Security Gateways

Introduction to Lakera:
Securing the AI Frontier!

Quantum Spark Management Unleashed!

Watch Now

Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Learn More

HTTPS Inspection
Help us to understand your needs better

Take the Survey

CheckMates Go:
SharePoint CVEs and More!

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Participant

25400

UserCheck Block Page Times Out

25400

inside

Explorer

25199

First packet isn't Syn; tcp_flags: ACK

25199

Solved

inside

Contributor

25189

TCP Packet out of state, First Packet is not syn

25100

Solved

inside

Advisor

25100

ClusterXL - standby cannot reach gateway

24928

Solved

inside

Advisor

24800

Virtual Standby member cannot reach internal DNS or Internet

24800

inside

Collaborator

24499

Problem with VPN traffic and Nated IPs

24499

inside

Advisor

24400

Identity sharing - how to change modes

24400

Solved

inside

Contributor

24300

Need CLI Command to see Interfaces and Associated IP Information

24300

Solved

inside

Contributor

24298

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

24298

Solved

inside

Advisor

23999

HTTPS Certificate validation - SK159872

23999

Solved

inside

Explorer

23899

Identity Awareness using Azure AD

23899

Solved

inside

Advisor

23899

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

23899

inside

Admin

23800

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

23800

Solved

inside

Contributor

23699

cphaprob status showing down cause by routed

23699

inside

Participant

23400

AW keeps deleting Dameware Service

23199

inside

Contributor

23199

How to block traffic coming from known malicious IP addresses R81.10

23199

Solved

inside

Contributor

23099

Wrong peer gateway for decrypted packet (VPN Error code 01)

22999

inside

Contributor

22708

Checkpoint gateway Memory Usage

22708

Solved

inside

Advisor

22700

WMI Permission denied - From this months Windows Update

22700

inside

Contributor

22699

CPview and Top-connections in R80.20

22600

inside

Explorer

22599

Installing VSX on on VMware ESXi

22401

inside

Employee

22400

Lightboard Series: High Availability Architecture with R80.10

22400

Solved

inside

Contributor

22284

Blocking malicious IP addresses (sk103154) in VSX

22284

inside

Collaborator

22099

Firewall HA status (health check)

22099

Solved

inside

Participant

21999

Troubleshooting dropped packets in Checkpoint using zdebug

21999

Solved

inside

Explorer

21899

IN /VAR/LOG/messages keep getting Stopping CUL mode

21791

inside

Contributor

21700

Displaying transceiver properties

21699

inside

Participant

21502

Allow file download and block file upload with wetransfer

21502

inside

Advisor

21399

F5 BIG-IP ICAP and SandBlast (TEX)

21199

inside

Admin

21199

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

21199

Solved

inside

Contributor

21099

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

20999

inside

Collaborator

20999

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

20999

Solved

inside

Contributor

20993

Not substituted certificate in browser Https Inspection

20993

Solved

inside

Participant

20900

Why CP drops RST-ACK packets from client?

20900

inside

Collaborator

20800

Notify when certificate expired

20700

Solved

inside

Contributor

20700

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

20700

Solved

inside

Participant

20599

Checkpoint device does not establish VPN tunnel

20599

inside

Champion

20599

Policy installation failures with Error code: 0-2000183-27

20599

inside

Collaborator

20599

Cluster XL - Failover due to Fullsync PNOTE ON

20599

Solved

inside

Contributor

20399

Is there SNI support for inbound HTTPS inspection in R80.20?

20399

Solved

inside

Contributor

20399

Restricting Remote Access by IPv4 Address

20399

inside

Contributor

20199

VSX cluster problem - are we alone?

20199

Solved

inside

Contributor

20000

Gaia r80.10 tag vlan 1 and native vlan

20000

Solved

inside

Contributor

19999

SSL Certificate Cannot Be Trusted (vulnerability)

19999

inside

Advisor

19799

Checkpoint to Azure Route based - guide

19799

inside

Admin

19799

How do I verify Threat Emulation is working?

