Security Gateways

CheckMates Fest 2026
Join the Celebration!

AI Security Masters
E1: How AI is Reshaping Our World

MVP 2026: Submissions
Are Now Open!

More details here

What's New in R82.10?

Watch Now

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
R82.10 and Rationalizing Multi Vendor Security Policies

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Participant

25599

Troubleshooting dropped packets in Checkpoint using zdebug

25599

Solved

inside

Contributor

25499

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

25499

Solved

inside

Advisor

25299

HTTPS Certificate validation - SK159872

25299

inside

Admin

25199

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

25199

inside

Explorer

25000

Need CLI Command to see Interfaces and Associated IP Information

24999

Solved

inside

Contributor

24799

Identity sharing - how to change modes

24799

inside

Employee Alumnus

24799

AW keeps deleting Dameware Service

24799

inside

Participant

24700

Allow file download and block file upload with wetransfer

24700

Solved

inside

Contributor

24400

cphaprob status showing down cause by routed

24400

Solved

inside

Collaborator

24300

WMI Permission denied - From this months Windows Update

24299

Solved

inside

Contributor

24100

Blocking malicious IP addresses (sk103154) in VSX

24100

Solved

inside

Contributor

24099

Wrong peer gateway for decrypted packet (VPN Error code 01)

23999

Solved

inside

Advisor

23899

Firewall HA status (health check)

23899

Solved

inside

Participant

23799

CPview and Top-connections in R80.20

23799

Solved

inside

Participant

23699

IN /VAR/LOG/messages keep getting Stopping CUL mode

23699

inside

Explorer

23599

Installing VSX on on VMware ESXi

23599

inside

Collaborator

23399

Displaying transceiver properties

22799

inside

Employee

22700

Lightboard Series: High Availability Architecture with R80.10

22700

inside

Contributor

22699

Not substituted certificate in browser Https Inspection

22600

inside

Admin

22499

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

22499

Solved

inside

Explorer

22498

Why CP drops RST-ACK packets from client?

22399

Solved

inside

MVP Platinum

22299

F5 BIG-IP ICAP and SandBlast (TEX)

22200

Solved

inside

Participant

22199

Notify when certificate expired

22199

inside

Collaborator

22199

Cluster XL - Failover due to Fullsync PNOTE ON

22199

inside

Advisor

22000

VPN Check Point - Palo Alto issue

21899

Solved

inside

Contributor

21800

Block WhatsApp Uploads/Downloads

21800

Solved

inside

MVP Gold

21799

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

21799

inside

Advisor

21747

Terrible performance IPHTTPS - Checkpoint SG 15600

21698

Solved

inside

Contributor

21600

Restricting Remote Access by IPv4 Address

21600

Solved

inside

Contributor

21599

Is there SNI support for inbound HTTPS inspection in R80.20?

21599

Solved

inside

Contributor

21399

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

21399

inside

MVP Platinum

21399

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

21399

inside

Collaborator

21399

VSX cluster problem - are we alone?

21299

inside

Admin

21200

How do I verify Threat Emulation is working?

21200

inside

Advisor

21199

Checkpoint to Azure Route based - guide

21199

Solved

inside

Contributor

21100

Gaia r80.10 tag vlan 1 and native vlan

21100

Solved

inside

Contributor

21100

SSL Certificate Cannot Be Trusted (vulnerability)

21100

Solved

inside

Participant

21099

Checkpoint device does not establish VPN tunnel

21099

inside

Advisor

20999

BGP over VPN between Azure.docx

20999

inside

MVP Platinum

20999

Policy installation failures with Error code: 0-2000183-27

20908

inside

Participant

20799

Password hashes, sha512 and the expert password

20799

Solved

inside

Collaborator

20699

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

20699

Solved

inside

Participant

20600

Identity Collector: ISE and AD continually over-writing each other on the PDP

20598

Solved

inside

Advisor

20400

Apple services not working with HTTPS inspection

20399

Solved

inside

MVP Gold

19999

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

19999

Solved

inside

MVP Platinum

19970

HTTPS inspection certificate question

19970

inside

Participant

19899

Troubleshooting performance issues

19899

inside

Contributor

19794

URL Filtering Troubleshooting Help

19794

inside

Collaborator

19701

High cpu utilization on RAD Process

19701

inside

Participant

19700

Checkpoint Advanced OSPF Capability

19700

Solved

inside

Explorer

19700

Firewall rule for any tcp and udp port

19700

Solved

inside

Contributor

19699

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

19699

Solved

inside

Contributor

19699

SecureXL DoS Rate Limiting (samp rules)

