full HA Cluster(r77.30 to r80.10)?

14100

Solved

inside

Collaborator

14099

need checkpoint document that has details of all field that are in logs

14099

inside

Collaborator

14099

The number of Virtual systems on VSX cluster with the HA license

13999

inside

Advisor

13999

LDAP groups in Remote Access VPN Rules

13999

inside

Participant

13904

Zero Downtime Upgrade From R77.30 to R80.20

13904

inside

Collaborator

13900

"CRLs failed to be downloaded" error when access SmartConsole R80.30

13799

inside

MVP Gold

13799

Cluster Falover after every change on pbr, routing, ospf,...

13799

Solved

inside

Explorer

13799

Cannot ping remote VPN gateway external IP

13799

inside

Admin

13799

R77.30 Sending Check Point Logs to a Syslog Server

13799

inside

Employee

13799

Notes on Script to Identify vulnerable Security Gateways for CVE-2024-24919

13799

Solved

inside

MVP Gold

13799

CVE-2024-3094 [CRITICAL Vulnerability Just Disclosed (CVSS-10)]

13799

Solved

inside

Explorer

13799

GotoAssist doesn't work when Inspection SSL is enable

13799

inside

Admin

13791

White Paper - Configuring NAT64 for Internet Access in R80.20

13791

inside

Participant

13699

CPSIZEME Download URL not working

13686

Solved

inside

Collaborator

13600

Meaning of flag in packet dropped

13600

Solved

inside

Explorer

13599

I have a Check Point model L-50 (serial number - 1310436119900) and I just need to know the throughput the series 1100 can handle?

13599

inside

Admin

13599

How To Open a Case with TAC and/or Account Services

13599

Solved

inside

Participant

13599

Destination Host Unreachable - 8.8.8.8 (intermittent)

13599

Solved

inside

Authority

13592

RX-OVR drops and 10 gb hardware buffer

13499

inside

Explorer

13499

New daemon or processes under R80.20!

13499

inside

Explorer

13399

VSX/ VS - Remote VPN clients connecting to 'other' VS in cluster

13399

inside

Contributor

13399

HTTPS Categorization ... a drama

13399

inside

Champion

13399

Enable multiple email addresses associated with account.

13399

Solved

inside

Contributor

13399

User data Failed to Upgrade R81 to R81.10 CPUSE GAIA PORTAL.

13397

inside

Contributor

13397

Problem while installing upgrade tools - Cannot detect the version of the installed upgrade tools.

13397

inside

Employee

13300

Important: R80.10 End-of-Support will take place in May-2021

13300

Solved

inside

Explorer

13299

When you enable HTTPS inspection, gmail does not work.

13299

inside

Explorer

13299

WEB_API constant log in - log out

13298

inside

Advisor

13199

URL Filtering Doesn't work on HTTPS

13199

inside

Employee

13199

R82: Parallel Processing Based Packet Flow

13199

inside

Admin

13199

May the 4th + 4 Paradigm Shift: Video, Slides, and Q&A

13199

Solved

inside

Participant

13199

End-of-Support policy updates for R80.10 software version

13199

inside

Champion

13199

Is SAML support available in r80.10?

13199

Solved

inside

Participant

13101

No ssh access to VPN peer outside IP

13101

inside

Advisor

13100

TCP port reuse between Check Point Remote Access Gateway and Loadbalancer

13100

Solved

inside

Collaborator

13099

Configuration Migration From Checkpoint 4200 Appliance to CP 4800 Appliance

13099

inside

Collaborator

13099

Unable to access new checkpoint gateway using WebUI

13001

inside

Participant

13000

Viewing Fan Status on non-Checkpoint Appliance

13000

inside

MVP Diamond

12999

R81 - Multi Queue (what's new)

12999

inside

Collaborator

12999

DNS Passive Learning Design Question

12999

inside

Admin

12999

End of Support for R77, R77.10, and R77.20

12999

inside

Collaborator

12999

What is the default time that HIT count data is kept in R80?

12999

inside

Explorer

12999

R80.20 SecureXL drop template support

12999

inside

Advisor

12901

Vulnerability on CheckPoint Banner disclosure

12901

inside

Contributor

12899

R80.40 policy install diff changes breaks the network

12899

inside

Collaborator

12899

The difference between checkpoint creation domain and Custom Applications/Sites creation URL

12899

inside

Explorer

12899

Difference between interface based and zone based firewall?

