General Topics

Secure Your AI Transformation
9 April @ 12pm SGT / 3pm CET / 2PM EDT

AI Security Masters E6: When AI Goes Wrong -
Hallucinations, Jailbreaks, and the Curious Behavior of AI Agents

Watch Here!

Ink Dragon: A Major Nation-State Campaign

Watch Here

CheckMates Go:
CheckMates Fest

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Participant

16947

Tunnel mode VPN and Transport mode VPN

16947

Solved

inside

Collaborator

16940

Unable to open URL Categorization link

16940

Solved

inside

Collaborator

16936

Creating multiple VPN site to site connections on CheckPoint

16822

Solved

inside

Collaborator

16812

Is there any way to check fiber interface status?

16812

inside

Participant

16777

Getting error “dropped by fwpslglue_chain Reason: PSL Drop: internal - streaming;"

16777

Solved

inside

Advisor

16695

VPN1-Edge | SBXW-166LHGE-4 - compatible software

16695

inside

Explorer

16687

Unable to ping from checkpoint gateway ip to gns3 router and vice versa

16687

inside

Contributor

16666

What does Sticky Decision Function DO?

16666

inside

Explorer

16660

can I export the list of web application categories

16660

inside

Collaborator

16647

Permit ICMP request only in several networks

16647

inside

Collaborator

16646

RX-DRP/rx_missed_errors on Interface

16646

Solved

inside

Employee Alumnus

16605

Share your feedback for your chance to WIN new Apple AirPods Pro!

16605

Solved

inside

Participant

16560

High CPU utilization causing slowness

16560

inside

Contributor

16546

Setting Up Site-to-Site VPN to 3rd Party Gateway

16533

inside

Employee

16501

User-Space firewall support for R80.30 3.10 and above

16501

inside

Participant

16407

Route Based VPN with Azure in Cluster Environment

16407

Solved

inside

MVP Diamond

16368

Meaning of "R" in firewall name?

16368

inside

Contributor

16319

failover logic operation in VSX?

16319

inside

Contributor

16306

Microsoft Activation negatively impacted by HTTPS Inspection

16306

Solved

inside

Contributor

16248

How can I monitor BGP state using SNMP?

16245

inside

Explorer

16227

Site-to-Site VPN connection issue with CISCO ASA

16227

Solved

inside

Contributor

16176

ISOmorphic Tools bootable flash creation for R80.40

16176

inside

Advisor

16117

SmartEvent - Error (CPSEMD not running)

16105

inside

MVP Silver

16060

How to create QoS rule to limit bandwith per user

16024

Solved

inside

Contributor

15999

Vulnerability-ssl-weak-message-authentication-code-algorithms for Port 8211

15999

inside

Contributor

15915

Application Control can not catch Opera web browser VPN

15863

inside

Collaborator

15836

Installation failed. Reason: Load on Module failed - failed to load security policy

15836

Solved

inside

MVP Gold

15832

Encryption domain mismatch even though its set it up correctly

15832

Solved

inside

Contributor

15827

Quick mode Received Notification from Peer: invalid id information

15827

Solved

inside

Contributor

15826

Ipsec VPN b/w checkpoint cluster and Azure gateway

15826

Solved

inside

Explorer

15780

DNS problems possibly due to firewall issue

15780

inside

Contributor

15777

R80.10 - VPND process utilizes a large amount of CPU

15777

inside

Contributor

15726

Bandwidth limit per app /category

15726

inside

Participant

15664

fw_full process consumes 100% CPU

15664

Solved

inside

Collaborator

15650

What is SNMP OID for CP FW number of new connections?

15650

inside

Contributor

15636

ClusterXl synchronization network bandwidth

15615

inside

Contributor

15606

What different for Content Awareness and Data Loss Prevention blade

15462

Solved

inside

Contributor

15442

R81.10 to R81.20 upgrade failing

15442

inside

Contributor

15423

First impressions R80.30 on gateway - one step forward one (or two back)

15370

Solved

inside

Admin

15337

Hacking DNS TechTalk: Video, Slides, and Q&A

15337

inside

Participant

15277

Problem with VPN AMAZON(AWS) CHECK POINT

15139

Solved

inside

Advisor

15126

Basic commands used in checkpoint for troubleshooting and the features?

15104

inside

MVP

15095

Route Based VPN on one side and Domain Based VPN on other

15091

inside

Contributor

15085

Connection rematch after policy installation

15085

Solved

inside

Participant

15075

Checkpoint firewall logging source interface

15075

inside

MVP Diamond

15069

R80.x - Performance Tuning Tip - Management Data Plane Separation

15069

Solved

inside

Participant

15058

CoreXL option disabled in cpconfig

15058

inside

Participant

15023

Question on traffic handling between Kernel Mode FW and Usermode FW

14921

inside

Collaborator

14904

Manually define local VPN Domain per remote peer

14904

inside

MVP Silver

14891

Management problem with GAIA OS

14891

inside

Collaborator

14873

How to Prepare a lab for checkpoint using vmware

14811

Solved

inside

Explorer

14811

Check Point Security Gateway as HTTP/HTTPS Proxy

14811

inside

MVP Silver

14802

Security Gateway Performance Optimization - VSX

14793

inside

MVP Diamond

14718

R80.20 - SYN Defender on SecureXL Level

14718

inside

Advisor

14690

Slowness when Accessing HTTP traffic over Remote Access VPN

14690

Solved

inside

Collaborator

14670

Failed to connect to SMTP server - smtp Traffic Rejected

14670

inside

Employee Alumnus

14663

VPN tunnel with Dynamic IP address.

14663

inside

MVP Platinum

14650

Check Point configuration mistakes - Top 10

14650

inside

Contributor

14630

Firewall priority queues setting

14630

Solved

inside

Contributor

14615

Local backup issue /var/log is full

14615

inside

Admin

14600

fw ctl zdebug - this is wrong...

