General Topics

Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT

What's New in Check Point SASE

Watch Now!

The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses

Watch Now!

AI Security Masters
Implementing the AI Security Trifecta

Watch Now!

CheckMates Go:
Half is Not Enough

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Explorer

18300

Domain object is not working in R80.10 properly

18300

inside

Participant

18299

Request for VSX training Videos R80.10 or R77.X

18299

Solved

inside

Contributor

18299

How to allow specific youtube video categories?

18299

inside

Champion

18297

Announcement – Check Point Firewall Administration R81.10+ book update

18297

inside

Advisor

18294

SmartEvent - Error (CPSEMD not running)

18199

inside

Contributor

18199

High Memory after Install 110Take

18199

inside

Employee

18199

ISP Redundancy & Policy Based Routing

18099

Solved

inside

Collaborator

17999

Route Based VPN with Azure in Cluster Environment

17999

Solved

inside

Advisor

17900

VPN1-Edge | SBXW-166LHGE-4 - compatible software

17900

inside

MVP Silver

17900

How to check telnet is enable or not.

17899

inside

Explorer

17800

Delete a specific connection entry in Checkpoint Gateway

17800

Solved

inside

Contributor

17799

ISOmorphic Tools bootable flash creation for R80.40

17799

Solved

inside

Contributor

17799

failover logic operation in VSX?

17799

Solved

inside

Explorer

17799

DNS problems possibly due to firewall issue

17799

inside

Participant

17790

Tunnel mode VPN and Transport mode VPN

17790

inside

Employee

17699

User-Space firewall support for R80.30 3.10 and above

17699

inside

Participant

17699

Getting error “dropped by fwpslglue_chain Reason: PSL Drop: internal - streaming;"

17699

inside

Collaborator

17699

RX-DRP/rx_missed_errors on Interface

17699

inside

Contributor

17699

What does Sticky Decision Function DO?

17699

Solved

inside

Contributor

17699

Vulnerability-ssl-weak-message-authentication-code-algorithms for Port 8211

17699

Solved

inside

Participant

17693

High CPU utilization causing slowness

17693

Solved

inside

Employee Alumnus

17599

Share your feedback for your chance to WIN new Apple AirPods Pro!

17599

inside

Contributor

17599

Quick mode Received Notification from Peer: invalid id information

17599

Solved

inside

Advisor

17599

Abnormality in pattern matching of APP CONTRL BLADE

17574

inside

Explorer

17399

can I export the list of web application categories

17399

inside

Contributor

17399

Creating multiple VPN site to site connections on CheckPoint

17399

inside

MVP Silver

17399

ClusterXl synchronization network bandwidth

17299

inside

Collaborator

17299

Permit ICMP request only in several networks

17299

inside

MVP Silver

17299

Management problem with GAIA OS

17299

Solved

inside

Contributor

17298

How can I monitor BGP state using SNMP?

17298

Solved

inside

Collaborator

17282

What is SNMP OID for CP FW number of new connections?

17282

inside

Collaborator

17199

Question on traffic handling between Kernel Mode FW and Usermode FW

17199

Solved

inside

Collaborator

17199

Unable to open URL Categorization link

17199

inside

Contributor

17199

Setting Up Site-to-Site VPN to 3rd Party Gateway

17099

inside

Collaborator

17000

Installation failed. Reason: Load on Module failed - failed to load security policy

17000

Solved

inside

MVP Gold CHKP

16999

First impressions R80.30 on gateway - one step forward one (or two back)

16999

inside

Contributor

16999

Microsoft Activation negatively impacted by HTTPS Inspection

16999

inside

MVP Diamond

16998

R80.x - Performance Tuning Tip - Management Data Plane Separation

16998

Solved

inside

Contributor

16991

CoreXL option disabled in cpconfig

16800

inside

Participant

16799

How to create QoS rule to limit bandwith per user

16799

inside

MVP Gold

16799

https Traffic Dropped ... due to Out of sequence TCP packet retransmission. Stripping all packet dat

16799

inside

Advisor

16700

Application Control can not catch Opera web browser VPN

16700

inside

Contributor

16699

Bandwidth limit per app /category

16699

inside

Advisor

16699

Site-to-Site VPN connection issue with CISCO ASA

16695

Solved

inside

Explorer

16671

r80.10 all-in-one evaluation license activation?

16671

inside

Explorer

16602

Problem with VPN AMAZON(AWS) CHECK POINT

16602

Solved

inside

Contributor

16599

Ipsec VPN b/w checkpoint cluster and Azure gateway

16599

inside

Contributor

16599

R80.10 - VPND process utilizes a large amount of CPU

16501

inside

Participant

16499

fw_full process consumes 100% CPU

16499

Solved

inside

Admin

16499

Hacking DNS TechTalk: Video, Slides, and Q&A

16499

Solved

inside

Advisor

16499

Slowness when Accessing HTTP traffic over Remote Access VPN

16400

Solved

inside

Participant

16399

Checkpoint firewall logging source interface

16399

Solved

inside

Collaborator

16399

What different for Content Awareness and Data Loss Prevention blade

16399

inside

Contributor

16393

Encryption domain mismatch even though its set it up correctly

16299

inside

MVP Silver

16299

Route Based VPN on one side and Domain Based VPN on other

16199

Solved

inside

MVP Gold

16199

R80.20 - SYN Defender on SecureXL Level

16100

Solved

inside

Advisor

16099

Is Check Point Gaia vulnerable towards this new cve-2024-6387 in OpenSSH?

16099

inside

Contributor

16096

Firewall priority queues setting

16096

inside

Contributor

16000

ONELINER - Check CVE-2024-24919 Vulnerability

16000

Solved

inside

Collaborator

15999

How to Prepare a lab for checkpoint using vmware

15999

inside

Participant

15999

Connection rematch after policy installation

15999

inside

Participant

15999

New updatable object for HTTPS Inspection: HTTPS Services Bypass

15901

inside

MVP Diamond

15901

RFID token authentication with R81+ Raspberry Pi

15901

Solved

inside

Contributor

15899

Reg: policy installation failed on gateway

15899

inside

Explorer

15800

Basic commands used in checkpoint for troubleshooting and the features?