12899

inside

Collaborator

12899

Interesting traffic.. a parameter for Phase-2 negotiation?

12800

inside

Explorer

12800

Fragmented packet with IPS(R80.10)

12800

inside

Participant

12800

SIP signalling traffic being dropped erroneously

12800

inside

Collaborator

12799

SSL Medium Strength Cipher Suites Supported

12799

inside

MVP Diamond

12799

Homekit (Siri) integration with R81 Dynamic Objects

12799

inside

Participant

12799

Traffic dropped by Reason: PSL Drop: HTTP_DISPATCHER;

12799

inside

Participant

12791

command to check particular segment is already part of any encryption domain

12791

Solved

inside

Participant

12700

R80.30 – default version (widely recommended)

12699

inside

Collaborator

12699

FTP causes 100% CPU on one core

12699

Solved

inside

Explorer

12699

Syslog alert for power supply failure

12699

Solved

inside

MVP Gold

12698

USFW on appliances with less than 40 cores

12698

inside

Collaborator

12600

checkpoint not opening in WEB GUI

12600

inside

Participant

12600

HA clusterXL with Bond interfaces with Cisco switch

12600

Solved

inside

Participant

12599

Fragment Reassembly Time Exceeded Errors

12599

inside

Advisor

12599

R80.30 - Slow DMZ transfer performance

12599

inside

Champion

12599

Microsoft Office 365 Service Application Control

12599

Solved

inside

Contributor

12599

Configuring Cluster Addresses on Different Subnets

12599

inside

Employee

12598

CPUSE (Deployment Agent) new GUI

12598

Solved

inside

Contributor

12500

Firewall crashed reboots - vmcore crash file R80.30

12500

inside

Admin

12499

Platform URLs You'll Find Useful

12499

Solved

inside

Advisor

12499

Rule base checking if Application control and URL filtering blade is enable?

12499

inside

Contributor

12499

Failed to get metadata for the package

12467

Solved

inside

Contributor

12400

Natting to an IP range not directly connected

12400

Solved

inside

MVP Diamond

12400

R80.20 - More then 40 Cores for CoreXL?

12400

inside

Champion

12400

Precedence in the rule order processing in R80.20

12400

inside

Advisor

12399

Two Numbered VTI's between gateways managed by same Security Management?

12399

inside

Participant

12399

What are to the point differences between Automatic & Manual NAT?

12399

inside

Advisor

12399

Users reported web traffic stopped working

12399

Solved

inside

Advisor

12399

Import a trusted CA cert to Gaia OS

12399

Solved

inside

Advisor

12399

Error encountered processing a template

12399

inside

Advisor

12399

CoreXL affinity on VSX R80.10 does not survive reboot?

12399

inside

Contributor

12301

should i be worried about a key install to an unknown ip from the firewall?

12300

Solved

inside

Participant

12300

IKE Failure on Site to site IPSec VPN with Zyxel USG - open for suggestions

12299

inside

Contributor

12299

Site to Site vpn with 3rd party DAIP gateway

12299

inside

Participant

12299

Messages of mux error on a cluster (active-standby) in r80.20

12299

Solved

inside

Contributor

12299

Checkpoint as a Reverse Proxy for Skype for Business

12299

inside

Contributor

12299

Where can I check the phase 2 encryption domain on cli for existing vpn

12299

inside

Explorer

12299

IPSec Tunel - no nat in outbound traffic

12299

inside

MVP Diamond

12290

New VPN daemons in R81.10 / R81.20

12290

inside

Participant

12200

What happens when session timeout of 720 minutes ends in Identity Awareness

12200

inside

Admin

12200

Introducing the CheckMates MVP Program - Submissions for 2026 are now CLOSED!

12200

Solved

inside

Participant

12199

Move External Interface to different NIC

12199

inside

MVP Diamond

12199

R77.30 Take 292: New Jumbo Hotfix GA Release

12199

inside

Mentor

12197

Upgrade Reporter Progress (R80.30->R80.40 Standalone) - Stuck on Importing IPS Data ...

12197

Solved

inside

Participant

12189

R80.40 - Performance Tuning Tip - CPU Spike Detective

12099

Solved

inside

Contributor

12099

Trouble uploading video on course from linkedin

12099

inside

Explorer

12099

Wimax branch offices not able to browse

12099

inside

MVP Diamond

12099

Port forwarding to internal IP connected to other firewall.

