Security Gateways

What's New in R82.10?
10 December @ 5pm CET / 11am ET

Improve Your Security Posture with
Threat Prevention and Policy Insights

Watch Here

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
Maestro Madness

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

MVP Platinum

26045

Cipher Configuration Tool (CCT)

26045

Solved

inside

Advisor

25999

Virtual Standby member cannot reach internal DNS or Internet

25999

Solved

inside

Participant

25999

Encryption Failure: according to the policy the packet should not have been decrypted

25999

inside

Explorer

25999

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

25999

Solved

inside

Participant

25899

ClusterXL - standby cannot reach gateway

25899

inside

Collaborator

25899

Problem with VPN traffic and Nated IPs

25899

Solved

inside

Advisor

25700

TCP Packet out of state, First Packet is not syn

25500

Solved

inside

Advisor

25300

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

25300

Solved

inside

Explorer

25199

Identity Awareness using Azure AD

25199

Solved

inside

Contributor

25098

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

25098

Solved

inside

Advisor

24999

HTTPS Certificate validation - SK159872

24999

inside

Contributor

24808

How to block traffic coming from known malicious IP addresses R81.10

24808

inside

Admin

24699

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

24699

inside

Contributor

24699

Checkpoint gateway Memory Usage

24699

Solved

inside

Contributor

24699

Need CLI Command to see Interfaces and Associated IP Information

24699

inside

Advisor

24609

Identity sharing - how to change modes

24609

inside

Explorer

24398

AW keeps deleting Dameware Service

24299

Solved

inside

Participant

24200

Troubleshooting dropped packets in Checkpoint using zdebug

24200

Solved

inside

Contributor

24199

cphaprob status showing down cause by routed

24199

Solved

inside

Contributor

23800

WMI Permission denied - From this months Windows Update

23800

inside

Participant

23799

Allow file download and block file upload with wetransfer

23798

Solved

inside

Collaborator

23700

Wrong peer gateway for decrypted packet (VPN Error code 01)

23589

Solved

inside

Participant

23499

CPview and Top-connections in R80.20

23499

Solved

inside

Contributor

23399

Blocking malicious IP addresses (sk103154) in VSX

23399

inside

Collaborator

23399

Firewall HA status (health check)

23399

inside

Collaborator

23200

Installing VSX on on VMware ESXi

23199

Solved

inside

Participant

23099

IN /VAR/LOG/messages keep getting Stopping CUL mode

23099

inside

Contributor

22999

Lightboard Series: High Availability Architecture with R80.10

22600

Solved

inside

Contributor

22598

Displaying transceiver properties

22499

Solved

inside

Explorer

22299

Not substituted certificate in browser Https Inspection

22100

inside

Admin

22099

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

22099

inside

Advisor

22000

F5 BIG-IP ICAP and SandBlast (TEX)

21899

Solved

inside

Participant

21800

Why CP drops RST-ACK packets from client?

21800

inside

Advisor

21800

Notify when certificate expired

21699

inside

Collaborator

21699

Cluster XL - Failover due to Fullsync PNOTE ON

21699

inside

Collaborator

21600

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

21600

inside

Advisor

21599

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

21299

Solved

inside

Contributor

21199

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

21199

Solved

inside

Contributor

21199

Restricting Remote Access by IPv4 Address

21199

inside

Collaborator

21198

Is there SNI support for inbound HTTPS inspection in R80.20?

21184

inside

Contributor

21100

Terrible performance IPHTTPS - Checkpoint SG 15600

21100

Solved

inside

MVP Gold

21099

Checkpoint device does not establish VPN tunnel

20999

inside

Contributor

20999

VSX cluster problem - are we alone?

20999

inside

Champion

20800

Policy installation failures with Error code: 0-2000183-27

20800

inside

Advisor

20699

Checkpoint to Azure Route based - guide

20699

Solved

inside

MVP Platinum

20699

VPN Check Point - Palo Alto issue

20699

Solved

inside

Contributor

20699

SSL Certificate Cannot Be Trusted (vulnerability)

20699

Solved

inside

Contributor

20599

Gaia r80.10 tag vlan 1 and native vlan

20599

inside

Admin

20599

How do I verify Threat Emulation is working?