14600

Solved

inside

Explorer

14556

r80.10 all-in-one evaluation license activation?

14556

inside

Participant

14551

ICMP is sometimes drop when send via IPSec Tunnel

14551

inside

Collaborator

14516

HTTPS inspection in R77.30 and R80.10 with various combinations of proxy and probe bypass

14516

inside

Participant

14506

Issue with Checkpoint Identity Agent

14506

Solved

inside

MVP Gold

14503

Having trouble connecting to Check Point 1430/1450

14461

Solved

inside

Collaborator

14411

CoreXL: only one SND core is busy

14411

inside

Participant

14411

Does 4600 Appliances supports upgrade to R80.20?

14411

inside

Contributor

14411

Update appliance 1490 os R77.20.70 to R77.30 or R80?

14411

inside

Explorer

14393

Zoom Meeting Issues with SecureXL

14393

inside

Admin

14387

R80.20 has recommended status now!

14387

Solved

inside

Explorer

14374

R80 CCSA/CCSE training material and exams

14374

Solved

inside

Contributor

14369

Change Management IP addresses in Cluster

14369

inside

MVP

14314

Exporting Objects/Groups in R77.30

14314

inside

MVP

14276

The license it is impossible to detach it in smartupdate

14257

inside

Advisor

14237

Disable SecureXL permanent R80.20

14203

Solved

inside

Contributor

14199

Duplicate services - which will be used?

14199

Solved

inside

Advisor

14195

how to disable SecureXL for specific src to specific dst

14195

inside

Admin

14176

New updatable object for HTTPS Inspection: HTTPS Services Bypass

14176

Solved

inside

Advisor

14176

Deploying Check Point Solution R80.40

14162

Solved

inside

MVP Silver

14159

No authentication for port 18231 Policy Server Login (old)

14156

Solved

inside

Explorer

14148

Command to show history of ClusterXL member status

14121

Solved

inside

Contributor

14100

Is Check Point Gaia vulnerable towards this new cve-2024-6387 in OpenSSH?

14099

inside

Admin

14078

White Paper - URL Filtering Best Practices for the Large Scale Deployment

14073

Solved

inside

Advisor

14066

Zero Downtime Upgrade - R80.10 - R80.40

14066

inside

MVP Diamond

14056

RFID token authentication with R81+ Raspberry Pi

14056

inside

Collaborator

14012

Is CP planning to support Load-Sharing in future releases?

14007

Solved

inside

Contributor

13943

Domain objects in R80.10 spamming DNS

13936

inside

Admin

13905

White Paper - How to Batch Categorize URLs

13905

inside

MVP Platinum

13904

R77.30: New Jumbo Hotfix (Take 338) GA-Release

13904

inside

Collaborator

13902

getting certificate error when trying to connect to a site

13902

inside

Participant

13874

ONELINER - Check CVE-2024-24919 Vulnerability

13867

inside

Explorer

13820

Issues with Identity Awareness - some users are not seen and some traffic is incorrectly marked

13820

inside

Admin

13796

Infinity R80.10 "Cool Feature of the Day" - Content Awareness

13796

Solved

inside

Collaborator

13786

Domain objects (FQDN mode) vs Custom Applications/Sites

13786

Solved

inside

Participant

13778

Security Policy Management without SmartConsole

13778

inside

Contributor

13768

can ping internet but unable to browse

13768

Solved

inside

Contributor

13753

NMAP Shows Ports 5060 & 2000 Open

13753

inside

Participant

13743

6800 stability Issue - R80.10 w\/Take 203 or R80.20 w/ Take 74

13743

inside

Contributor

13729

How does Domain Management Server (CMA) get to the internet?

13729

inside

Contributor

13728

Error installation CP VPN E80.92

13728

inside

MVP Gold

13724

https Traffic Dropped ... due to Out of sequence TCP packet retransmission. Stripping all packet dat

13724

Solved

inside

Collaborator

13712

need checkpoint document that has details of all field that are in logs

13712

inside

Contributor

13709

WSDNSD high cpu + Strange messages

13709

inside

Advisor

13703

Production cluster upgrade R77.30 to R80.10

13700

inside

Collaborator

13677

How to Block TOR NODE is Checkpoint Firewall R80.30 Version

13654

inside

Advisor

13654

What is the practical example to use Bridged Mode?

13645

inside

Contributor

13638

SPLAT R75.40 - disable TCP / ICMP timestamp

13623

inside

Contributor

13584

High Memory after Install 110Take

13584

inside

Participant

13579

Reminder for R80.20/30 End-of-Support on 30/9/2022

13554

Solved

inside

MVP Gold

13490

Printernightmare CVE-2021-1675

13490

inside

Collaborator

13431

R77.30 Sending Check Point Logs to a Syslog Server

13431

Solved

inside

Admin

13430

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

13430

Solved

inside

Contributor

13354

Reg: policy installation failed on gateway

13354

Solved

inside

Participant

13343

Smartconsole cant connect to firewall in GNS3

13343

inside

MVP Platinum

13313

R80.10: New Jumbo Hotfix (Take 154) GA-Release

13313

inside

MVP Diamond

13294

Switch or Cable between ClusterXL members for the sync network?

13294

Solved

inside

Collaborator

13293

interaction between VRRP and CXL - why is there a tickbox for ClusterXL when the cluster is VRRP

13293

inside

Employee

13280

New 3900 Branch office applainces were launched today 28/5

13280

inside

Champion

13244

Enable multiple email addresses associated with account.

13244

inside

MVP Gold

13190

R80.x - Performance Tuning Tip - Control SecureXL / CoreXL Paths

13149

inside

Advisor

13136

LDAP groups in Remote Access VPN Rules

13136

inside

Contributor

13108

How to migrate Full HA Cluster(r77.30 to r80.10)?