12099

inside

Advisor

12099

AES-GCM support - IPsec Phase1

12099

inside

Collaborator

12099

Cluster down and policy installation failure after enabling HTTPS inspection

12099

inside

Participant

12099

Check Point Diagnostic Console (cdc)

12097

inside

Champion

12000

Should HTTPS inspection be accounted for in the appliance sizing charts?

12000

inside

Participant

12000

whitelist AWS S3 buckets using complex URI / URL patterns?

12000

inside

Participant

12000

General community posting questions

11999

inside

Contributor

11999

Experience with vulnerability scanner in the internal network

11999

inside

Employee Alumnus

11903

Brainstorming for a new DLP platform – we want to hear from you!

11903

inside

Contributor

11900

Renew external (3rd party) certificate for IPSEC VPN

11900

inside

Participant

11900

SMTP Server Non-standard Port Detection

11900

Solved

inside

Contributor

11900

Need help to configure log forwarding to syslog server SIEM from checkpoint management server

11900

Solved

inside

MVP Diamond

11899

High Performance Firewalls - ESX vs. Open Server

11899

inside

Mentor

11899

fw monitor/tcpdump and "fwaccel off" - yes or no

11899

inside

Explorer

11899

Blocked HTTPS requests are not getting a UserCheck message

11899

Solved

inside

Collaborator

2931

Checkpoint Management ESX VM- resizepart R81.20

2931

inside

MVP Diamond

457

Product Center - device state?

1391

Solved

inside

Collaborator

10029

how to explain the following ?

10029

inside

Collaborator

3766

Traffic logs only go back about 25-days, best way to improve this?

3766

inside

MVP Diamond

812

FW health/HA/Internet connectivity scripts

812

inside

Contributor

3054

CheckMates Fest 2026: Video and Q&A

7872

inside

Participant

1910

Application Control Issues with Apps using AWS S3

1910

inside

Collaborator

654

Identity Agent Distributed Configuration Tool - The server is not Reachable

654

Solved

inside

Collaborator

1194

Identity Agent Distributed Configuration Tool - not as expected ??

1194

Solved

inside

Collaborator

2234

R82.10 approximate release date?

10380

inside

MVP Silver

10353

Check Point VPN route with low metric overriding more specific route from another tunnel

1852

Solved

inside

Advisor

2002

Monitor Mode Interface Policy Installation Error Despite Correct Topology Settings

1674

inside

MVP Diamond

1075

TIP - SmartConsole startup issues

1075

Solved

inside

Advisor

7015

Upgrade from R81.10 to R82 (Question)

7015

inside

MVP Diamond

970471

376

163

R81.x Security Gateway Architecture (Logical Packet Flow)

970471

376

163

inside

MVP Silver

3806

Check Point Firewall: Configuring a Layer 2 Bridge (Transparent Firewall)

3806

Solved

inside

MVP Silver

2030

Feature Request - HTML Health Check Reports

1240

Solved

inside

Advisor

3590

Support site security advisories link

3590

inside

MVP Diamond

2071

2025 CP community and company achievements

2071

Solved

inside

Employee Alumnus

60174

Policy Insights: Your AI-Powered Firewall Assistant

5359

Solved

inside

Explorer

2826

Firewall behavior when handling terminated TCP connections

2826

inside

Participant

5141

error Clear text packet should be encrypted

5141

inside

Collaborator

1713

Checkpoint Endpoint VPN - 2 VPNs, only one works (via Endpoint VPN)

1713

inside

Admin

2064

Happy New Year - Let's Celebrate 2026 Together

2064

Solved

inside

Collaborator

11352

VPN Redundancy b/w two Gateways

1742

Solved

inside

MVP Gold

3403

CVE-2025-68615 Net-SNMP snmptrapd crash

3403

inside

Explorer

1059

Request for enhancements for filtering in SmartConsole

1031

Solved

inside

Advisor

3444

Unlocking the Power of Policy Insights: Features, Benefits, and a Technical Deep-Dive Video

1649

inside

Employee

2430

Adaptive IPS – Smarter Performance-Aware Intrusion Prevention

2430

Solved

inside

Collaborator

3904

Checkpoint FW R81 don't block SYN FLOOD

3904

Solved

inside

Collaborator

6912

Domain objects in remote access encryption domain.