20599

Solved

inside

Contributor

20500

Block WhatsApp Uploads/Downloads

20500

inside

Advisor

20499

BGP over VPN between Azure.docx

20499

inside

Participant

20399

Password hashes, sha512 and the expert password

20399

Solved

inside

Advisor

20199

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

20099

Solved

inside

Advisor

20099

Identity Collector: ISE and AD continually over-writing each other on the PDP

19899

Solved

inside

Participant

19899

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

19499

inside

Participant

19499

Troubleshooting performance issues

19499

inside

Participant

19400

Checkpoint Advanced OSPF Capability

19400

Solved

inside

Explorer

19400

Firewall rule for any tcp and udp port

19400

Solved

inside

Contributor

19399

Automatic Configuration of Appliance on boot

19399

Solved

inside

Contributor

19300

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

19300

inside

Participant

19300

URL Filtering Troubleshooting Help

19199

inside

Collaborator

19198

High cpu utilization on RAD Process

19198

Solved

inside

Participant

19100

Apple services not working with HTTPS inspection

19100

inside

Collaborator

19099

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

19099

inside

Participant

18999

'TCP packet out of state' drops

18999

Solved

inside

Contributor

18999

SecureXL DoS Rate Limiting (samp rules)

18999

Solved

inside

Participant

18999

Test bandwidth/speed from Gaia

18999

inside

Participant

18999

HTTPS inspection certificate question

18999

inside

Admin

18999

CPview and DiagnosticsView TechTalk: Video, Q&A, and Slides

18999

Solved

inside

Participant

18899

Uploading file works on cloud but not local gateway

18899

inside

MVP Platinum

18899

Snapshot vs Backup - what's the difference?

18899

inside

Employee Alumnus

18886

Understanding Threat Emulation logs

18886

inside

Explorer

18799

HTTPS Weak Ciphers and other vulnerabilities

18799

inside

Admin

18798

Check Point Threat Prevention Packet Flow and Architecture

18798

Solved

inside

Contributor

18699

Difference between clean install and upgrade via CPUSE

18699

Solved

inside

Collaborator

18699

VSX: show configuration For All Virtual Systems

18699

Solved

inside

Participant

18600

Migrating cluster from old to new hardware

18600

Solved

inside

Collaborator

18599

High Cpu utilization - Internet Speed drops to very low level

18599

Solved

inside

Participant

18499

How to Renew Certificate on Security Gateway.

18499

inside

Participant

18399

Using SNMP with SandBlast Network

18399

inside

Contributor

18399

Site to Site Route Based VPN in Checkpoint

18399

Solved

inside

Collaborator

18399

'No valid licens found on server' even though I've attached licens and contracts

18399

Solved

inside

Contributor

18299

Site to Site VPN (policy based) and routing behavior

18299

Solved

inside

Explorer

18200

Identity Collector Exclusion List

18199

inside

Contributor

18199

USFW enablement not clear (SK needed)

18100

Solved

inside

Explorer

18099

To block 18264 on CheckPoint External Firewall

18099

Solved

inside

MVP Silver

340

A Thought about the DHCP server on the gateway

340

Solved

inside

Contributor

438

Inbound SSH traffic inspected by HTTPS inspection ? What changed ?

438

Solved

inside

MVP Platinum

482

Virtual Systems package License question

5119

Solved

inside

Collaborator

371

Route Based VPN Tunnel on VSX (Virtual System)

418

Solved

inside

Participant

488

The IP quantity limit of a NetworkFeed

488

Solved

inside

Advisor

5767

What System TLS Configuration do?

375

Solved

inside

Explorer

946

HTTPSi INBOUND with more than one certificate (SG9100, R82 JHFT39)

946

Solved

inside

Collaborator

359

Failed to read certificate from database after enabling/disabling IPSec VPN blade (centrally managed

359

Solved

inside

Advisor

358

Warning about topology when installing a policy with the Internet object

358

inside

Explorer

193

Cisco Jabber External Connectivity Issue After Migrating from ASA to Check Point (Solved)

193

inside

Advisor

430

Identity Awarenes - Identity Collector and ISE group filters (regex)

430

Solved

inside

MVP Gold

978

Routing the return Traffic Through the Same incoming interface

1022

inside

Contributor

901

Sync Redundancy in ClusterXL with MDPS

901

inside

Collaborator

219

Logging Server crashing after calling Web Smartviewer

219

Solved

inside

Participant

339

Hands-On Quantum Network Firewall as Web Proxy - Proxy Chaining (Oct'25)

290

inside

MVP Gold CHKP

223

Hands-On Unknown Threat Prevention (Oct'25)

223

inside

MVP Gold CHKP

205

Hands-on Adjusting Threat Prevention to Your Needs (Oct'25)

205

inside

MVP Gold CHKP

242

Hands-On Known Threat Prevention (Oct'25)

242

inside

Contributor

912

Published Vmware vSphere on MAB Web portal.