19799

Solved

inside

Advisor

19599

Terrible performance IPHTTPS - Checkpoint SG 15600

19599

inside

Advisor

19500

BGP over VPN between Azure.docx

19500

inside

Participant

19499

Password hashes, sha512 and the expert password

19499

Solved

inside

Advisor

19400

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

19299

inside

Participant

19000

Troubleshooting performance issues

19000

inside

Participant

18899

Automatic Configuration of Appliance on boot

18899

Solved

inside

Explorer

18801

Firewall rule for any tcp and udp port

18801

Solved

inside

Participant

18799

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

18799

inside

Participant

18760

Identity Collector: ISE and AD continually over-writing each other on the PDP

18700

inside

Advisor

18699

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

18599

inside

Participant

18599

Checkpoint Advanced OSPF Capability

18599

inside

Employee Alumnus

18505

Understanding Threat Emulation logs

18505

Solved

inside

Participant

18499

Snapshot vs Backup - what's the difference?

18499

inside

Admin

18399

Check Point Threat Prevention Packet Flow and Architecture

18399

inside

Collaborator

18399

High cpu utilization on RAD Process

18399

Solved

inside

Contributor

18299

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

18299

Solved

inside

Participant

18299

Uploading file works on cloud but not local gateway

18299

inside

Contributor

18299

URL Filtering Troubleshooting Help

18299

Solved

inside

Collaborator

18200

VSX: show configuration For All Virtual Systems

18200

Solved

inside

Participant

18199

Test bandwidth/speed from Gaia

18199

Solved

inside

Contributor

18199

Block WhatsApp Uploads/Downloads

18199

inside

Admin

18199

CPview and DiagnosticsView TechTalk: Video, Q&A, and Slides

18199

inside

Employee Alumnus

18100

Using SNMP with SandBlast Network

18100

Solved

inside

Participant

17999

VPN Check Point - Palo Alto issue

17999

Solved

inside

Participant

17900

Migrating cluster from old to new hardware

17900

Solved

inside

Contributor

17899

SecureXL DoS Rate Limiting (samp rules)

17899

Solved

inside

Collaborator

17898

'No valid licens found on server' even though I've attached licens and contracts

17898

Solved

inside

Contributor

17800

Difference between clean install and upgrade via CPUSE

17800

inside

Participant

17799

High Cpu utilization - Internet Speed drops to very low level

17799

inside

Participant

17699

'TCP packet out of state' drops

17699

Solved

inside

Explorer

17699

How to Renew Certificate on Security Gateway.

17699

Solved

inside

Contributor

17500

Site to Site VPN (policy based) and routing behavior

17500

inside

Contributor

17500

Site to Site Route Based VPN in Checkpoint

17500

Solved

inside

Participant

17499

Disable TLS/SSL support for static key cipher suites

17499

inside

Explorer

17499

HTTPS Weak Ciphers and other vulnerabilities

17499

inside

Mentor

17499

USFW enablement not clear (SK needed)

17499

Solved

inside

Legend

17399

HTTPS inspection certificate question

17399

inside

Collaborator

17300

Grafana and Prometheus for monitoring Check Point firewalls

17300

inside

Contributor

17300

BGP Routes showing Hide and in active

17300

Solved

inside

Advisor

17199

Identity Collector Exclusion List

17199

Solved

inside

Participant

17199

block port 443 and 80 and 18264 on checkpoint external firewall

17199

inside

Contributor

17099

Check Point LDAPS connection breaks everytime AD certificate is renewed

17099

Solved

inside

Collaborator

337

Management Server Traffic Hits the Implied Rules

337

Solved

inside

Collaborator

325

ClusterXL – Changing MGMT and eth2 from 1Gb to 10Gb

325

Solved

inside

Explorer

548

Upgrade R81.10 Cluster to R82 issues

548

Solved

inside

Participant

15916

Default State table Timers on Checkpoint?

15916

Solved

inside

Participant

328

CPNotEnoughDataForRuleMatch first possible match is Cleanup Rule and is allowing traffic the Cleanup

328

Solved

inside

Explorer

238

Connect single quantum gateway to redundant core switches

181

inside

Advisor

885

Load Balancing on Quantum Spark 1800 SMB

2528

Solved

inside

Participant

170

enabling MDPS on 3600 or 3900 devices works as expected ?