13108

inside

Contributor

13072

why 3000 series CPU core higher than 5000 series?

13072

inside

Participant

13009

The number of Virtual systems on VSX cluster with the HA license

13009

Solved

inside

Collaborator

12987

Meaning of flag in packet dropped

12987

inside

Participant

12978

I have a Check Point model L-50 (serial number - 1310436119900) and I just need to know the throughput the series 1100 can handle?

12913

inside

Champion

12913

R81.10 End-of-Support extension

12857

Solved

inside

Contributor

12843

Custom Application Site url substring wildcard

12843

inside

Explorer

12813

Abnormality in pattern matching of APP CONTRL BLADE

12813

inside

Participant

12766

Identity Awareness issue - User identified but the rule is not matching

12766

inside

MVP Diamond

12757

New daemon or processes under R80.20!

12757

inside

Admin

12694

How To Open a Case with TAC and/or Account Services

12694

Solved

inside

Explorer

12677

GotoAssist doesn't work when Inspection SSL is enable

12677

inside

Participant

12674

Zero Downtime Upgrade From R77.30 to R80.20

12674

Solved

inside

Advisor

12651

Checkpoint IPSO vs SecurePlatform vs Gaia

12651

inside

MVP Diamond

12590

R80.40 - Multi Queue on VMWare vmxnet3 drivers.

12590

inside

Admin

12589

CheckMates Fest 2025: Video and Q&A

12589

Solved

inside

Participant

12587

End-of-Support policy updates for R80.10 software version

12534

inside

Explorer

12530

VSX/ VS - Remote VPN clients connecting to 'other' VS in cluster

12530

inside

Admin

12490

"CRLs failed to be downloaded" error when access SmartConsole R80.30

12468

inside

Explorer

12406

Interesting traffic.. a parameter for Phase-2 negotiation?

12406

inside

Contributor

12386

HTTPS Categorization ... a drama

12386

inside

Advisor

12382

TCP port reuse between Check Point Remote Access Gateway and Loadbalancer

12382

inside

Explorer

12379

End of Support for R77, R77.10, and R77.20

12377

inside

Advisor

12370

URL Filtering Doesn't work on HTTPS

12370

inside

Collaborator

12367

RX-OVR drops and 10 gb hardware buffer

12367

inside

Explorer

12358

Difference between interface based and zone based firewall?

12358

Solved

inside

Participant

12347

R80.20 SecureXL drop template support

12305

inside

Collaborator

12291

What is the default time that HIT count data is kept in R80?

12291

Solved

inside

Explorer

12276

Destination Host Unreachable - 8.8.8.8 (intermittent)

12155

inside

Explorer

12154

Rule base checking if Application control and URL filtering blade is enable?

12154

inside

Collaborator

12148

When you enable HTTPS inspection, gmail does not work.

12142

inside

Explorer

12112

Fragmented packet with IPS(R80.10)

12112

inside

Participant

12110

Vulnerability on CheckPoint Banner disclosure

12077

inside

Participant

12068

Checkpoint as a Reverse Proxy for Skype for Business

12064

inside

Explorer

12040

Microsoft Office 365 Service Application Control

12040

inside

Collaborator

12035

checkpoint not opening in WEB GUI

12035

inside

Admin

12032

White Paper - Configuring NAT64 for Internet Access in R80.20

12032

Solved

inside

Contributor

12003

Cluster Falover after every change on pbr, routing, ospf,...

12003

Solved

inside

Participant

11988

Viewing Fan Status on non-Checkpoint Appliance

11930

inside

Participant

11928

HA clusterXL with Bond interfaces with Cisco switch

11928

inside

Participant

11915

Maestro integration with Cisco ACI

11915

Solved

inside

Contributor

11903

Announcement: Check Point R82 - Recommended Release

11900

inside

Participant

11899

Traffic dropped by Reason: PSL Drop: HTTP_DISPATCHER;

11899

Solved

inside

Advisor

11885

R80.20 - More then 40 Cores for CoreXL?

11881

Solved

inside

Explorer

11868

Cannot ping remote VPN gateway external IP

11868

inside

Advisor

11860

SSL Medium Strength Cipher Suites Supported

11837

Solved

inside

Collaborator

11832

Configuration Migration From Checkpoint 4200 Appliance to CP 4800 Appliance

11832

inside

MVP Platinum

11827

R77.30 Take 292: New Jumbo Hotfix GA Release

11827

inside

Employee

11826

Important: R80.10 End-of-Support will take place in May-2021

11826

inside

MVP Diamond

11781

Performance Tuning - Bufferbloat

11781

inside

Contributor

11754

Problem while installing upgrade tools - Cannot detect the version of the installed upgrade tools.

11754

Solved

inside

Contributor

11752

Where can I check the phase 2 encryption domain on cli for existing vpn

11730

Solved

inside

Advisor

11728

Failed to deccrypt CP Site Response...

11728

inside

Contributor

11719

General community posting questions

11719

Solved

inside

Explorer

11711

Syslog alert for power supply failure

11711

inside

Champion

11707

R80.30 – default version (widely recommended)

11694

Solved

inside

Contributor

11694

Port forwarding to internal IP connected to other firewall.

11694

inside

Champion

11690

Is SAML support available in r80.10?

11690

Solved

inside

Contributor

11689

Natting to an IP range not directly connected

11689

inside

Participant

11677

command to check particular segment is already part of any encryption domain

11677

inside

Collaborator

11658

USFW on appliances with less than 40 cores

11654

Solved

inside

Participant

11652

No ssh access to VPN peer outside IP

11652

inside

Participant

11621

SIP signalling traffic being dropped erroneously

11621

inside

Collaborator

11602

The difference between checkpoint creation domain and Custom Applications/Sites creation URL

11602

inside

Contributor

11597

Site to Site vpn with 3rd party DAIP gateway

11597

Solved

inside

Participant

11593

Fragment Reassembly Time Exceeded Errors

11593

inside

Admin

11565

Platform URLs You'll Find Useful

11565

inside

Advisor

11514

Two Numbered VTI's between gateways managed by same Security Management?