6912

inside

Collaborator

648

How to lock change method authentication VPN on Client Security

648

inside

Employee

1437

Introducing AIOps: Real-Time Visibility, Automation, and Predictive Insights - The Video

1437

Solved

inside

Collaborator

3731

Block .lzn file extension in MTA Blade

3731

inside

Explorer

1495

R81.20 SmartConsole unresponsive

1495

Solved

inside

Explorer

5170

CoreXL is turned off by default on a brand new 9800

5170

Solved

inside

Participant

6257

Warning Messages: cp_timed_blocker_handler

2732

inside

Admin

8534

What's New In R82.10 December 2025: Video, Slides, and Q&A

8534

Solved

inside

Contributor

1442

Smart Console Hits count column

1442

inside

Employee

3167

Harmony DLP Browse: Control, Monitor, and Protect Sensitive Data

3167

Solved

inside

Advisor

2066

Introducing AIOps: Real-Time Visibility, Automation, and Predictive Insights

3882

Solved

inside

Participant

2225

Unable to Access the SAP Server form the VPN tunnel

2664

Solved

inside

Participant

1197

Quantum Gateways - NGTP and NGFW

1197

Solved

inside

Advisor

3660

Log distribution performance - Impact on GWs verse log servers

3660

Solved

inside

Contributor

6549

One interface active cause ssh/https connectivity?

8093

Solved

inside

Advisor

1136

HTTPS Traffic Accepted via Implied Rules

1136

inside

Explorer

7936

Configure site to site vpn between aws and checkpoint

7936

inside

Explorer

1020

R82 SecureXL Flowchart - non accelerated packets

5804

inside

Mentor

31032

101

"UDP checksum is incorrect" - 100s of IPv6 DROPs in fw.log - TP/IPS responsible?

31032

101

Solved

inside

Advisor

1023

can Check Point enforce image recognition?

1023

Solved

inside

Collaborator

17640

What is SNMP OID for CP FW number of new connections?

17640

Solved

inside

Contributor

8125

SIC problem after upgrade to R81.20

8125

Solved

inside

Collaborator

2892

Process 'usim_x86' running for months, using 600+% CPU

2892

Solved

inside

Advisor

2546

Clarification When Upgrading to R82

1705

inside

Admin

561

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT

561

Solved

inside

MVP Diamond

1082

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT recording

1082

inside

Advisor

4199

Your First Response: Immediate Actions for Cyber Incident Containment- AMER - Recording

805

inside

MVP Diamond

3147

Post Quantum Cryptography (PQC)

3147

Solved

inside

Advisor

3629

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA - Recording

533

inside

Contributor

8951

Error logs in Threat Emulation

8951

inside

Collaborator

515

Why Doesn't Checkpoint MTA Detect Obfuscated JS in Email HTML Body (eval/atob)?

515

inside

MVP Diamond

1004

Https inspection and urlf/appc blade settings I found work the best

1004

inside

Collaborator

7582

arping responses not showing on newer appliances

5081

inside

Advisor

5278

MFA Behavior on Gaia Portal – R81.20 Jumbo Hotfix Take 118 and 113

1879

inside

Explorer

1510

Site to Site VPN issue (Checkpoint To ASA)

1510

Solved

inside

MVP Diamond

8635

What is UPPAK, KPPAK vs. USFW, KSFW

8635

inside

MVP Diamond

5119

Performance Tuning Tip - VPN Speed Test

5119

inside

Explorer

729

Deny Multiple Services in a Single Rule

1584

Solved

inside

Advisor

785

R82.x Architecture and Performance Tuning - Link Collection

1318437

295

Solved

inside

Contributor

4591

Migrating from ClusterXL to ElasticXL steps

3628

Solved

inside

Collaborator

1990

Proxy arp issue - automatic NAT rule

1990

Solved

inside

Participant

6345

Setting up Checkpoint 5800 appliances behind a Residential AT&T modem/router

6345

inside

Explorer

5662

Cannot access to Product Evaluation

1317

Solved

inside

Explorer

3513

Allow older clients to connect to this gateway disabling L2TP+IPSec mode

3513

Solved

inside

MVP Diamond

958

VXLAN - Perfomance optimation question

958

inside

Advisor

1384

ClusterXL Forced Failover command

1384

inside

MVP Diamond

1979

Mini Concept – VPN Layer 2 tunneling between two data centers

1196

inside

MVP Diamond

540

Remote Access Location Awareness - DC Check

1675

Solved

inside

Advisor

1350

Pasting clish BGP MD5 secrets?