15800

inside

MVP Gold CHKP

15800

Security Gateway Performance Optimization - VSX

15800

Solved

inside

Advisor

15799

how to disable SecureXL for specific src to specific dst

15799

inside

Admin

15799

fw ctl zdebug - this is wrong...

15799

Solved

inside

Contributor

15799

Change Management IP addresses in Cluster

15700

Solved

inside

Participant

15699

Security Policy Management without SmartConsole

15699

inside

Explorer

15699

Zoom Meeting Issues with SecureXL

15699

Solved

inside

Collaborator

15600

Disable SecureXL permanent R80.20

15600

inside

Participant

15600

Does 4600 Appliances supports upgrade to R80.20?

15600

inside

Collaborator

15600

HTTPS inspection in R77.30 and R80.10 with various combinations of proxy and probe bypass

15600

Solved

inside

Participant

15500

Smartconsole cant connect to firewall in GNS3

15500

Solved

inside

Admin

15400

101

[Action Required] - Critical Security Advisory: VPN Vulnerabilities CVE-2026-85102 and CVE-2026-8510

15400

101

Solved

inside

Explorer

15400

Check Point Security Gateway as HTTP/HTTPS Proxy

15400

Solved

inside

Contributor

15399

Local backup issue /var/log is full

15399

inside

Collaborator

15399

Manually define local VPN Domain per remote peer

15399

inside

Admin

15399

R80.20 has recommended status now!

15399

Solved

inside

Contributor

15399

NMAP Shows Ports 5060 & 2000 Open

15399

Solved

inside

Advisor

15399

Zero Downtime Upgrade - R80.10 - R80.40

15399

inside

MVP Diamond

15300

Check Point configuration mistakes - Top 10

15300

inside

Contributor

15300

Announcement: Check Point R82 - Recommended Release

15299

inside

Participant

15299

ICMP is sometimes drop when send via IPSec Tunnel

15299

inside

Participant

15299

Issue with Checkpoint Identity Agent

15299

Solved

inside

Collaborator

15200

Failed to connect to SMTP server - smtp Traffic Rejected

15200

inside

Advisor

15200

White Paper - How to Batch Categorize URLs

15099

inside

MVP Silver

15099

Exporting Objects/Groups in R77.30

15099

inside

Contributor

15099

The license it is impossible to detach it in smartupdate

15099

inside

Employee Alumnus

15099

VPN tunnel with Dynamic IP address.

15099

inside

Collaborator

15099

getting certificate error when trying to connect to a site

15099

Solved

inside

Contributor

15098

Is CP planning to support Load-Sharing in future releases?

15098

Solved

inside

MVP Gold

15093

Printernightmare CVE-2021-1675

15093

inside

Contributor

14999

Deploying Check Point Solution R80.40

14999

inside

Advisor

14999

Having trouble connecting to Check Point 1430/1450

14999

Solved

inside

MVP Diamond

14999

R80 CCSA/CCSE training material and exams

14999

inside

Collaborator

14999

No authentication for port 18231 Policy Server Login (old)

14999

inside

Advisor

14970

Lots of First packet isn't SYN

14970

Solved

inside

Collaborator

14899

Domain objects (FQDN mode) vs Custom Applications/Sites

14899

Solved

inside

Collaborator

14898

CoreXL: only one SND core is busy

14898

inside

Contributor

14802

Update appliance 1490 os R77.20.70 to R77.30 or R80?

14802

Solved

inside

Collaborator

14799

interaction between VRRP and CXL - why is there a tickbox for ClusterXL when the cluster is VRRP

14799

inside

Explorer

14799

Issues with Identity Awareness - some users are not seen and some traffic is incorrectly marked

14799

inside

Participant

14799

6800 stability Issue - R80.10 w\/Take 203 or R80.20 w/ Take 74

14799

inside

Collaborator

14799

Identity awareness collector changes user identity for same IP while connecting to RDP

14796

inside

Contributor

14793

How to Block TOR NODE is Checkpoint Firewall R80.30 Version

14793

Solved

inside

Advisor

14699

Failed to deccrypt CP Site Response...

14699

Solved

inside

Contributor

14699

Custom Application Site url substring wildcard

14699

inside

MVP Silver

14699

Identity Awareness issue - User identified but the rule is not matching

14699

Solved

inside

Explorer

14699

SPLAT R75.40 - disable TCP / ICMP timestamp

14699

Solved

inside

Contributor

14698

Command to show history of ClusterXL member status

14599

inside

Participant

14599

Production cluster upgrade R77.30 to R80.10

14599

inside

Contributor

14599

WSDNSD high cpu + Strange messages

14599

Solved

inside

MVP Gold CHKP

14599

Domain objects in R80.10 spamming DNS

14599

inside

Participant

14499

Duplicate services - which will be used?

14499

inside

Advisor

14499

R81.10 End-of-Support extension

14499

inside

MVP Diamond

14497

Performance Tuning - Bufferbloat

14497

inside

Admin

14399

CheckMates Fest 2025: Video and Q&A

14399

inside

Collaborator

14397

Maestro integration with Cisco ACI

14397

inside

MVP Diamond

14395

Switch or Cable between ClusterXL members for the sync network?

14395

Solved

inside

Contributor

14394

How does Domain Management Server (CMA) get to the internet?

14300

Solved

inside

Collaborator

14300

R80.x - Performance Tuning Tip - Control SecureXL / CoreXL Paths

14299

inside

Contributor

14299

Error installation CP VPN E80.92

14299

inside

Admin

14299

White Paper - URL Filtering Best Practices for the Large Scale Deployment

14299

inside

Admin

14299

Infinity R80.10 "Cool Feature of the Day" - Content Awareness

14299

inside

Employee

14299

What is the practical example to use Bridged Mode?

14299

inside

Contributor

14292

can ping internet but unable to browse

14292

inside

MVP Diamond

14200

R77.30: New Jumbo Hotfix (Take 338) GA-Release

14200

inside

MVP Diamond

14199

R80.10: New Jumbo Hotfix (Take 154) GA-Release

14199

inside

Contributor

14194

why 3000 series CPU core higher than 5000 series?

14194

Solved

inside

Advisor

14100

Checkpoint IPSO vs SecurePlatform vs Gaia

14100

inside

MVP Diamond

14099

R80.40 - Multi Queue on VMWare vmxnet3 drivers.