11508

inside

Participant

11505

What are to the point differences between Automatic & Manual NAT?

11505

inside

Collaborator

11502

Identity awareness collector changes user identity for same IP while connecting to RDP

11502

Solved

inside

MVP Gold

11499

CVE-2024-3094 [CRITICAL Vulnerability Just Disclosed (CVSS-10)]

11499

inside

Collaborator

11495

TCP packet out of state: First packet isn't SYN

11495

inside

Collaborator

11473

FTP causes 100% CPU on one core

11473

inside

Participant

11459

Transparent proxy - sense? (comprehension question)

11459

inside

Collaborator

11445

Users reported web traffic stopped working

11445

inside

Explorer

11443

Unable to access new checkpoint gateway using WebUI

11443

inside

MVP Diamond

11439

Should HTTPS inspection be accounted for in the appliance sizing charts?

11400

Solved

inside

Contributor

11396

Firewall crashed reboots - vmcore crash file R80.30

11396

inside

Participant

11381

What happens when session timeout of 720 minutes ends in Identity Awareness

11381

inside

MVP Diamond

11380

R81 - Multi Queue (what's new)

11380

inside

Explorer

11378

IKE Failure on Site to site IPSec VPN with Zyxel USG - open for suggestions

11373

inside

Participant

11318

Homekit (Siri) integration with R81 Dynamic Objects

11299

inside

MVP Diamond

11282

fw monitor/tcpdump and "fwaccel off" - yes or no

11282

inside

Advisor

11260

Messages of mux error on a cluster (active-standby) in r80.20

11236

inside

Contributor

11231

Check Point Diagnostic Console (cdc)

11231

inside

Explorer

11220

Best Practice: Skype for Business (Lync) with(out) QoS

11194

inside

Advisor

11160

CPSIZEME Download URL not working

11151

inside

Participant

11150

whitelist AWS S3 buckets using complex URI / URL patterns?

11150

inside

Collaborator

11149

DNS Passive Learning Design Question

11149

inside

Mentor

11148

Blocked HTTPS requests are not getting a UserCheck message

11137

inside

Explorer

11123

Wimax branch offices not able to browse

11123

Solved

inside

Advisor

11121

Rule matching on sources it shouldn't

11120

inside

Contributor

11105

R80.40 policy install diff changes breaks the network

11105

inside

Champion

11099

Precedence in the rule order processing in R80.20

11099

inside

Participant

11082

Kernel global parameters - the most useful settings

11079

Solved

inside

Contributor

11063

Configuring Cluster Addresses on Different Subnets

11063

inside

Collaborator

11047

should i be worried about a key install to an unknown ip from the firewall?

11047

Solved

inside

Contributor

11025

Move External Interface to different NIC

11014

Solved

inside

Collaborator

11001

May the 4th + 4 Paradigm Shift: Video, Slides, and Q&A

10971

inside

Collaborator

10941

R80.30 - Slow DMZ transfer performance

10931

inside

Advisor

10918

Checkpoint Firewall Radius Authentication

10918

Solved

inside

Advisor

10888

Need help to configure log forwarding to syslog server SIEM from checkpoint management server

10885

inside

MVP

10861

SSL VPN Network Extender Issue

10861

Solved

inside

Contributor

10847

Update failed. Contract entitlement check failed. Gateway can not access internet

10847

inside

MVP Diamond

10831

R80.40 - Performance Tuning Tip - CPU Spike Detective

10831

inside

Employee Alumnus

10821

Brainstorming for a new DLP platform – we want to hear from you!

10821

inside

Participant

10817

SMTP Server Non-standard Port Detection

10817

inside

MVP Diamond

10817

ONELINER - Show all Kernel Parameter

10817

inside

Advisor

10814

CoreXL affinity on VSX R80.10 does not survive reboot?

10814

Solved

inside

Participant

10778

Renew external (3rd party) certificate for IPSEC VPN

10756

inside

Explorer

10749

Legacy Auth (User Auth, Client Auth) on R80.10 gateways

10749

Solved

inside

Participant

10740

Manual NAT inside a VPN IPsec Tunnel

10740

Solved

inside

Participant

10721

How to export checkpoint objects to an external file

10721

inside

Admin

10713

What's New in R81.20 TechTalk? Video, Slides, and Q&A

10713

Solved

inside

MVP Diamond

10708

Second Log4j Vulnerability (CVE-2021-45046) Discovered

10708

inside

Explorer

10697

6000 series appliance R80.20 download

10687

inside

Employee

10674

CPUSE (Deployment Agent) new GUI

10674

Solved

inside

MVP Diamond

10668

What is the impact of passing "First Packet isn't sync" traffic at the firewall ?

10651

inside

Participant

10646

WEB_API constant log in - log out

10646

inside

Participant

10636

All in one eval Licensing issue

10636

inside

Employee

10630

R82: Parallel Processing Based Packet Flow

10630

Solved

inside

Advisor

10630

Import a trusted CA cert to Gaia OS

10630

inside

Employee

10628

Possible to 'hide' subnets outside of encryption domain

10628

inside

Mentor

10626

Upgrade Reporter Progress (R80.30->R80.40 Standalone) - Stuck on Importing IPS Data ...

10626

Solved

inside

MVP Diamond

10624

R80.40 - new interesting commands

10624

inside

MVP Diamond

10624

When does the R80.40 EA phase start?