1350

inside

Contributor

1617

Remote Access Authentication with Certificate and Group Membership Retrieval

1617

inside

Admin

1468

Software Blade effectiveness with and without HTTPS Inspection - sk184185

1468

Solved

inside

MVP Diamond

3445

SmartConsole Extension Issue in R81.20/R82

3445

inside

Participant

786

Remote Access VPN & Site-to-Site tunnels broken (“invalid cookie” / SA desync) after upgrade

786

inside

MVP Diamond

4150

Check Point Appliances - Overview

4150

Solved

inside

Collaborator

1311

R77.30 VS migration from legacy VSX cluster to new one on R81.20

1311

Solved

inside

Advisor

1362

Can I implement Identity Awareness without using a PDP/PEP Broker?

1362

Solved

inside

Collaborator

1811

Gateway blades suddenly expiring despite having valid licenses

1811

inside

MVP Diamond

4267

Bootable USB from ISO for open servers

3637

Solved

inside

Explorer

9581

Management Interface (eth0) assigned via DHCP - cannot remove the static IP of the interface

9581

Solved

inside

Collaborator

1290

Identity Awarness upgrade (cross platform)

1290

Solved

inside

Participant

2970

P2P Config compatibility in Active/Standby Cluster

2153

Solved

inside

Participant

1525

Introducing new Acceleration NIC 4x10/25G for Quantum Force appliances

6264

inside

Contributor

7689

CCSA/CCSE Labs on HP Notebook - Performance Issue

7689

inside

MVP Diamond

902

Evolution of Check Point's website 1996 - 2025

902

Solved

inside

Contributor

2331

CPX 2001 - An Internet Security Event

1236

inside

MVP Silver

2530

R82 Streamed SmartConsole (Smart-1 Cloud) issue with Gateways and Servers view

2530

inside

Contributor

2033

Get interfaces WITH/WITHOUT topology

2033

inside

Contributor

4224

VPN IPSec Tunnel with Sophos IKEv2 Issue

4224

inside

Advisor

6310

Traffic is not visible on management.

6310

Solved

inside

Advisor

1305

9800 interfaces links down but switchports up

1659

inside

Contributor

1742

Best Practices for Websites and Applications

1742

Solved

inside

Advisor

2108

CVE-2025-32728 - permanent solution?

2108

inside

MVP Diamond

1912

VSX on Check Point 9300/9400 Appliances

1912

Solved

inside

Collaborator

2662

IPsec VPN between Checkpoint and Remote Server

2662

inside

Explorer

1083

Management-Server: Addition NIC or VSX-Cluster?

1083

inside

Collaborator

4458

Port 19009 on MGMT Server Accessible from Internet via Implied Rule Despite GUI Clients List

4458

inside

Admin

563

Tips and Tricks 2025 #13 - Strategic Cyber Assessments: How to Strengthen Your Security Posture

563

inside

Admin

1924

Learn About CheckMates October 2025

1924

inside

MVP Diamond

8155

HowTo: Configure a VPN between FortiGate & Check Point

8155

Solved

inside

MVP Gold

1517

Can I configure complex views using smart reporter?

1517

Solved

inside

Contributor

728

turning off secureXL resolves mac flapping?

728

Solved

inside

MVP Gold

1558

Identifying failed ISP in case of ISP redundancy

1558

Solved

inside

Advisor

1100

Minimum RAM and CPU requirements for S1C Management

1100

Solved

inside

Participant

2619

How are you keeping up with Check Point VPN/SIC Certificates

1820

inside

Authority

1729

Notification about changes within Support Life Cycle

1729

inside

Collaborator

4070

SIC not automatically renewing certificate in VSX

1176

Solved

inside

Explorer

1081

Secondary MDS Migration and IP Change

1081

Solved

inside

Advisor

4709

ClusterXL – Should the standby member ever generate traffic with the VIP?

4709

Solved

inside

Advisor

1958

R82 - ssl inspection auto bypass question

1958

inside

MVP Diamond

1027

Tips and Tricks 2025 #12 - Check Point PRO Support Overview & Update

388

Solved

inside

Collaborator

885

Are Logs Still Visible If Only the index File Remains?

885

Solved

inside

Participant

65113

Best way to whitelist KnowBe4 Phishing domains?