14099

Solved

inside

Collaborator

14099

need checkpoint document that has details of all field that are in logs

14099

inside

Advisor

14098

Reminder for R80.20/30 End-of-Support on 30/9/2022

14001

Solved

inside

Collaborator

14000

OpenSSH Vulnerability detection

14000

inside

Participant

14000

How to migrate Full HA Cluster(r77.30 to r80.10)?

13902

inside

Champion

13899

The number of Virtual systems on VSX cluster with the HA license

13799

inside

Collaborator

13704

R77.30 Sending Check Point Logs to a Syslog Server

13704

Solved

inside

Explorer

13699

Cannot ping remote VPN gateway external IP

13699

inside

Participant

13699

Zero Downtime Upgrade From R77.30 to R80.20

13699

inside

Collaborator

13699

LDAP groups in Remote Access VPN Rules

13695

Solved

inside

Explorer

13600

GotoAssist doesn't work when Inspection SSL is enable

13600

Solved

inside

Advisor

13599

"CRLs failed to be downloaded" error when access SmartConsole R80.30

13599

inside

Advisor

13592

White Paper - Configuring NAT64 for Internet Access in R80.20

13500

inside

Admin

13500

How To Open a Case with TAC and/or Account Services

13500

inside

Admin

13499

I have a Check Point model L-50 (serial number - 1310436119900) and I just need to know the throughput the series 1100 can handle?

13499

inside

Participant

13499

Meaning of flag in packet dropped

13497

inside

Champion

13399

Enable multiple email addresses associated with account.

13399

Solved

inside

Contributor

13387

Cluster Falover after every change on pbr, routing, ospf,...

13387

Solved

inside

MVP Gold

13386

VSX/ VS - Remote VPN clients connecting to 'other' VS in cluster

13299

Solved

inside

MVP Gold

13299

CVE-2024-3094 [CRITICAL Vulnerability Just Disclosed (CVSS-10)]

13299

inside

MVP Diamond

13299

New daemon or processes under R80.20!

13299

Solved

inside

Explorer

13298

Destination Host Unreachable - 8.8.8.8 (intermittent)

13298

inside

Contributor

13294

HTTPS Categorization ... a drama

13294

inside

Collaborator

13199

RX-OVR drops and 10 gb hardware buffer

13199

inside

Employee

13199

Notes on Script to Identify vulnerable Security Gateways for CVE-2024-24919

13199

Solved

inside

Contributor

13187

CPSIZEME Download URL not working

13176

Solved

inside

Explorer

13100

URL Filtering Doesn't work on HTTPS

13100

inside

Contributor

13099

When you enable HTTPS inspection, gmail does not work.

13099

inside

Contributor

13099

Problem while installing upgrade tools - Cannot detect the version of the installed upgrade tools.

13099

Solved

inside

Employee

13098

End-of-Support policy updates for R80.10 software version

13098

Solved

inside

Collaborator

13080

Is SAML support available in r80.10?

13000

inside

Explorer

12999

Important: R80.10 End-of-Support will take place in May-2021

12999

inside

Collaborator

12991

End of Support for R77, R77.10, and R77.20

12900

inside

Explorer

12900

R80.20 SecureXL drop template support

12900

Solved

inside

Participant

12899

What is the default time that HIT count data is kept in R80?

12899

inside

Advisor

12899

TCP port reuse between Check Point Remote Access Gateway and Loadbalancer

12899

Solved

inside

Participant

12898

No ssh access to VPN peer outside IP

12898

inside

Contributor

12857

User data Failed to Upgrade R81 to R81.10 CPUSE GAIA PORTAL.

12857

inside

Contributor

12801

Viewing Fan Status on non-Checkpoint Appliance

12801

inside

Admin

12800

Check Point Engage 2026 - Call for Papers

12800

inside

Admin

12800

May the 4th + 4 Paradigm Shift: Video, Slides, and Q&A

12800

inside

Participant

12799

Configuration Migration From Checkpoint 4200 Appliance to CP 4800 Appliance

12799

inside

Employee

12799

R82: Parallel Processing Based Packet Flow

12799

inside

Explorer

12799

Unable to access new checkpoint gateway using WebUI

12799

inside

Participant

12799

WEB_API constant log in - log out

12799

inside

Explorer

12799

Vulnerability on CheckPoint Banner disclosure

12798

inside

Explorer

12797

R81 - Multi Queue (what's new)

12700

inside

Collaborator

12700

The difference between checkpoint creation domain and Custom Applications/Sites creation URL

12700

inside

Collaborator

12700

Interesting traffic.. a parameter for Phase-2 negotiation?

12699

inside

Participant

12699

command to check particular segment is already part of any encryption domain

12699

inside

Explorer

12699

Difference between interface based and zone based firewall?

12699

Solved

inside

Participant

12699

SSL Medium Strength Cipher Suites Supported

12696

inside

Participant

12696

Traffic dropped by Reason: PSL Drop: HTTP_DISPATCHER;

12696

inside

Contributor

12692

R80.40 policy install diff changes breaks the network

12692

inside

Collaborator

12600

checkpoint not opening in WEB GUI

12600

inside

Explorer

12600

Fragmented packet with IPS(R80.10)

12600

Solved

inside

MVP Gold

12599

USFW on appliances with less than 40 cores

12599

Solved

inside

Participant

12599

SIP signalling traffic being dropped erroneously

12599

inside

Explorer

12500

Microsoft Office 365 Service Application Control

12500

inside

Employee Alumnus

12499

R80.30 – default version (widely recommended)

12499

inside

Participant

12499

HA clusterXL with Bond interfaces with Cisco switch

12499

inside

Explorer

12499

Rule base checking if Application control and URL filtering blade is enable?

12499

inside

Participant

12499

Syslog alert for power supply failure

12499

inside

MVP Diamond

12498

Homekit (Siri) integration with R81 Dynamic Objects

12498

Solved

inside

Participant

12400

Fragment Reassembly Time Exceeded Errors

12400

inside

Collaborator

12399

DNS Passive Learning Design Question

12399

inside

Champion

12399

FTP causes 100% CPU on one core

12399

inside

Employee

12399

CPUSE (Deployment Agent) new GUI

12399

inside

Advisor

12300

R80.30 - Slow DMZ transfer performance

12300

Solved

inside

Advisor

12300

Firewall crashed reboots - vmcore crash file R80.30

12299

inside

Admin

12299

Platform URLs You'll Find Useful

12299

inside

Advisor

12299

Two Numbered VTI's between gateways managed by same Security Management?