10624

inside

Explorer

10613

R80.10: IPsec VPN - allow unencrypted pings between gateways

10613

inside

MVP Gold

10609

Tip: How to deal with RAD errors

1444

inside

Explorer

585

Server Error in '/owa' Application

585

inside

Contributor

5581

VPN issue stuck in Phase 1 and sometimes disconnects

5581

Solved

inside

MVP Gold

796

new transciever CPAC-TR-25SR-DM

598

inside

MVP Gold

453

UPDATE - DigiCert Certificate Expiration Mitigated

4924

inside

Advisor

705

idrac - how to create account with admin role

705

inside

Employee

4017

Introducing the New Interactive Ideas Portal – Join the Pilot!

4017

inside

Contributor

1875

Process file types known to contain malware

1875

Solved

inside

Participant

34225

useful debug command in checkpoint

34225

inside

Contributor

750

Route Based VPN Network SA no route

750

inside

MVP Gold

733

Can not access smart console over site-site VPN

733

Solved

inside

Explorer

413

External Certificates for IPSEC VPN

413

inside

Advisor

571

Rewriting internet access policy

571

Solved

inside

Participant

4547

Site to site vpn drops on policy install

4547

inside

Collaborator

512

Customer FTP traffic keeps triggering new IPS protections

512

inside

Collaborator

4837

Trusted CA List is missing a lot

4837

inside

Advisor

973

Install Policy pushed but still visible by other admin

326

Solved

inside

Advisor

1627

CPUSE v2606 manual installation failure

1121

inside

Employee

360

R82 Jumbo Hotfix Accumulator take 39 has been released

360

inside

Advisor

989

Best Way to Export Policy Package for Reporting

989

Solved

inside

Advisor

2863

Regenerate Token for MaaS Tunnel

2863

inside

Collaborator

815

a third-party certificate on a clustered and centrally managed Appliance 1900

371

Solved

inside

Participant

596

Checkpoint 19000 Supported Transceivers Sync

596

Solved

inside

MVP Gold

895

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

895

inside

Explorer

544

Testing primary and secondary bond interfaces

544

Solved

inside

Participant

718

Best Practices for Threat Prevention API Calls to Appliance - API repository

718

inside

Advisor

410

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

410

Solved

inside

Collaborator

742

What are the new NAT options in SMS and GW for?

742

Solved

inside

Contributor

6002

Traffic initiated from Lan to VPN Endpoint Client Blocked

1881

inside

Participant

2024

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

2024

Solved

inside

Advisor

6735

Quantum Force 9000 Appliance OS version Compatibility

837

inside

MVP Platinum

739

Help Shape the Future of AI at Check Point

465

inside

Collaborator

2287

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

2287

Solved

inside

Collaborator

1650

Firewall - Automating Firewall Rule Cleanup Based on Usage

1650

inside

Employee

2156

CVE-2025-45582 - tar: Tar path traversal

2248

Solved

inside

Advisor

750

Peer certificate verification failed after certificate replacement

750

Solved

inside

Contributor

20135

How to list arp table and identify network devices with mac under Check Point FWs

20135

Solved

inside

Explorer

1199

Remote Access VPN – Can specific routes be assigned to particular users?

1199

inside

MVP Diamond

1710

R8x - Performance Tuning Tip - Appliance Sizing

1710

inside

Participant

4453

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

2688

Solved

inside

Contributor

920

add rule to policy via mgmt_Cli fails

920

inside

Explorer

545

Behaviour after regular contract/subscription expiration

719

Solved

inside

Advisor

1154

Log file isn't shown automatically after upgrade to R82

1154

Solved

inside

Explorer

821

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

821

Solved

inside

Explorer

2324

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

2324

inside

Participant

1201

7000 appliance R81.20 iSO image install

1201

inside

Explorer

338

Unable to take ssh for MGMT Port

338

Solved

inside

Advisor

679

Updatable (geo) objects and IP addresses, again

679

Solved

inside

Advisor

1345

Renaming a Gateway Node in a Cluster

1345

Solved

inside

Advisor

875

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

875

inside

MVP Diamond

584

R82.10 - Hardware Security Module (HSM) for TLS 1.3

584

Solved

inside

Advisor

4016

How do you keep track of the latest FW/OS updates?

4016

Solved

inside

Advisor

3452

Manual FTP transfers are always corrupted while scheduled backups are not

1243

inside

Employee

355

Estimated R82 release recommended date?

6400

inside

Collaborator

5037

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

5037

Solved

inside

Participant

679

Monitord process consume high cpu, does it safe to terminate the process during production hour?

679

inside

Collaborator

1559

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

1713

Solved

inside

Contributor

1739

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

1739

inside

MVP Diamond

5186

'fw ctl conntab -x' issue in R81.10

5186

Solved

inside

Advisor

1626

How to view the connections of the dynamic dispatcher's table

1626

Solved

inside

Collaborator

769

Check Point Management Server - insufficient space in the /opt/cpdabackup/backup directory.

769

inside

Explorer

3455

A suspicious traffic log was observed during monitoring

675

inside

Admin

7708

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

7708

inside

Explorer

407

I need Check_Point_R81.20_T631_ScalablePlatform

1010

inside

Participant

5260

Questions about User Mode and Kernel Mode

5260

inside

Explorer

1264

Cannot start Mobile Access Portal Agent

1264

inside

Advisor

635

Openserver Dell R660xs, anyone ever tried this machine?

635

inside

Explorer

1530

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

2476

Solved

inside

Collaborator

30320

Unable to establish the SIC(Outgoing Policy)

607

inside

Employee

1205

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

8588

inside

Admin

3454

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

3454

inside

MVP Gold

600

RA clients not able to access external cluster interface

600

inside

Explorer

682

Microsegmentation with Firewall Hardware

682

inside

Explorer

687

the new subnets are unable to communicate through the existing VPN tunnel

687

inside

Participant

1267

SMS migration from XCP-NG to ProxMox

1267

inside

Advisor

4907

Take logging out of the implied rules

1455

inside

MVP Diamond

2535

SmartConsole Shortcuts - cheat sheet

2535

inside

Explorer

914

I can't find how my dns host is used within the FW object.