65113

inside

MVP Diamond

1159

Special functions via policy - name field

1159

Solved

inside

Collaborator

1511

Using Identity Awareness Collector with Cisco FTD Syslogging

1511

inside

Participant

1439

Firewall is freezing/crashing randomly after upgrade to R82

1439

inside

Participant

1430

How to allow redirects on Cloudflare

1430

inside

Explorer

6981

R82 http proxy and dns proxy forwarding domains not working

6981

inside

Admin

1995

BRICKSTORM: A Stealthy Espionage Campaign Targeting Enterprise Infrastructure (sk184082)

1995

inside

MVP Diamond

4311

Ongoing issue: high CPU load fw_workers + rad

4311

inside

Advisor

1026

How to safely reuse an existing cluster

1026

inside

Advisor

8369

unable to ssh to device after JHF upgrade

8369

Solved

inside

Advisor

2438

Difference Between Configuring Proxy on Firewall CLI vs Cluster Object in SmartConsole

2438

Solved

inside

Participant

3615

Proxy HTTP/HTTPS - two sessions

3615

inside

MVP Gold

569

What should be the settings for ingesting logs in SIEM for self managed spark devices

569

Solved

inside

Explorer

3026

Unable to remote save snapshot via SCP.

3026

inside

Advisor

3766

forklifting 5xxx appliances -> 9100 UPPAK observations

3766

inside

Advisor

706

ISP redundancy and VPNs to azure

706

Solved

inside

MVP Diamond

597

An idea from customer about web UI jumbo hotfix install

597

Solved

inside

Collaborator

3791

HTTPS inspection - Create a CSR for an external CA to use for the outbound certificate

3791

inside

Employee

2147

Jumbo Hotfix Accumulator for Quantum Force 3900 Appliances take #22 has been released today

2147

Solved

inside

Contributor

1921

Migrate eth interface to a VLAN interface in bond

1921

Solved

inside

Participant

1624

Strange BGP announcement of a /31 network as /32

1624

Solved

inside

Advisor

1770

Clarification on “Check Point 6200P” Model

1770

Solved

inside

Explorer

1300

Memory cache usage on 16200 appliance – expected behavior?

3477

inside

Employee

15845

Announcement: Check Point R82 - Recommended Release

15845

inside

Advisor

734

Global Policy Package - Skip/Goes to Domain Layer action

734

Solved

inside

Collaborator

2780

Question About Default Threat Prevention Profiles

774

Solved

inside

Advisor

1134

R81.20 Global Properties Stateful Inspection default settings

1134

inside

MVP Silver

1507

Common Criteria for Harmony Endpoint Security with compliance to 2 NIAP Protection Profiles

1625

Solved

inside

Admin

19447

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

19447

Solved

inside

Contributor

1467

Single VSY within VSX environment wont send logs to dedicated log server

1467

inside

Champion

23628

Configuring dynamic routing in clustered VSX

23628

inside

Collaborator

2851

Failed login SmartConsole after upgrade Win11

2851

Solved

inside

Advisor

2986

Tip: How to deal with RAD errors

2750

inside

Explorer

1006

Server Error in '/owa' Application

1006

inside

Contributor

9718

VPN issue stuck in Phase 1 and sometimes disconnects

9718

Solved

inside

MVP Gold

1376

new transciever CPAC-TR-25SR-DM

985

inside

MVP Gold

811

UPDATE - DigiCert Certificate Expiration Mitigated

5721

inside

Advisor

1085

idrac - how to create account with admin role

1085

inside

Employee

5331

Introducing the New Interactive Ideas Portal – Join the Pilot!