12299

Solved

inside

Contributor

12299

Configuring Cluster Addresses on Different Subnets

12299

inside

Advisor

12299

Natting to an IP range not directly connected

12200

Solved

inside

Contributor

12200

Checkpoint as a Reverse Proxy for Skype for Business

12200

Solved

inside

MVP Diamond

12199

R80.20 - More then 40 Cores for CoreXL?

12199

inside

Contributor

12199

Where can I check the phase 2 encryption domain on cli for existing vpn

12199

inside

Participant

12199

What are to the point differences between Automatic & Manual NAT?

12199

inside

Collaborator

12199

Users reported web traffic stopped working

12199

inside

Champion

12199

Precedence in the rule order processing in R80.20

12199

inside

Advisor

12194

CoreXL affinity on VSX R80.10 does not survive reboot?

12194

inside

Contributor

12192

New VPN daemons in R81.10 / R81.20

12101

inside

Explorer

12100

should i be worried about a key install to an unknown ip from the firewall?

12099

inside

Collaborator

12099

IKE Failure on Site to site IPSec VPN with Zyxel USG - open for suggestions

12099

inside

Contributor

12099

Site to Site vpn with 3rd party DAIP gateway

12099

inside

Participant

12099

Messages of mux error on a cluster (active-standby) in r80.20

12099

Solved

inside

Contributor

12099

Port forwarding to internal IP connected to other firewall.

12099

inside

Advisor

12099

R77.30 Take 292: New Jumbo Hotfix GA Release

12099

Solved

inside

Participant

12099

Import a trusted CA cert to Gaia OS

12099

inside

Participant

12097

What happens when session timeout of 720 minutes ends in Identity Awareness

12097

inside

Mentor

12000

Upgrade Reporter Progress (R80.30->R80.40 Standalone) - Stuck on Importing IPS Data ...

12000

inside

Participant

12000

whitelist AWS S3 buckets using complex URI / URL patterns?

12000

inside

MVP Diamond

11999

Error encountered processing a template

11996

inside

Contributor

11986

Failed to get metadata for the package

11986

inside

MVP Diamond

11899

R80.40 - Performance Tuning Tip - CPU Spike Detective

11899

Solved

inside

Participant

11899

Move External Interface to different NIC

11899

inside

Explorer

11899

Wimax branch offices not able to browse

11899

inside

Contributor

11899

General community posting questions

11899

inside

Champion

11899

Should HTTPS inspection be accounted for in the appliance sizing charts?

11899

inside

Contributor

11899

Check Point Diagnostic Console (cdc)

11899

Solved

inside

Participant

11894

Trouble uploading video on course from linkedin

11799

inside

Mentor

11799

fw monitor/tcpdump and "fwaccel off" - yes or no

11799

Solved

inside

Advisor

11799

Cluster down and policy installation failure after enabling HTTPS inspection

11799

inside

Explorer

11701

Blocked HTTPS requests are not getting a UserCheck message

11701

Solved

inside

MVP Diamond

11700

High Performance Firewalls - ESX vs. Open Server

11700

inside

MVP Silver

11700

Renew external (3rd party) certificate for IPSEC VPN

11700

Solved

inside

Collaborator

11700

AES-GCM support - IPsec Phase1

11700

inside

Participant

11700

Transparent proxy - sense? (comprehension question)

11700

Solved

inside

Contributor

11700

Need help to configure log forwarding to syslog server SIEM from checkpoint management server

11700

inside

Participant

11699

SMTP Server Non-standard Port Detection

11699

inside

Collaborator

11699

TCP packet out of state: First packet isn't SYN

11699

inside

Advisor

11699

Rule matching on sources it shouldn't

11699

Solved

inside

Contributor

11699

Update failed. Contract entitlement check failed. Gateway can not access internet

11699

inside

Explorer

11699

ONELINER - Show all Kernel Parameter

11699

inside

Collaborator

599

How to lock change method authentication VPN on Client Security

599

inside

Employee

1397

Introducing AIOps: Real-Time Visibility, Automation, and Predictive Insights - The Video

1397

Solved

inside

Collaborator

3498

Block .lzn file extension in MTA Blade

3498

inside

Explorer

1403

R81.20 SmartConsole unresponsive

1403

Solved

inside

Explorer

4853

CoreXL is turned off by default on a brand new 9800

4853

Solved

inside

Participant

6020

Warning Messages: cp_timed_blocker_handler

2625

inside

Admin

8132

What's New In R82.10 December 2025: Video, Slides, and Q&A

8132

Solved

inside

Contributor

1342

Smart Console Hits count column

1342

inside

Employee

2857

Harmony DLP Browse: Control, Monitor, and Protect Sensitive Data

2857

Solved

inside

Advisor

1975

Introducing AIOps: Real-Time Visibility, Automation, and Predictive Insights

3559

Solved

inside

Participant

2052

Unable to Access the SAP Server form the VPN tunnel

2432

Solved

inside

Participant

1088

Quantum Gateways - NGTP and NGFW

1088

Solved

inside

Advisor

3511

Log distribution performance - Impact on GWs verse log servers

3511

Solved

inside

Contributor

5935

One interface active cause ssh/https connectivity?

7097

Solved

inside

Advisor

1040

HTTPS Traffic Accepted via Implied Rules

1040

inside

Explorer

7730

Configure site to site vpn between aws and checkpoint

7730

inside

Explorer

957

R82 SecureXL Flowchart - non accelerated packets

5485

inside

Mentor

29760

101

"UDP checksum is incorrect" - 100s of IPv6 DROPs in fw.log - TP/IPS responsible?

29760

101

Solved

inside

Advisor

952

can Check Point enforce image recognition?

952

Solved

inside

Collaborator

17311

What is SNMP OID for CP FW number of new connections?