914

inside

Explorer

4841

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

4841

Solved

inside

Explorer

1084

BGP route on Maestro Active/Active are showing as inactive/unusable

1084

inside

Employee

567

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

567

Solved

inside

Contributor

1612

LOM interface - Console Session

1612

Solved

inside

Advisor

1527

Reducing /var/log partition size on Gaia OS

1527

Solved

inside

Collaborator

17086

https inspection tip/feedback/suggestion

1207

inside

Explorer

625

Disable Camelia Cipher on the firewall

625

inside

Collaborator

975

always-connect for standalone vpn client

975

Solved

inside

Collaborator

2117

Policy Installation Failed(Time out)-SMB Appliance

2117

Solved

inside

Admin

5000

New Products Introduction July 2025: Video, Slides, and Q&A

5000

Solved

inside

Advisor

841

Export all gateways IPs MDS + VSX

841

inside

Collaborator

1393

Unable to access Site(CPNotEnoughDataForRuleMatch)

1393

inside

Employee

568

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

568

Solved

inside

Advisor

4001

Clarification Needed on fwaccel stat

4001

Solved

inside

Explorer

927

How to renew GAIA web certificate.

927

Solved

inside

Advisor

2173

Deleting a Checkpoint host object from smart console

695

Solved

inside

Contributor

1759

Netflow Export with Physical Ip in cluster environment

377

Solved

inside

Advisor

904

Moving a Gateway from One CMA to Another

904

inside

Explorer

617

Logs not showing up in SmartConsole after policy install

617

inside

Collaborator

2785

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

339

inside

Admin

600

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

600

inside

Collaborator

572

synchronize Identity sharing between the active and passive node

572

Solved

inside

MVP Diamond

44119

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

526

Solved

inside

Advisor

916

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

916

Solved

inside

Employee Alumnus

4597

What is the difference between Custom Intelligence feed and Network Feeds ?

4597

inside

Explorer

917

Static Hide Behind Gateway NAT

2996

inside

Admin

497

From OT to Cloud: A Security Blueprint for Manufacturers EMEA - Recording

497

inside

Employee

13291

New 3900 Branch office applainces were launched today 28/5

13291

Solved

inside

Contributor

657

telnet showing open port on ILO when its not when going via FW

657

inside

Explorer

1259

Allow rule for site hosted on akamai CDN, only the first dns response seems to work

1259

Solved

inside

Explorer

877

Identity Awareness Agents SK with direct links - published!

19472

inside

Advisor

614

Fresh Install Without USB, Possible From Boot Menu?

614

Solved

inside

Advisor

958

simple question about ISOmorphic

958

inside

Advisor

429

IPSec tunnel Setup [HUB and SPOKE Scenario] with Both spokes being non-checkpoint VPN Gateway

1419

Solved

inside

Advisor

392

At a gateway, how do I determine what domain the gateway belongs to?

1543

inside

Advisor

1527

Policy location on a gateway R80

8848

Solved

inside

MVP Silver

512

GMSA/automated password rotation for Identity

512

inside

Collaborator

11507

Identity awareness collector changes user identity for same IP while connecting to RDP

11507

inside

Explorer

515

SNMP Issue after JHF 99 R81.20 VSX cluster

515

Solved

inside

MVP Gold

5096

Upgrade is failing from R81.10 to R82

5096

inside

Collaborator

1468

Clarification on DNS Reputation Logs

1468

inside

Employee

1993

Quantum Force performance boost is available post the release of R82 Jumbo #3 ( Take 25)

1993

inside

Advisor

1195

Cluster Falover after every change on pbr, routing, ospf,...

12014

inside

Explorer

1491

Capsule VPN mobile users can't connect

1491

inside

Champion

50047

Can I directly search through solr indices using curl like elasticserch?

653

Solved

inside

Contributor

2737

lowering mtu on remote access vpn?

2737

Solved

inside

Contributor

1493

CP21800 (R80.40 Jumbo T211) - reply not from Cluster IP

1493

inside

Advisor

1013

Is It Safe to Change SecureXL on a Cluster?

1013

inside

Employee

498

Meet Your New Assistant: Infinity AI Copilot - video and materials

9929

inside

Collaborator

969

portal certificate can not upload file

969

Solved

inside

Collaborator

9804

BSI Common Criteria EAL4+ R82 Version + Jumbo Hotfix

795

inside

Employee

527

Security Engineer Eyes Only - Behind the Miercom Results

527

Solved

inside

Explorer

3722

Firewall-Blades Order of Operation

3722

inside

Participant

1246

Hack Like a Pro: Break Into a Server Using the Kill Chain - Americas Recording

419

inside

Admin

499

Hack Like a Pro: Break Into a Server Using the Kill Chain - EMEA recording

499

inside

MVP Silver

1036

Thales Mandatory Security Update - STA RADIUS Server to Enforce Message-Authenticator by July 31, 20

1036

inside

Employee

2177

Upgrading Gateway to R82 while MDS on R81.20

1089

inside

MVP Silver

1521

Trellix application not available in App objects

2379

Solved

inside

Explorer

2902

Upgrading Gateway 9100 to R82 via blink package

2902

Solved

inside

MVP Diamond

686

Any idea when https inspection policy rules hit count will be available?

686

inside

Admin

1917

CPX 2025 Recap with Surprise Guest Veriti: Video and Slides

1917

inside

Advisor

5633

Traffic dropped only in clean-up rule??

5633

Solved

inside

Employee

20475

Tip of the week: Support Center's Upgrade Wizard

20475

Solved

inside

Collaborator

3590

route based VPN requires VPN domain

3590

inside

Explorer

839

Security Group name dinamec change

839

Solved

inside

Collaborator

3285

VPN gateway random UDP traffic to CP peers?