19699

Solved

inside

Contributor

19600

Automatic Configuration of Appliance on boot

19600

inside

Participant

19599

'TCP packet out of state' drops

19599

Solved

inside

Participant

19599

Test bandwidth/speed from Gaia

19599

inside

Participant

19599

CPview and DiagnosticsView TechTalk: Video, Q&A, and Slides

19399

inside

Collaborator

19300

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

19300

Solved

inside

Explorer

19299

HTTPS Weak Ciphers and other vulnerabilities

19200

inside

Employee Alumnus

19200

Understanding Threat Emulation logs

19200

Solved

inside

Participant

19200

Uploading file works on cloud but not local gateway

19200

Solved

inside

Contributor

19099

Difference between clean install and upgrade via CPUSE

19099

inside

Participant

19099

High Cpu utilization - Internet Speed drops to very low level

19098

Solved

inside

Explorer

18999

How to Renew Certificate on Security Gateway.

18999

Solved

inside

Participant

18999

Snapshot vs Backup - what's the difference?

18999

inside

Contributor

18999

Site to Site Route Based VPN in Checkpoint

18999

Solved

inside

Participant

18999

Migrating cluster from old to new hardware

18999

inside

Admin

18900

Check Point Threat Prevention Packet Flow and Architecture

18900

Solved

inside

Collaborator

18899

VSX: show configuration For All Virtual Systems

18899

inside

Contributor

18800

Site to Site VPN (policy based) and routing behavior

18799

Solved

inside

Participant

18700

To block 18264 on CheckPoint External Firewall

18699

inside

Participant

18695

'No valid licens found on server' even though I've attached licens and contracts

18676

inside

Employee Alumnus

18599

Using SNMP with SandBlast Network

18599

Solved

inside

Advisor

18500

Identity Collector Exclusion List

18500

Solved

inside

Contributor

18500

I have a question about the LACP (8023AD) Bond interface.

18500

inside

Collaborator

18398

Grafana and Prometheus for monitoring Check Point firewalls

18398

Solved

inside

Participant

18299

block port 443 and 80 and 18264 on checkpoint external firewall

18299

Solved

inside

Advisor

18299

Check Point LDAPS connection breaks everytime AD certificate is renewed

18299

inside

MVP Gold

18222

USFW enablement not clear (SK needed)

18222

Solved

inside

Participant

18199

Disable TLS/SSL support for static key cipher suites

18199

Solved

inside

Participant

18100

ClusterXL Different Subnet Configuration

18100

Solved

inside

Explorer

18000

Check Point Gateway CLI Uptime vs last reboot command output Not Matched (Doubt)

18000

inside

Contributor

17998

BGP Routes showing Hide and in active

17998

inside

Collaborator

17899

Combining all interfaces in one bond, how bad is this practice?

17899

Solved

inside

Contributor

17899

VPN problems - Clear text packet should be encrypted

17899

inside

Contributor

17799

How to configure external dynamic lists in Checkpoint

17799

Solved

inside

Explorer

17799

Checkpoint to ASA VPN traffic selection issue

17799

inside

Participant

17700

Does R80.40 support HP DL380 G10 ?

17700

inside

MVP Gold

17700

max performance / throughput of site2site-VPN

17700

Solved

inside

MVP Platinum

17699

Snapshots are not created after installing HFA Take66 for R81.10

17699

inside

Explorer

17699

Unable to Access/Ping Checkpoint Gateway interfaces.

17699

Solved

inside

Participant

17697

Best Practise for installing Hotfixes on ClusterXL in HA mode

17697

Solved

inside

MVP Silver

17499

R80.40+ and GNAT. How to clear the NAT-table ?

17499

Solved

inside

Participant

17403

Route specific subnet out second ISP interface

17403

inside

Collaborator

17392

Finding Bandwidth consuming for particular Host

17199

inside

MVP Gold

17000

Is it advisable to change affinity in my scenario?

17000

inside

MVP Silver

5503

ElasticXL and VSNext CoreXL question

736

inside

Collaborator

1085

Nat inside VPN tunnel to Fortigate

1085

Solved

inside

Contributor

354

"Multiple obects have the same IP address" with no duplicate objects

354

Solved

inside

Contributor

544

S2S VPN State & Statistics per tunnel/peer?