17311

Solved

inside

Contributor

7784

SIC problem after upgrade to R81.20

7784

Solved

inside

Collaborator

2609

Process 'usim_x86' running for months, using 600+% CPU

2609

Solved

inside

Advisor

2392

Clarification When Upgrading to R82

1547

inside

Admin

526

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT

526

Solved

inside

MVP Diamond

1032

Tips and Tricks 2025 #16: Securing Enterprise IOT/OT recording

1032

inside

Advisor

3969

Your First Response: Immediate Actions for Cyber Incident Containment- AMER - Recording

759

inside

MVP Diamond

2823

Post Quantum Cryptography (PQC)

2823

Solved

inside

Advisor

3315

Your First Response: Immediate Actions for Cyber Incident Containment- EMEA - Recording

483

inside

Contributor

8151

Error logs in Threat Emulation

8151

inside

Collaborator

476

Why Doesn't Checkpoint MTA Detect Obfuscated JS in Email HTML Body (eval/atob)?

476

inside

MVP Diamond

926

Https inspection and urlf/appc blade settings I found work the best

926

inside

Collaborator

7159

arping responses not showing on newer appliances

4760

inside

Advisor

5190

MFA Behavior on Gaia Portal – R81.20 Jumbo Hotfix Take 118 and 113

1678

inside

Explorer

1348

Site to Site VPN issue (Checkpoint To ASA)

1348

Solved

inside

MVP Diamond

8165

What is UPPAK, KPPAK vs. USFW, KSFW

8165

inside

MVP Diamond

4825

Performance Tuning Tip - VPN Speed Test

4825

inside

Explorer

670

Deny Multiple Services in a Single Rule

1465

Solved

inside

Advisor

719

R82.x Architecture and Performance Tuning - Link Collection

1316483

295

Solved

inside

Contributor

4383

Migrating from ClusterXL to ElasticXL steps

3319

Solved

inside

Collaborator

1813

Proxy arp issue - automatic NAT rule

1813

Solved

inside

Participant

5821

Setting up Checkpoint 5800 appliances behind a Residential AT&T modem/router

5821

inside

Explorer

5452

Cannot access to Product Evaluation

1231

Solved

inside

Explorer

3240

Allow older clients to connect to this gateway disabling L2TP+IPSec mode

3240

Solved

inside

MVP Diamond

860

VXLAN - Perfomance optimation question

860

inside

Advisor

1301

ClusterXL Forced Failover command

1301

inside

MVP Diamond

1930

Mini Concept – VPN Layer 2 tunneling between two data centers

1091

inside

MVP Diamond

505

Remote Access Location Awareness - DC Check

1587

Solved

inside

Advisor

1244

Pasting clish BGP MD5 secrets?

1244

inside

Participant

1497

Remote Access Authentication with Certificate and Group Membership Retrieval

1497

inside

Admin

1327

Software Blade effectiveness with and without HTTPS Inspection - sk184185

1327

Solved

inside

MVP Diamond

3243

SmartConsole Extension Issue in R81.20/R82

3243

inside

Participant

692

Remote Access VPN & Site-to-Site tunnels broken (“invalid cookie” / SA desync) after upgrade

692

inside

MVP Diamond

3825

Check Point Appliances - Overview

3825

Solved

inside

Collaborator

1212

R77.30 VS migration from legacy VSX cluster to new one on R81.20

1212

Solved

inside

Advisor

1219

Can I implement Identity Awareness without using a PDP/PEP Broker?

1219

Solved

inside

Collaborator

1670

Gateway blades suddenly expiring despite having valid licenses

1670

inside

MVP Diamond

4032

Bootable USB from ISO for open servers

3366

Solved

inside

Explorer

8883

Management Interface (eth0) assigned via DHCP - cannot remove the static IP of the interface

8883

Solved

inside

Collaborator

1208

Identity Awarness upgrade (cross platform)

1208

Solved

inside

Participant

2747

P2P Config compatibility in Active/Standby Cluster

2042

Solved

inside

Participant

1405

Introducing new Acceleration NIC 4x10/25G for Quantum Force appliances

5957

inside

Contributor

7157

CCSA/CCSE Labs on HP Notebook - Performance Issue

7157

inside

MVP Diamond

850

Evolution of Check Point's website 1996 - 2025

850

Solved

inside

Contributor

2153

CPX 2001 - An Internet Security Event

1159

inside

MVP Silver

2412

R82 Streamed SmartConsole (Smart-1 Cloud) issue with Gateways and Servers view

2412

inside

Contributor

1811

Get interfaces WITH/WITHOUT topology

1811

inside

Contributor

3941

VPN IPSec Tunnel with Sophos IKEv2 Issue

3941

inside

Advisor

5919

Traffic is not visible on management.

5919

Solved

inside

Advisor

1197

9800 interfaces links down but switchports up

1532

inside

Contributor

1577

Best Practices for Websites and Applications

1577

Solved

inside

Advisor

1979

CVE-2025-32728 - permanent solution?

1979

inside

MVP Diamond

1777

VSX on Check Point 9300/9400 Appliances

1777

Solved

inside

Collaborator

2459

IPsec VPN between Checkpoint and Remote Server

2459

inside

Explorer

999

Management-Server: Addition NIC or VSX-Cluster?

999

inside

Collaborator

3905

Port 19009 on MGMT Server Accessible from Internet via Implied Rule Despite GUI Clients List

3905

inside

Admin

520

Tips and Tricks 2025 #13 - Strategic Cyber Assessments: How to Strengthen Your Security Posture

520

inside

Admin

1757

Learn About CheckMates October 2025

1757

inside

MVP Diamond

7564

HowTo: Configure a VPN between FortiGate & Check Point

7564

Solved

inside

MVP Gold

1431

Can I configure complex views using smart reporter?

1431

Solved

inside

Contributor

672

turning off secureXL resolves mac flapping?

672

Solved

inside

MVP Gold

1443

Identifying failed ISP in case of ISP redundancy

1443

Solved

inside

Advisor

963

Minimum RAM and CPU requirements for S1C Management

963

Solved

inside

Participant

2476

How are you keeping up with Check Point VPN/SIC Certificates

1670

inside

Authority

1575

Notification about changes within Support Life Cycle

1575

inside

Collaborator

3712

SIC not automatically renewing certificate in VSX

1009

Solved

inside

Explorer

1015

Secondary MDS Migration and IP Change

1015

Solved

inside

Advisor

4464

ClusterXL – Should the standby member ever generate traffic with the VIP?