8469

Solved

inside

Advisor

14199

how to disable SecureXL for specific src to specific dst

14199

inside

Advisor

2418

policy installation mode - set permanently

1194

Solved

inside

Advisor

1666

Safe to delete /var/log/CPda/repository?

1666

Solved

inside

Participant

1688

Application filter based on risk - do not include URL...

1034

Solved

inside

Advisor

869

SIC Failure when creating new virtual systems in VSX

833

inside

Admin

482

Building a Scalable Cybersecurity Skill Development Program: 4 Strategies for Success - AMER Video

482

inside

Admin

410

Building a Scalable Cybersecurity Skill Development Program: 4 Strategies for Success - EMEA Video

410

inside

Advisor

524

MAS Tunnel Down After Cluster update

524

Solved

inside

Advisor

2541

URL Filtering Not Blocking Some Categorized Sites

2541

Solved

inside

Advisor

1937

SSL VPN disconnects after a successful login attempt, if the notebook on hotspot provided by iOS

1315

inside

Admin

843

ATAM 360°: Elevate Your Cybersecurity Strategy with Proactive Services - Materials

843

inside

Admin

970

Spotlight on AI-Powered Cyber Security Platform Assessment 2025, Americas: Video and Slides

970

inside

Admin

2683

Spotlight on AI-Powered Cyber Security Platform Assessment 2025, EMEA - Materials

2683

inside

Advisor

786

Change to Global Properties – Session Timeout Settings

3271

Solved

inside

Advisor

2759

No SFTP any longer only Aspera in Service Requests

2658

inside

Explorer

659

Threat Emulation error | Autonomous Threat Prevention Policy

2641

inside

Advisor

1644

How to change the state of a cluster XL member using CLI commands

1910

Solved

inside

Participant

609

Application Control/URL Filtering request instructions

609

inside

Explorer

974

OpenSSH Vulnerability detection

9748

Solved

inside

MVP Gold

1221

Identity Collector & Cisco ISE - Failed Logins

2839

Solved

inside

Explorer

1309

R80.40 "cpview -t" is not working

5845

Solved

inside

Explorer

599

Americas Deep Dive: Maintenance and Upgrades Best Practices

599

inside

Admin

1130

HTTPSi R82 Demo: Practical Updates and Best Practices: Americas - Materials

1130

inside

Admin

1470

HTTPSi R82 Demo: Practical Updates and Best Practices: EMEA - Materials

1470

inside

MVP Silver

980

GAIA Multi-Factor authentication after upgrade to R81.20 Take 99

980

inside

MVP Gold

1741

Is anyone postgresql expert here?

1741

Solved

inside

Advisor

1856

Old versions in /var/log/opt/ security gateway

1856

inside

Admin

1727

Explore New Wave of Web Based DDoS Attacks and Mitigations: Video, Slides, and Q&A

1727

Solved

inside

Collaborator

1576

[SOLVED] - Identity Agent Terminal Server - Users Not Authenticated

1185

Solved

inside

Advisor

2708

Quantum Spark License – Which IP Address to Register?

2708

inside

MVP Silver

2043

MFA for Smart Console like GAIA

2043

inside

Explorer

494

Any idea when R81.20 jumbo 99 will be recommended take?

1058

Solved

inside

Advisor

1313

Best way to upgrade the MDS to R82 from R81.10

1313

inside

Advisor

846

core allocation change and gnat and nat port allocation

846

Solved

inside

Collaborator

2360

HTTPS Inspection Statistics Dashboard

2360

inside

Participant

795

How to delete a rule from a specific gateway policy package using CLI

795

inside

Participant

1298

Installing jumbo hotfix on R82 vsnext/vsx

2388

Solved

inside

Advisor

1380

Firewall migration from Active/Active to Active/Passive

921

inside

Collaborator

1570

Firewall Management Traffic via Cluster VIP

1570

Solved

inside

Collaborator

1180

May the 4th + 4 Paradigm Shift: Video, Slides, and Q&A

10973

inside

MVP Gold

1165

search in the knowledgebase without login :-)

1165

inside

Admin

703

CPR Security Report: 2025 Cyber Threat Trends (Americas) - Recording

703

Solved

inside

Contributor

1329

ClusterXL and Smart-1 Cloud as a management

1329

Solved

inside

Participant

703

Change some VPN Community settings with mgmt_cli

703

inside

Contributor

1355

INSPECT code in DEF file to bypass traffic inspection? still a "thing"??

1151

Solved

inside

Collaborator

874

Threat Emulation appliance connectivity

874

inside

Admin

872

CPR Security Report: 2025 Cyber Threat Trends (EMEA) - Recording + Slides

872

inside

Explorer

1612

URL categorization check websites

2530

inside

Admin

13907

White Paper - How to Batch Categorize URLs

13907

Solved

inside

Advisor

789

Gateway Cluster Hardware Upgrade

35206

inside

Contributor

3597

Identify VPN downtimes or re-establishments

2350

Solved

inside

Contributor

2220

Modify 'Return URL' in Identity Provider object for SmartConsole SAML SSO

2220

inside

Advisor

2324

ClusterXL topology - member interface names - Gaia config vs. CP topology

2324

inside

Employee

12862

R81.10 End-of-Support extension

12862

Solved

inside

Participant

2317

Simplifying Zero Trust with Infinity Identity: Centralized, Scalable, Secure - EMEA recording

4095

inside

Advisor

951

Synchronization Interface in a Cluster

951

inside

Advisor

1239

Identity Awareness captive portal and identity conciliation

1239

inside

Participant

3049

export certificate for ldap user remote access

3049

inside

Explorer

710

CRL Traffic Not Appearing in the Logs

710

inside

Admin

655

Find & Fix- How Common Code Flaws Let Hackers In | Live Demo - Americas - Recording

655

inside

Admin

3430

Tips and Tricks 2024 #9 - Best Practices for TAC Engagement, Escalations, and Support Management

3430

inside

Employee

825

The Case for Check Point’s Hybrid Mesh Security Architecture

825

Solved

inside

Advisor

998

Find & Fix- How Common Code Flaws Let Hackers In | Live Demo - EMEA Recording

437

Solved

inside

Advisor

915

Let's discuss: Important Notification to Customers with SecureXL User Mode (UPPAK) enabled, on R81.2

3724

inside

Explorer

717

Detect upstream failure and flip BGP default route

717

inside

Explorer

761

Can i use license from existing CMS deployed on VMware to CMS (CloudGuard ) on Azure Platform

761

inside

Explorer

613

How to view gateway spike detective in a graph format.