5331

inside

Contributor

2495

Process file types known to contain malware

2495

Solved

inside

Participant

36005

useful debug command in checkpoint

36005

inside

Contributor

1259

Route Based VPN Network SA no route

1259

inside

MVP Gold

1459

Can not access smart console over site-site VPN

1459

Solved

inside

Explorer

800

External Certificates for IPSEC VPN

800

inside

Advisor

939

Rewriting internet access policy

939

Solved

inside

Participant

4996

Site to site vpn drops on policy install

4996

inside

Collaborator

825

Customer FTP traffic keeps triggering new IPS protections

825

inside

Collaborator

6416

Trusted CA List is missing a lot

6416

inside

Advisor

1547

Install Policy pushed but still visible by other admin

551

Solved

inside

Advisor

2754

CPUSE v2606 manual installation failure

1737

inside

Employee

608

R82 Jumbo Hotfix Accumulator take 39 has been released

608

inside

Advisor

1699

Best Way to Export Policy Package for Reporting

1699

Solved

inside

Advisor

4706

Regenerate Token for MaaS Tunnel

4706

inside

Collaborator

1312

a third-party certificate on a clustered and centrally managed Appliance 1900

583

Solved

inside

Participant

1195

Checkpoint 19000 Supported Transceivers Sync

1195

Solved

inside

MVP Gold

1322

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

1322

inside

Explorer

1036

Testing primary and secondary bond interfaces

1036

Solved

inside

Participant

1241

Best Practices for Threat Prevention API Calls to Appliance - API repository

1241

inside

Advisor

719

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

719

Solved

inside

Collaborator

1194

What are the new NAT options in SMS and GW for?

1194

Solved

inside

Contributor

10543

Traffic initiated from Lan to VPN Endpoint Client Blocked

2865

inside

Participant

3870

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

3870

Solved

inside

Advisor

11175

Quantum Force 9000 Appliance OS version Compatibility

1384

inside

MVP Diamond

1116

Help Shape the Future of AI at Check Point

829

inside

Collaborator

3582

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

3582

Solved

inside

Collaborator

2557

Firewall - Automating Firewall Rule Cleanup Based on Usage

2557

inside

Employee

3559

CVE-2025-45582 - tar: Tar path traversal

3324

Solved

inside

Advisor

1591

Peer certificate verification failed after certificate replacement

1591

Solved

inside

Contributor

21381

How to list arp table and identify network devices with mac under Check Point FWs

21381

Solved

inside

Explorer

1868

Remote Access VPN – Can specific routes be assigned to particular users?

1868

inside

MVP Diamond

2759

R8x - Performance Tuning Tip - Appliance Sizing

2759

inside

Participant

5330

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

4114

Solved

inside

Collaborator

1444

add rule to policy via mgmt_Cli fails

1444

inside

Explorer

873

Behaviour after regular contract/subscription expiration

1219

Solved

inside

Advisor

1883

Log file isn't shown automatically after upgrade to R82

1883

Solved

inside

Explorer

1254

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

1254

Solved

inside

Explorer

3929

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

3929

inside

Participant

1956

7000 appliance R81.20 iSO image install

1956

inside

Explorer

560

Unable to take ssh for MGMT Port

560

Solved

inside

Advisor

1086

Updatable (geo) objects and IP addresses, again

1086

Solved

inside

Advisor

2122

Renaming a Gateway Node in a Cluster

2122

Solved

inside

Advisor

1493

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

1493

inside

MVP Diamond

915

R82.10 - Hardware Security Module (HSM) for TLS 1.3

915

Solved

inside

Advisor

5441

How do you keep track of the latest FW/OS updates?

5441

Solved

inside

Advisor

5990

Manual FTP transfers are always corrupted while scheduled backups are not

2428

inside

Employee

819

Estimated R82 release recommended date?

9967

inside

Collaborator

6844

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

6844

Solved

inside

Participant

1062

Monitord process consume high cpu, does it safe to terminate the process during production hour?

1062

inside

Collaborator

2621

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

2711

Solved

inside

Contributor

2574

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

2574

inside

MVP Diamond

6315

'fw ctl conntab -x' issue in R81.10

6315

Solved

inside

Advisor

1945

How to view the connections of the dynamic dispatcher's table

1945

inside

Explorer

6525

A suspicious traffic log was observed during monitoring

1061

inside

Admin

8525

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

8525

inside

Explorer

727

I need Check_Point_R81.20_T631_ScalablePlatform

1603

inside

Participant

9731

Questions about User Mode and Kernel Mode

9731

inside

Explorer

2464

Cannot start Mobile Access Portal Agent

2464

inside

Advisor

1065

Openserver Dell R660xs, anyone ever tried this machine?

1065

inside

Explorer

2641

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

3113

Solved

inside

Collaborator

32581

Unable to establish the SIC(Outgoing Policy)

939

inside

Employee

1617

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

11069

inside

Admin

4237

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

4237

inside

MVP Gold

1007

RA clients not able to access external cluster interface

1007

inside

Explorer

1173

Microsegmentation with Firewall Hardware

1173

inside

Explorer

1055

the new subnets are unable to communicate through the existing VPN tunnel

1055

inside

Participant

1924

SMS migration from XCP-NG to ProxMox

1924

inside

Advisor

5539

Take logging out of the implied rules

2328

inside

MVP Diamond

3824

SmartConsole Shortcuts - cheat sheet

3824

inside

Explorer

1417

I can't find how my dns host is used within the FW object.