4464

Solved

inside

Advisor

1771

R82 - ssl inspection auto bypass question

1771

inside

MVP Diamond

959

Tips and Tricks 2025 #12 - Check Point PRO Support Overview & Update

356

Solved

inside

Collaborator

835

Are Logs Still Visible If Only the index File Remains?

835

Solved

inside

Participant

64517

Best way to whitelist KnowBe4 Phishing domains?

64517

inside

MVP Diamond

1078

Special functions via policy - name field

1078

Solved

inside

Collaborator

1368

Using Identity Awareness Collector with Cisco FTD Syslogging

1368

inside

Participant

1329

Firewall is freezing/crashing randomly after upgrade to R82

1329

inside

Participant

1320

How to allow redirects on Cloudflare

1320

inside

Explorer

6860

R82 http proxy and dns proxy forwarding domains not working

6860

inside

Admin

1940

BRICKSTORM: A Stealthy Espionage Campaign Targeting Enterprise Infrastructure (sk184082)

1940

inside

MVP Platinum

4171

Ongoing issue: high CPU load fw_workers + rad

4171

inside

Advisor

961

How to safely reuse an existing cluster

961

inside

Advisor

7735

unable to ssh to device after JHF upgrade

7735

Solved

inside

Advisor

2234

Difference Between Configuring Proxy on Firewall CLI vs Cluster Object in SmartConsole

2234

Solved

inside

Participant

3529

Proxy HTTP/HTTPS - two sessions

3529

inside

MVP Gold

538

What should be the settings for ingesting logs in SIEM for self managed spark devices

538

Solved

inside

Explorer

2789

Unable to remote save snapshot via SCP.

2789

inside

Advisor

3588

forklifting 5xxx appliances -> 9100 UPPAK observations

3588

inside

Advisor

673

ISP redundancy and VPNs to azure

673

Solved

inside

MVP Diamond

545

An idea from customer about web UI jumbo hotfix install

545

Solved

inside

Collaborator

3504

HTTPS inspection - Create a CSR for an external CA to use for the outbound certificate

3504

inside

Employee

2059

Jumbo Hotfix Accumulator for Quantum Force 3900 Appliances take #22 has been released today

2059

Solved

inside

Contributor

1795

Migrate eth interface to a VLAN interface in bond

1795

Solved

inside

Participant

1518

Strange BGP announcement of a /31 network as /32

1518

Solved

inside

Advisor

1638

Clarification on “Check Point 6200P” Model

1638

Solved

inside

Explorer

1225

Memory cache usage on 16200 appliance – expected behavior?

3176

inside

Employee

15340

Announcement: Check Point R82 - Recommended Release

15340

inside

Advisor

685

Global Policy Package - Skip/Goes to Domain Layer action

685

Solved

inside

Collaborator

2591

Question About Default Threat Prevention Profiles

705

Solved

inside

Advisor

1044

R81.20 Global Properties Stateful Inspection default settings

1044

inside

MVP Silver

1432

Common Criteria for Harmony Endpoint Security with compliance to 2 NIAP Protection Profiles

1584

Solved

inside

Admin

18437

IMPORTANT - Action Required For VPN/Remote Access Security Gateways Using DigiCert - by Sep 8, 2025

18437

Solved

inside

Contributor

1248

Single VSY within VSX environment wont send logs to dedicated log server

1248

inside

Champion

23299

Configuring dynamic routing in clustered VSX

23299

inside

Collaborator

2625

Failed login SmartConsole after upgrade Win11

2625

Solved

inside

Advisor

2725

Tip: How to deal with RAD errors

2461

inside

Explorer

928

Server Error in '/owa' Application

928

inside

Contributor

8561

VPN issue stuck in Phase 1 and sometimes disconnects

8561

Solved

inside

MVP Gold

1276

new transciever CPAC-TR-25SR-DM

918

inside

MVP Gold

758

UPDATE - DigiCert Certificate Expiration Mitigated

5584

inside

Advisor

1034

idrac - how to create account with admin role

1034

inside

Employee

5136

Introducing the New Interactive Ideas Portal – Join the Pilot!

5136

inside

Contributor

2379

Process file types known to contain malware

2379

Solved

inside

Participant

35718

useful debug command in checkpoint

35718

inside

Contributor

1181

Route Based VPN Network SA no route

1181

inside

MVP Gold

1332

Can not access smart console over site-site VPN

1332

Solved

inside

Explorer

730

External Certificates for IPSEC VPN

730

inside

Advisor

887

Rewriting internet access policy

887

Solved

inside

Participant

4917

Site to site vpn drops on policy install

4917

inside

Collaborator

779

Customer FTP traffic keeps triggering new IPS protections

779

inside

Collaborator

6186

Trusted CA List is missing a lot

6186

inside

Advisor

1455

Install Policy pushed but still visible by other admin

527

Solved

inside

Advisor

2578

CPUSE v2606 manual installation failure

1610

inside

Employee

512

R82 Jumbo Hotfix Accumulator take 39 has been released

512

inside

Advisor

1527

Best Way to Export Policy Package for Reporting

1527

Solved

inside

Advisor

4397

Regenerate Token for MaaS Tunnel

4397

inside

Collaborator

1241

a third-party certificate on a clustered and centrally managed Appliance 1900

544

Solved

inside

Participant

1104

Checkpoint 19000 Supported Transceivers Sync

1104

Solved

inside

MVP Gold

1261

R82 Take 36 is definitely taking backup of logs as well ended in a huge file size

1261

inside

Explorer

951

Testing primary and secondary bond interfaces

951

Solved

inside

Participant

1125

Best Practices for Threat Prevention API Calls to Appliance - API repository

1125

inside

Advisor

678

HA Firewall Migration: Sync over Dedicated Point-to-Point VLAN

678

Solved

inside

Collaborator

1105

What are the new NAT options in SMS and GW for?