613

Solved

inside

Explorer

1345

Logs not showing real-time on SmartConsole?

1345

Solved

inside

Participant

2059

How to create a site-to-site VPN between two Check Point firewalls

2059

inside

Advisor

1706

Approve MS smartphone delay RADIUS

1706

inside

Participant

655

new generation of hp proliant dl360 and dl380 support

807

Solved

inside

Contributor

5989

IPSec VPN between CheckPoint and Prisma Access

5989

Solved

inside

MVP Diamond

975

Next R81.20 jumbo hotfix release?

975

inside

Advisor

2624

Check Point Hosts VS CheckPoint Gateway

2519

inside

Collaborator

1289

smarconsole changes (former workflow)

3779

inside

Admin

665

Simplifying Zero Trust with Infinity Identity: Centralized, Scalable, Secure - Americas recording

665

inside

Contributor

769

Space on management server for snapshots

769

inside

Participant

523

migrate SMS and gateways to new management IP network

3206

inside

Advisor

1508

change management's ip of cluster

1508

inside

Advisor

2542

SIP dropped by fw_post_vm_chain_handler Reason: Handler 'sip_manager' drop

2542

inside

Contributor

1455

Status of cluster stuck in warning - sk178304

2755

inside

Contributor

1801

[SOLVED] Identity Agent - The Check Point Managed Asset Detection service is not responding

1365

inside

Explorer

12818

Abnormality in pattern matching of APP CONTRL BLADE

12818

Solved

inside

Collaborator

1527

Improving IPSEC Encryption settings

1527

Solved

inside

Advisor

999

r81.20 -> r82: what happens to https inspection policy

999

Solved

inside

Advisor

735

ClearPass / Checkpoint Integration

2228

Solved

inside

MVP Gold

7848

cpsho_user config pushed from Check Point?

7848

Solved

inside

Participant

1061

Threat Emulation Appliances - Support for Windows 11 OS

1061

inside

Advisor

1715

The policy package is not visible in SmartConsole on R81.10.

2249

inside

Employee

1403

TME Under The Hood: VSNext - Now On Video!

1403

Solved

inside

Explorer

1131

Snapshot operation fails in CLI but works in WEB partially

1131

inside

Advisor

1246

Test via snmpwalk or cli if IPS Bypass is set to track via SNMP alert

2978

Solved

inside

MVP Diamond

3308

cpisp_update script does not work on R81.10?

6329

inside

Contributor

737

Enterprise and Hybrid Mesh Firewall 2025: 3rd-Party Lab Insights - Recording

1334

Solved

inside

Contributor

1560

Question about transceiver compatibility.

1560

inside

Participant

760

Identity awareness with Hybrid IDP

760

No messages.

General Topics

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 09 Apr 2026 @ 03:00 PM (CEST)

Secure Your AI Transformation (EMEA)

Virtual

Thu 09 Apr 2026 @ 02:00 PM (EDT)

Secure Your AI Transformation (AMER)

Virtual

Thu 09 Apr 2026 @ 03:00 PM (EDT)

Americas Deep Dive: What's New in R82.10

Virtual

Fri 10 Apr 2026 @ 10:00 AM (CEST)

CheckMates Live Netherlands - Sessie 45: Harmony SASE update

Virtual

Tue 14 Apr 2026 @ 04:00 PM (CEST)

Maestro Masters EMEA: Migration and Upgrades Best Practices

Virtual

Tue 14 Apr 2026 @ 03:00 PM (EDT)

Maestro Masters Americas: Migration and Upgrades Best Practices

Virtual

Thu 09 Apr 2026 @ 03:00 PM (CEST)

Secure Your AI Transformation (EMEA)

Virtual

Thu 09 Apr 2026 @ 02:00 PM (EDT)

Secure Your AI Transformation (AMER)

Virtual

Thu 09 Apr 2026 @ 03:00 PM (EDT)

Americas Deep Dive: What's New in R82.10

Virtual

Fri 10 Apr 2026 @ 10:00 AM (CEST)

CheckMates Live Netherlands - Sessie 45: Harmony SASE update

Virtual

Tue 14 Apr 2026 @ 04:00 PM (CEST)

Maestro Masters EMEA: Migration and Upgrades Best Practices

Virtual

Tue 14 Apr 2026 @ 03:00 PM (EDT)

Maestro Masters Americas: Migration and Upgrades Best Practices

In-Person

Tue 14 Apr 2026 @ 03:00 PM (PDT)

Renton, WA: Securing The AI Transformation and Exposure Management

In-Person

Wed 15 Apr 2026 @ 10:00 AM (BST)

AI Security Workshop - London

In-Person

Thu 16 Apr 2026 @ 10:00 AM (CEST)

AI Security Workshop - Munich

In-Person

Thu 30 Apr 2026 @ 03:00 PM (PDT)

Hillsboro, OR: Securing The AI Transformation and Exposure Management

In-Person

Thu 07 May 2026 @ 01:30 PM (AEST)

CheckMates Live Sydney

CheckMates Events

Are you a member of CheckMates?