170

Solved

inside

Contributor

815

Traffic logs show drop message "IP routing failed (ipin routing failure)"

10856

inside

Contributor

197

Anti-Spoofing on VTI interfaces

197

Solved

inside

Advisor

253

Alert in VS from the SmartConsole

253

Solved

inside

Advisor

268

FTW using ElasticXL cause a fatal error

268

inside

Collaborator

531

VSNext and Mobile Access issue

531

inside

Authority

572

changing platform portal port on VSNext

572

Solved

inside

Explorer

432

Cluster active member lost R81.20 Take 98

432

inside

Contributor

3699

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

3699

inside

Contributor

211

Port TCP 264 displays hostname and domain name in the port scan.

211

inside

Advisor

666

Unusual higher that average CPU

3026

inside

Advisor

869

Installing Hotfix on R82 ElasticXL

682

Solved

inside

Advisor

632

What are the 2550, 2570, 2590 and 2680 appliances

632

inside

Advisor

276

Block WhatsApp Uploads/Downloads

18209

inside

Contributor

135

MAB portal File Share App web-interface customization

135

inside

Advisor

155

SSL Inbound Inspection on IMAPS

155

inside

Employee

3081

R81.20 JHF41 TCP Handshake counter fills up

3081

inside

Participant

458

Auditing File Uploads (with view to block using Application Rule)

458

Solved

inside

Advisor

517

Log viewer Resolve (IP) is always checked/enabled by default.

527

inside

Contributor

575

AppControl/URLF - Rules and classification

575

Solved

inside

Leader

6365

How to view cpview history file on other machine

6365

inside

Legend

15205

Assistance Required: Issue with UDP Port 5060 Packet Drop

883

Solved

inside

Explorer

223

How to change path in a Scheduled system backup?

223

inside

Advisor

511

Checkpoint Identity collector - gateway certificate untrusted

2371

inside

Contributor

564

Anti-Spoofing on Internet (External) Interface?

564

inside

Leader

6551

Sharing Threat Emulation Appliance Between Two Security Gateways

457

Solved

inside

Contributor

1267

Ordered Layers vs In-Line Layers

1267

inside

Contributor

420

Replace a cluster of 15400 appliance by a cluster of 9700 appliance

276

Solved

inside

Explorer

194

AAAA (IPv6) DNS requests control

194

Solved

inside

Explorer

5996

Nat rule over tunnel/community

5996

inside

Participant

125

MEP VPN Gateway: force specific client to connect to backup gateway

125

inside

Contributor

12713

Phase 2 Site-to-site VPN error

12713

inside

Employee

696

New MCP Signature Now Available in Application Control

696

Solved

inside

Explorer

172

R81.20 snapshot size more than doubled as compared to R80.40

172

inside

Mentor

3982

First time wizard stucks at 90% R80.40

3982

Solved

inside

Advisor

1234

ElasticXL Traffic Distribution question

1234

Solved

inside

Explorer

770

Different DNS server per Domain R81.20

770

inside

Collaborator

316

BGP Graceful Restart in HA cluster in Azure

316

Solved

inside

Explorer

2465

Loopback interface on VSX virtual system

2465

Solved

inside

Explorer

3941

Loopback interface is going out of routing table

3941

Solved

inside

Advisor

766

Brand new appliance with non-default IP on Mgmt interface

766

inside

Collaborator

1255

Application Control and URL filtering Matching Multiple Categories/Objects

1255

inside

Explorer

297

Check Point allows HTTP/HTTPS without rule

280

inside

Advisor

302

Routing the return Traffic Through the Same incoming interface

383

inside

Contributor

2669

Identity Collector support for Cisco ISE 3.2

2669

inside

Explorer

352

Identity Agent Connection Issue

352

Solved

inside

Advisor

10942

Gateway Firewall running above 90% Memory usage

15763

inside

Admin

646

Web Filtering Best Practices June 2025: Video and Slides

646

inside

Explorer

747

Issues Replacing/Upgrading Appliances in H/A Cluster

747

Solved

inside

Participant

543

Gaia Radius auth with encryption

543

inside

Employee

1013

Seeking Guidance on Adding 9400 Appliance to Existing 15400 VSX Cluster

538

Solved

inside

Participant

419

Hardware Compatibility for Adding a gateway to Existing VSX Cluster.