1105

Solved

inside

Contributor

9914

Traffic initiated from Lan to VPN Endpoint Client Blocked

2699

inside

Participant

3538

best practices for blocking URLs in a scenario where resources have different URLs but the same IP

3538

Solved

inside

Advisor

10490

Quantum Force 9000 Appliance OS version Compatibility

1294

inside

MVP Diamond

1061

Help Shape the Future of AI at Check Point

766

inside

Collaborator

3273

Brute-Force Attack on Check Point Mobile VPN: Multiple IPs and Fake Usernames

3273

Solved

inside

Collaborator

2360

Firewall - Automating Firewall Rule Cleanup Based on Usage

2360

inside

Employee

3275

CVE-2025-45582 - tar: Tar path traversal

3193

Solved

inside

Advisor

1455

Peer certificate verification failed after certificate replacement

1455

Solved

inside

Contributor

21157

How to list arp table and identify network devices with mac under Check Point FWs

21157

Solved

inside

Explorer

1781

Remote Access VPN – Can specific routes be assigned to particular users?

1781

inside

MVP Diamond

2592

R8x - Performance Tuning Tip - Appliance Sizing

2592

inside

Participant

5141

SMS Upgrade from R81 to R82 : Migrate export Warnings, S2S VPN

3854

Solved

inside

Collaborator

1352

add rule to policy via mgmt_Cli fails

1352

inside

Explorer

821

Behaviour after regular contract/subscription expiration

1101

Solved

inside

Advisor

1756

Log file isn't shown automatically after upgrade to R82

1756

Solved

inside

Explorer

1163

How to perform manual fail-over between instances of Virtual System in VSX cluster in VSLS mode

1163

Solved

inside

Explorer

3711

Migrating from Check Point 3600T to Quantum Spark 1600,Need Help with VPN User Certificate Migration

3711

inside

Participant

1807

7000 appliance R81.20 iSO image install

1807

inside

Explorer

529

Unable to take ssh for MGMT Port

529

Solved

inside

Advisor

1016

Updatable (geo) objects and IP addresses, again

1016

Solved

inside

Advisor

2001

Renaming a Gateway Node in a Cluster

2001

Solved

inside

Advisor

1329

Best Practices for Upgrading an HA Cluster from R81.10 to R81.20

1329

inside

MVP Diamond

865

R82.10 - Hardware Security Module (HSM) for TLS 1.3

865

Solved

inside

Advisor

5152

How do you keep track of the latest FW/OS updates?

5152

Solved

inside

Advisor

5590

Manual FTP transfers are always corrupted while scheduled backups are not

2172

inside

Employee

698

Estimated R82 release recommended date?

9400

inside

Collaborator

6625

Anti-bot Update failed. Contract entitlement check failed. Gateway can not access internet

6625

Solved

inside

Participant

1010

Monitord process consume high cpu, does it safe to terminate the process during production hour?

1010

inside

Collaborator

2419

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

2579

Solved

inside

Contributor

2454

Zero-downtime migration/upgrade to new hardware (ClusterXL Active/Standby)

2454

inside

MVP Diamond

6120

'fw ctl conntab -x' issue in R81.10

6120

Solved

inside

Advisor

1882

How to view the connections of the dynamic dispatcher's table

1882

inside

Explorer

6139

A suspicious traffic log was observed during monitoring

994

inside

Admin

8417

Inside the SharePoint Zero-Day (CVE-2025-53770): What It Means and How to Stay Protected - Materials

8417

inside

Explorer

680

I need Check_Point_R81.20_T631_ScalablePlatform

1515

inside

Participant

9045

Questions about User Mode and Kernel Mode

9045

inside

Explorer

2265

Cannot start Mobile Access Portal Agent

2265

inside

Advisor

1004

Openserver Dell R660xs, anyone ever tried this machine?

1004

inside

Explorer

2435

SharePoint Zero-Day CVE-2025-53770 Actively Exploited - Take actions!

2992

Solved

inside

Collaborator

32212

Unable to establish the SIC(Outgoing Policy)

876

inside

Employee

1548

Be Your Own TAC Part Deux EMEA: Advanced Gateway Troubleshooting Commands, Video and Slides

10656

inside

Admin

4089

Be Your Own TAC Part Deux Americas: Advanced Gateway Troubleshooting Commands, Video and Slides

4089

inside

MVP Gold

953

RA clients not able to access external cluster interface

953

inside

Explorer

1103

Microsegmentation with Firewall Hardware

1103

inside

Explorer

996

the new subnets are unable to communicate through the existing VPN tunnel

996

inside

Participant

1794

SMS migration from XCP-NG to ProxMox

1794

inside

Advisor

5369

Take logging out of the implied rules

2194

inside

MVP Diamond

3569

SmartConsole Shortcuts - cheat sheet

3569

inside

Explorer

1337

I can't find how my dns host is used within the FW object.

1337

inside

Explorer

5804

Checkpoint Gateway sending DNS requests to DNS server for malicious URLs

5804

Solved

inside

Explorer

1586

BGP route on Maestro Active/Active are showing as inactive/unusable

1586

inside

Employee

839

Introducing Managed SmartAwareness: Cyber Training, Fully Guided by Experts

839

Solved

inside

Contributor

2650

LOM interface - Console Session

2650

Solved

inside

Advisor

2355

Reducing /var/log partition size on Gaia OS

2355

Solved

inside

Collaborator

21550

https inspection tip/feedback/suggestion

1830

inside

Explorer

1008

Disable Camelia Cipher on the firewall

1008

inside

Collaborator

1599

always-connect for standalone vpn client

1599

Solved

inside

Collaborator

3083

Policy Installation Failed(Time out)-SMB Appliance

3083

Solved

inside

Admin

6542

New Products Introduction July 2025: Video, Slides, and Q&A

6542

Solved

inside

Advisor

1229

Export all gateways IPs MDS + VSX

1229

inside

Collaborator

2088

Unable to access Site(CPNotEnoughDataForRuleMatch)

2088

inside

Employee

830

Big News: Check Point Services Now Live on AWS Marketplace - Let’s Get the Word Out!

830

Solved

inside

Advisor

5711

Clarification Needed on fwaccel stat

5711

Solved

inside

Explorer

1425

How to renew GAIA web certificate.