912

inside

MVP Gold CHKP

246

Hands-on Access and Application Control

246

inside

MVP Gold CHKP

364

Hands-on HTTPS Inspection (Oct'25)

364

inside

Collaborator

10132

Using Clusterxl_admin down/up on members with differnet versions

10132

Solved

inside

Advisor

635

Small 25 person branch office - Do I need a seperate ISP router?

635

Solved

inside

Collaborator

3958

implied rules getting hit and dropping traffic

3958

Solved

inside

Collaborator

613

Pushing configuration to VSX fails by Blade activation

613

Solved

inside

Explorer

438

First Packet application detection mechanism

438

Solved

inside

Explorer

389

Firewall Decom: Investigating Interface Traffic

389

Solved

inside

MVP Platinum

1811

Converting Tool - ClusterXL to ElasticXL

1811

Solved

inside

Contributor

354

BGP Route imports, Route filter vs Route maps?

354

inside

Participant

341

Web Filtering Best Practices October 2025: Video and Slides

403

inside

Advisor

12180

Show bgp peers across VSX in CLI

12180

Solved

inside

Advisor

3103

VPN drops - decrypt mspi is not valid

3103

Solved

inside

Contributor

338

Threat Emulation failure "Gzip exceeded maximum decompression ratio"

338

Solved

inside

Advisor

1169

replacing the SSH connection port

239

Solved

inside

Contributor

2930

What happens if licences expire on gateway

2930

Solved

inside

Participant

768

Replacing R81.20 cluster with new R82 cluster

768

Solved

inside

Collaborator

36632

IPSec VPN - Multiple level chain of trust certificate

256

Solved

inside

Explorer

9656

S1C managed SG9100-Cluster Upgrade R81.20 JHFT105 > R82JHFT39 / best practise, hints recommendations

182

Solved

inside

MVP Platinum

20290

TACACS+ with Check Point Gaia & Cisco ISE — AuthZ Profile Created but Still Getting Denied

2917

inside

Participant

2570

OSPF stops annoucing connected routes

2570

inside

Contributor

954

Alert message on Policy install after R81 upgrade

13214

inside

Contributor

182

Troubleshooting 101 Americas September 2025 Video and Slides

1283

inside

Participant

1500

Internet access rules for proxy and transparent

1500

inside

Employee

12184

Using Wireshark to capture packets on Firewall using standard out.

12184

inside

MVP Gold

2063

RVPN Not Working on Active-Active ElasticXL R82

285

inside

Explorer

518

Management set to wrong appliance version

400

inside

Participant

563

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

563

Solved

inside

Collaborator

905

Zero Touch Clarification Help - 3920

905

inside

Participant

340

Using Cluster Object in NAT rules

340

inside

Admin

401

Americas Deep Dive: HTTPS Inspection Best Practices Video and Slides

401

inside

Participant

95641

geo policy on website behind haproxy using sni

553

inside

Explorer

495

Traffic selectors unacceptable

495

Solved

inside

Explorer

674

User Account creation for file deletion

674

Solved

inside

Contributor

31588

License about to expire but Expiration Date in the past

31588

Solved

inside

Advisor

704

FW blade drops a suspicious packet like IPS blade?

704

inside

MVP Silver

664

Route based VPN with palo alto firewall

501

Solved

inside

Explorer

307

Implementing HTTPS Inspection in a Multi-Tenant VSX Setup — What’s the Industry Standard?

307

Solved

inside

Collaborator

821

Replacing 5800 HA ClusterXL with 9200s. Should I convert to ElasticXL?