449

Solved

inside

Explorer

5081

broken tcp half-closed functionality

413

inside

Explorer

564

Checkpoint Log exporter to Microsoft Cloud apps discovery

564

inside

Explorer

241

MEP configuration hints for failover P2P VPN to non-Check Point Gateway.

460

inside

Explorer

339

Checkpoint 26000 Cluster XL Down

339

Solved

inside

Explorer

3741

Identity Awareness / Identity Collector and Azure AD / Autopilot devices

3741

inside

Participant

121

R82 VSNext cluster with multiple VS

1642

Solved

inside

Participant

1771

Any issues with 9100 gateways running R81.20?

736

inside

Collaborator

369

/var/log/messages flooded with "unregister_netdevice: waiting for lo to become free"

369

inside

Contributor

16558

How to configure external dynamic lists in Checkpoint

16558

Solved

inside

Advisor

933

CoreXL affinity vs CoreXL Dynamic Dispatcher

418

inside

Collaborator

488

P2P VPN Star Community - Link Selection Mode

488

Solved

inside

Collaborator

369

AD Query to Identity Collector

369

inside

Explorer

339

identity awareness ADQuery Test Result Document share it please

339

inside

Explorer

176

How to configure IPv6 network with existing Check Point IPV4 Network

176

Solved

inside

Advisor

2959

VSX, VSNext access virtual context via SSH

2959

Solved

inside

Authority

600

How to Renew Certificate on Security Gateway.

17730

Solved

inside

Explorer

1207

No option to choose HA while setting up VSX Clusters in VM

1207

Solved

inside

Participant

730

Slow speed for image redirection in LOM

730

Solved

inside

Contributor

604

Identity Awareness Sharing in another Management

604

inside

Participant

2577

R82: IPv6 with Prefix-Delegation Problem

2577

inside

Admin

2202

EMEA Deep Dive: What's New in R82 June 2025: Video, Slides, and Q&A

2202

Solved

inside

Contributor

586

Identity Collector Exclusion List

17290

Solved

inside

Explorer

451

How to find out cause Bytes Throughput high

451

Solved

inside

Explorer

384

Https inspection bypass for application (whatsapp).

5158

inside

Admin

1493

New Identity Awareness Clients Administration Guide

1493

inside

Advisor

912

Any specific reason that routed daemon is 32-bit in a 64-bit system?

306

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 25 Sep 2025 @ 05:00 PM (CEST)

Introducing Lakera – Securing the AI Frontier

Virtual

Tue 30 Sep 2025 @ 10:00 AM (EDT)

Wiz & Check Point: Visibility and Prevention for the Cloud

In-Person

Wed 01 Oct 2025 @ 12:00 PM (MDT)

Draper, UT: CloudGuard Network Security and WAF

Virtual

Thu 02 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

Tue 07 Oct 2025 @ 10:00 AM (CEST)

Cloud Architect Series: AI-Powered API Security with CloudGuard WAF

Virtual

Thu 25 Sep 2025 @ 05:00 PM (CEST)

Introducing Lakera – Securing the AI Frontier

Virtual

Tue 30 Sep 2025 @ 10:00 AM (EDT)

Wiz & Check Point: Visibility and Prevention for the Cloud

Virtual

Thu 02 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

Virtual

Wed 22 Oct 2025 @ 11:00 AM (EDT)

Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents Outages

In-Person

Wed 01 Oct 2025 @ 12:00 PM (MDT)

Draper, UT: CloudGuard Network Security and WAF

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

In-Person

Tue 14 Oct 2025 @ 10:00 AM (CEST)

CheckMates Austria Road Show - CheckMates Live Graz

CheckMates Events

Are you a member of CheckMates?