1425

Solved

inside

Advisor

3316

Deleting a Checkpoint host object from smart console

1069

Solved

inside

Contributor

2873

Netflow Export with Physical Ip in cluster environment

624

Solved

inside

Advisor

1295

Moving a Gateway from One CMA to Another

1295

inside

Explorer

1038

Logs not showing up in SmartConsole after policy install

1038

inside

Collaborator

3288

VIP IP Change Not Reflected in PDP/PEP Still Shows Old IP

536

inside

Admin

796

From OT to Cloud: A Security Blueprint for Manufacturers - Americas - Recording + Slides

796

inside

Collaborator

921

synchronize Identity sharing between the active and passive node

921

Solved

inside

MVP Diamond

52241

Threat Prevention Policy fails to install to one security gateway only (Failed to handle indicators)

708

Solved

inside

Advisor

1502

Request for Advice – Changing Management Interface and Default Gateway Without Connectivity Loss

1502

Solved

inside

Employee Alumnus

5781

What is the difference between Custom Intelligence feed and Network Feeds ?

5781

inside

Explorer

1408

Static Hide Behind Gateway NAT

4747

inside

Admin

701

From OT to Cloud: A Security Blueprint for Manufacturers EMEA - Recording

701

inside

Employee

18540

New 3900 Branch office applainces were launched today 28/5

18540

Solved

inside

Collaborator

948

telnet showing open port on ILO when its not when going via FW

948

inside

Explorer

3169

Allow rule for site hosted on akamai CDN, only the first dns response seems to work

3169

Solved

inside

Explorer

1456

Identity Awareness Agents SK with direct links - published!

20758

inside

Advisor

985

Fresh Install Without USB, Possible From Boot Menu?

985

Solved

inside

Advisor

1749

simple question about ISOmorphic

1749

inside

Advisor

656

IPSec tunnel Setup [HUB and SPOKE Scenario] with Both spokes being non-checkpoint VPN Gateway

2159

Solved

inside

Advisor

656

At a gateway, how do I determine what domain the gateway belongs to?

2215

inside

Advisor

2378

Policy location on a gateway R80

9999

Solved

inside

MVP Silver

847

GMSA/automated password rotation for Identity

847

inside

Collaborator

14885

Identity awareness collector changes user identity for same IP while connecting to RDP

14885

inside

Explorer

793

SNMP Issue after JHF 99 R81.20 VSX cluster

793

Solved

inside

MVP Gold

6653

Upgrade is failing from R81.10 to R82

6653

inside

Collaborator

2312

Clarification on DNS Reputation Logs

2312

inside

Employee

2672

Quantum Force performance boost is available post the release of R82 Jumbo #3 ( Take 25)

2672

inside

Advisor

1751

Cluster Falover after every change on pbr, routing, ospf,...

13448

inside

Explorer

2218

Capsule VPN mobile users can't connect

2218

inside

Champion

54177

Can I directly search through solr indices using curl like elasticserch?

912

Solved

inside

Contributor

4532

lowering mtu on remote access vpn?

4532

Solved

inside

Contributor

2278

CP21800 (R80.40 Jumbo T211) - reply not from Cluster IP

2278

inside

Advisor

1365

Is It Safe to Change SecureXL on a Cluster?

1365

inside

Employee

662

Meet Your New Assistant: Infinity AI Copilot - video and materials

11360

inside

Collaborator

1365

portal certificate can not upload file

1365

Solved

inside

Collaborator

4892

BSI Common Criteria EAL4+ R82 Version + Jumbo Hotfix

1151

inside

Employee

899

Security Engineer Eyes Only - Behind the Miercom Results

899

Solved

inside

Explorer

5158

Firewall-Blades Order of Operation

5158

inside

Participant

2048

This space is for general questions about Check Point products and services that aren't specific to a product or service. Questions related to a specific product should be asked in the space relevant to that product.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Wed 23 Sep 2026 @ 10:00 AM (CEST)

Inside Check Point Spark R82.00.11 -EMEA

In-Person

Wed 23 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live Belgrade - AI Security Workshop

Virtual

Wed 23 Sep 2026 @ 05:00 PM (CEST)

Inside Check Point Spark R82.00.11 - AMER

In-Person

Wed 23 Sep 2026 @ 06:00 PM (EDT)

Santo Domingo: Workspace Security and SASE Live: Protección Total del Usuario Email, Endpoint y SASE

Virtual

Mon 28 Sep 2026 @ 03:00 PM (CEST)

La nouvelle réalité des attaques DDoS: autonomie, échelle et avenir de la défense

Virtual

Thu 01 Oct 2026 @ 05:00 PM (CEST)

Under the Hood: Check Point WAF | Preventing minus-zero-day attacks

Virtual

Wed 23 Sep 2026 @ 10:00 AM (CEST)

Inside Check Point Spark R82.00.11 -EMEA

Virtual

Wed 23 Sep 2026 @ 05:00 PM (CEST)

Inside Check Point Spark R82.00.11 - AMER

Virtual

Mon 28 Sep 2026 @ 03:00 PM (CEST)

La nouvelle réalité des attaques DDoS: autonomie, échelle et avenir de la défense

Virtual

Thu 01 Oct 2026 @ 05:00 PM (CEST)

Under the Hood: Check Point WAF | Preventing minus-zero-day attacks

Virtual

Tue 06 Oct 2026 @ 06:00 PM (IDT)

Under the Hood: Check Point Cloud DDoS Protection

Virtual

Wed 07 Oct 2026 @ 11:00 AM (EDT)

TechTalk: Scaling Check Point Automation with Arodonata

In-Person

Wed 23 Sep 2026 @ 10:00 AM (CEST)

CheckMates Live Belgrade - AI Security Workshop

In-Person

Wed 23 Sep 2026 @ 06:00 PM (EDT)

Santo Domingo: Workspace Security and SASE Live: Protección Total del Usuario Email, Endpoint y SASE

In-Person

Tue 06 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Linz: What's New in R82.x

In-Person

Wed 07 Oct 2026 @ 10:00 AM (CEST)

CheckMates Live Austria - Vienna: What's New in R82.x

In-Person

Wed 21 Oct 2026 @ 09:00 AM (BST)

AI Security Workshop - Glasgow

In-Person

Thu 26 Nov 2026 @ 10:00 AM (EET)

CheckMates Live AI Workshop Helsinki

CheckMates Events

Are you a member of CheckMates?