2962

Solved

inside

Explorer

964

VM Lab R82 ElasticXL - Lightshot Partition is out of space

964

inside

Collaborator

961

migrating from ClusterXL to ElasticXL new cluster

961

Solved

inside

Contributor

9278

R81.20 - iked running while IPSec VPN blade not enabled

9278

Solved

inside

Collaborator

326

Certificate based S2S with Palo Alto

326

Solved

inside

Advisor

402

What does the priority field in Signature Tool (ACST) do?

402

inside

Contributor

157

Need a bit of clarification/sanity check for my hardware migration plan

935

inside

Contributor

1497

Gaia portal 404 after expanding logs volume

1497

inside

Collaborator

398

License Sync issue with MGMT Box

398

inside

Contributor

494

unable to activate license with new management ip for quantum gateways (security group)

494

inside

Collaborator

903

BGP Graceful Restart in HA cluster in Azure

903

Solved

inside

Contributor

6461

install a Certificate for IPSec VPN

6461

inside

Explorer

364

Access Control and Threat Prevention Best Practices TechTalk: Video, Slides, and Q&A

2550

Solved

inside

Collaborator

353

“Legacy GeoProtection Maximum Ranges” alert

353

Solved

inside

Explorer

737

Modifying Public Interface Topology

253

Solved

inside

MVP Gold

4101

saml redirect from portal page broke after upgrading from JHF84 to JHF89

4101

inside

MVP Gold CHKP

772

Securing Microsoft Intune using Access Control Policy

772

Solved

inside

Contributor

425

In a cluster environment, is it possible to make the snmp daemon listen on a VIP ?

425

inside

Participant

558

ISP Redundancy: LAN via ISP‑1, WLAN via ISP‑2

558

Solved

inside

Explorer

271

PPPoE is not supported with SecureXL User Space mode on 3950, R82.10?

271

inside

MVP Silver

863

One cluster not establishing s2s tunnels - Invalid IKE SPI

757

Solved

inside

Advisor

410

Is it possible to enable SSH on Security Gateway during initial setup?"

410

Solved

inside

MVP Silver

560

VSX R80.40 - Remote access and RADIUS

4859

Solved

inside

Contributor

3246

Has anyone been able to have redundant VPN tunnels with AWS using vti's?

3246

Solved

inside

MVP Platinum

925623

470

317

R8x Ports Used for Communication by Various Check Point Modules (new version 2.1)

925623

470

317

Solved

inside

Contributor

1221

Migrating R81.20 Cluster XL to new 9100 appliances

1351

inside

Participant

752

IPsec VPN with both gateways in the same subnet

752

inside

Contributor

1185

IPS Management Update requires manual update

1185

Solved

inside

Explorer

314

R81.20 "HTTP parsing error occurred" / body filter failed in response

15230

inside

MVP Silver

287

IDM integration with Check Point

287

Solved

inside

Advisor

3003

R81.20 JHF99 - Radius VPN Issues

3003

inside

Explorer

245

unable to advertise network to peer via iBGP

245

Solved

inside

Participant

798

Lightspeed accelerated connection problems after R81.20 JHF Take 111

798

Solved

inside

Authority

857

Troubleshooting 101 EMEA October 2025: Video and Slides

1613

Solved

inside

Participant

935

Adding security zone to gateway interface using Ansible

935

Solved

inside

Advisor

377

Password error while renewing SSL certificate

896

Solved

inside

Participant

782

Removing VS after deleting its domain (MDS / VSX)

782

inside

Explorer

5587

VPN community routing not working

10149

Solved

inside

Participant

1036

Old version HF bundles taking up disk space, best way to remove?

1036

Solved

inside

Participant

745

SNMP monitoring of the IPS blade

745

Solved

inside

Contributor

1138

Not able to establish BGP when ISP failover, BGP is using Configured VTI

1138

Solved

inside

Contributor

1542

Delay when visiting sites hosted at Cloudflare

1542

inside

Participant

583

Disabling TLS 1.0 and TLS 1.1 on Quantum Spark 1555

583

inside

MVP Gold CHKP

473

Configuring Inbound HTTPS Inspection

473

Solved

inside

Collaborator

806

Enabling AD password expiration warning/change and SupportOldSchema impact in an MDS enviornment

806

inside

Collaborator

1492

9200 1st Time Wizard WebUI - hangs

1492

inside

Contributor

5721

R81.20 first time wizard Gui setup error

5721

inside

Explorer

753

LOM port configuration with radius

753

inside

Contributor

822

Route Based VPN (VTI) through Secondary ISP on Load Sharing Firewalls

822

Solved

inside

Participant

1028

ISP Link Redundancy - Load Sharing / Gateway keeps traffic in a single ISP

1028

Solved

inside

MVP Silver

469

A Thought about the DHCP server on the gateway

469

Solved

inside

Contributor

588

Inbound SSH traffic inspected by HTTPS inspection ? What changed ?