1417

inside

Explorer

6022

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

6022

Solved

inside

Explorer

1693

BGP route on Maestro Active/Active are showing as inactive/unusable

1693

inside

Employee

895

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

895

Solved

inside

Contributor

2922

LOM interface - Console Session

2922

Solved

inside

Advisor

2530

Reducing /var/log partition size on Gaia OS

2530

Solved

inside

Collaborator

22442

https inspection tip/feedback/suggestion

1981

inside

Explorer

1090

Disable Camelia Cipher on the firewall

1090

inside

Collaborator

1713

always-connect for standalone vpn client

1713

Solved

inside

Collaborator

3311

Policy Installation Failed(Time out)-SMB Appliance

3311

Solved

inside

Admin

6801

New Products Introduction July 2025: Video, Slides, and Q&A

6801

Solved

inside

Advisor

1307

Export all gateways IPs MDS + VSX

1307

inside

Collaborator

2217

Unable to access Site(CPNotEnoughDataForRuleMatch)

2217

inside

Employee

879

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

879

Solved

inside

Advisor

6096

Clarification Needed on fwaccel stat

6096

Solved

inside

Explorer

1540

How to renew GAIA web certificate.

1540

Solved

inside

Advisor

3521

Deleting a Checkpoint host object from smart console

1150

Solved

inside

Contributor

3150

Netflow Export with Physical Ip in cluster environment

669

Solved

inside

Advisor

1372

Moving a Gateway from One CMA to Another

1372

inside

Explorer

1120

Logs not showing up in SmartConsole after policy install

1120

inside

Collaborator

3379

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

571

inside

Admin

824

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

824

inside

Collaborator

1003

synchronize Identity sharing between the active and passive node

1003

Solved

inside

MVP Diamond

53517

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

754

Solved

inside

Advisor

1636

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

1636

Solved

inside

Employee Alumnus

6043

What is the difference between Custom Intelligence feed and Network Feeds ?

6043

inside

Explorer

1539

Static Hide Behind Gateway NAT

5179

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 10 Nov 2026 @ 06:00 PM (IST)

Under the Hood: Introducing Check Point Cloud Firewall as a Service

Virtual

Tue 10 Nov 2026 @ 08:00 PM (IST)

Check Point Mobile Security | Extending Zero Trust with Netskope

Virtual

Wed 11 Nov 2026 @ 11:00 AM (EST)

TechTalk: What's New in Identity and Trust?

Virtual

Thu 12 Nov 2026 @ 08:00 AM (CET)

EMEA Deep Live: What's New in Check Point Firewall R82.20

Virtual

Thu 12 Nov 2026 @ 11:00 AM (EST)

Tips and Tricks 2026 #15: Check Point MDR and Incident Response

In-Person Virtual

Fri 13 Nov 2026 @ 10:00 AM (CET)

50x CheckMates Live Netherlands

Virtual

Tue 10 Nov 2026 @ 06:00 PM (IST)

Under the Hood: Introducing Check Point Cloud Firewall as a Service

Virtual

Tue 10 Nov 2026 @ 08:00 PM (IST)

Check Point Mobile Security | Extending Zero Trust with Netskope

Virtual

Wed 11 Nov 2026 @ 11:00 AM (EST)

TechTalk: What's New in Identity and Trust?

Virtual

Thu 12 Nov 2026 @ 08:00 AM (CET)

EMEA Deep Live: What's New in Check Point Firewall R82.20

Virtual

Thu 12 Nov 2026 @ 11:00 AM (EST)

Tips and Tricks 2026 #15: Check Point MDR and Incident Response

In-Person Virtual

Fri 13 Nov 2026 @ 10:00 AM (CET)

50x CheckMates Live Netherlands

In-Person Virtual

Fri 13 Nov 2026 @ 10:00 AM (CET)

50x CheckMates Live Netherlands

In-Person

Tue 17 Nov 2026 @ 08:30 AM (EST)

Bogota Breakfast & Hack: IA bajo control y ataques en vivo con Workspace Security

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?