821

Solved

inside

Contributor

784

FW Hardware Datetime instead of NTP-settings

784

inside

Participant

5125

Special Character change in R81.20 JHF 96

5125

Solved

inside

Admin

9798

Let's Encrypt forward requests to the correct internal server (DNS-NAT)

496

inside

Participant

4942

IPsec VPN termination on Loopback interfaces -R80.40

4942

inside

Admin

1646

Improved App Control Detection Without HTTPS Inspection + TLS 1.3 Classification

1646

inside

Participant

546

SmartConsole keep relaunch to solve the experience problem

546

inside

Participant

1113

Site to Site VPN Issue (Checkpoint to Fortigate)

1113

Solved

inside

Collaborator

311

About VSX support on 3900 series

311

Solved

inside

Explorer

605

ISP Redundacy Load Sharing - NAT

605

Solved

inside

Participant

920

Identity Awareness randomly loosing identitys

920

Solved

inside

MVP Gold

421

Locally administrated MAC addresses

421

Solved

inside

Participant

639

Cores on CheckPoint VM are not effective

639

Solved

inside

MVP Platinum

30431

R82 – Install ElasticXL Cluster

30431

inside

Explorer

407

Log for IPS but with a Drop rule for exact source IP

407

Solved

inside

Participant

220

communication between mplane and dplane is not working

220

inside

Admin

789

PSA: Check Point and Palo Alto - GCM Phase 1

2416

inside

Participant

404

Failed to Build a Cluster Interface OSPF

404

Solved

inside

MVP Gold

1789

Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

1789

inside

Explorer

315

Guidance Needed: R82 T34 ClusterXL Bridge Mode Causing Loops & Crashes

315

inside

Contributor

2665

The URL list inside the Custom Application/Site object is not being applied.

2665

inside

Collaborator

379

Export / Import Configuration of existing GWs to new appliances

379

inside

MVP Platinum

3195

Route based VPN tunnel to Azure

3195

Solved

inside

MVP Platinum

510

Inbound HTTPS inspection and Qualys SSL Labs results

397

inside

Participant

573

Multiple Users in Source User Name

573

inside

Admin

365

APAC Deep Dive Troubleshooting 101 September 2025 Video and Slides

365

Solved

inside

Explorer

1607

Is it possible to change the temp directory cpinfo uses for generation?

1607

Solved

inside

Participant

926

Port 80, 443, 500 and 18264 are open on external interfaces, how to block it?

926

Solved

inside

Explorer

394

HTTPS CERTIFICATE WITH AZURE AD

394

inside

Admin

1286

EMEA Deep Dive: Web Filtering Best Practices August 2025

1286

Solved

inside

Contributor

373

Message seen on /var/log/messages - "simi_reorder_enqueue_packet"

33823

Solved

inside

Collaborator

479

Detected Sweep Scan originating from source: internal server - destination: empty

392

inside

Participant

407

TIL: no impact when changing physical port in Virtual Switch in a VSX Environment

407

Solved

inside

Participant

936

Not able to install latest Take

936

Solved

inside

MVP Platinum

465

Any idea when it will be possible to configure routemaps via web UI?

465

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Wed 03 Dec 2025 @ 09:00 AM (EST)

New York City: Hands-On CloudGuard Workshops

Virtual

Wed 03 Dec 2025 @ 10:00 AM (COT)

Última Sesión del Año – CheckMates LATAM: ERM & TEM con Expertos

Virtual

Thu 04 Dec 2025 @ 12:30 PM (SGT)

End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APAC

Virtual

Thu 04 Dec 2025 @ 03:00 PM (CET)

End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEA

Virtual

Thu 04 Dec 2025 @ 02:00 PM (EST)

End-of-Year Event: Securing AI Transformation in a Hyperconnected World - Americas

In-Person

Tue 09 Dec 2025 @ 09:00 AM (CET)

Paris, FR: Hands-On CloudGuard Workshops

Virtual

Wed 03 Dec 2025 @ 10:00 AM (COT)

Última Sesión del Año – CheckMates LATAM: ERM & TEM con Expertos

Virtual

Thu 04 Dec 2025 @ 12:30 PM (SGT)

End-of-Year Event: Securing AI Transformation in a Hyperconnected World - APAC

Virtual

Thu 04 Dec 2025 @ 03:00 PM (CET)

End-of-Year Event: Securing AI Transformation in a Hyperconnected World - EMEA

Virtual

Thu 04 Dec 2025 @ 02:00 PM (EST)

End-of-Year Event: Securing AI Transformation in a Hyperconnected World - Americas

Virtual

Tue 09 Dec 2025 @ 03:00 PM (EST)

Americas Deep Dive: HTTPS Inspection Best Practices

Virtual

Wed 10 Dec 2025 @ 11:00 AM (EST)

TechTalk: What's New in R82.10

In-Person

Wed 03 Dec 2025 @ 09:00 AM (EST)

New York City: Hands-On CloudGuard Workshops

In-Person

Tue 09 Dec 2025 @ 09:00 AM (CET)

Paris, FR: Hands-On CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?