588

Solved

inside

MVP Platinum

598

Virtual Systems package License question

5469

Solved

inside

Collaborator

496

Route Based VPN Tunnel on VSX (Virtual System)

536

Solved

inside

Participant

616

The IP quantity limit of a NetworkFeed

616

Solved

inside

Advisor

6028

What System TLS Configuration do?

484

Solved

inside

Explorer

1089

HTTPSi INBOUND with more than one certificate (SG9100, R82 JHFT39)

1089

Solved

inside

Collaborator

438

Failed to read certificate from database after enabling/disabling IPSec VPN blade (centrally managed

438

Solved

inside

Advisor

459

Warning about topology when installing a policy with the Internet object

459

inside

Explorer

243

Cisco Jabber External Connectivity Issue After Migrating from ASA to Check Point (Solved)

243

inside

Leader

477

Identity Awarenes - Identity Collector and ISE group filters (regex)

477

Solved

inside

MVP Gold

1108

Routing the return Traffic Through the Same incoming interface

1242

inside

Contributor

995

Sync Redundancy in ClusterXL with MDPS

995

inside

Collaborator

263

Logging Server crashing after calling Web Smartviewer

263

Solved

inside

Participant

421

Hands-On Quantum Network Firewall as Web Proxy - Proxy Chaining (Oct'25)

353

inside

MVP Gold CHKP

265

Hands-On Unknown Threat Prevention (Oct'25)

265

inside

MVP Gold CHKP

246

Hands-on Adjusting Threat Prevention to Your Needs (Oct'25)

246

inside

MVP Gold CHKP

300

Hands-On Known Threat Prevention (Oct'25)

300

inside

Contributor

1216

Published Vmware vSphere on MAB Web portal.

1216

inside

MVP Gold CHKP

301

Hands-on Access and Application Control

301

inside

MVP Gold CHKP

421

Hands-on HTTPS Inspection (Oct'25)

421

inside

Collaborator

10744

Using Clusterxl_admin down/up on members with differnet versions

10744

Solved

inside

Advisor

747

Small 25 person branch office - Do I need a seperate ISP router?

747

Solved

inside

Collaborator

4152

implied rules getting hit and dropping traffic

4152

Solved

inside

Collaborator

821

Pushing configuration to VSX fails by Blade activation

821

Solved

inside

Explorer

543

First Packet application detection mechanism

543

Solved

inside

Explorer

580

Firewall Decom: Investigating Interface Traffic

580

Solved

inside

MVP Platinum

2347

Converting Tool - ClusterXL to ElasticXL

2347

Solved

inside

Contributor

505

BGP Route imports, Route filter vs Route maps?

505

inside

Participant

405

Web Filtering Best Practices October 2025: Video and Slides

462

inside

Advisor

12402

Show bgp peers across VSX in CLI

12402

Solved

inside

Advisor

3274

VPN drops - decrypt mspi is not valid

3274

Solved

inside

Contributor

477

Threat Emulation failure "Gzip exceeded maximum decompression ratio"

477

Solved

inside

Advisor

1482

replacing the SSH connection port

324

Solved

inside

Contributor

3616

What happens if licences expire on gateway

3616

Solved

inside

Participant

1134

Replacing R81.20 cluster with new R82 cluster

1134

Solved

inside

Collaborator

38073

IPSec VPN - Multiple level chain of trust certificate

308

Solved

inside

Explorer

14265

S1C managed SG9100-Cluster Upgrade R81.20 JHFT105 > R82JHFT39 / best practise, hints recommendations

229

inside

MVP Silver

805

TACACS+ with Check Point Gaia & Cisco ISE — AuthZ Profile Created but Still Getting Denied

3571

inside

Participant

2663

OSPF stops annoucing connected routes

2663

inside

Contributor

1318

Alert message on Policy install after R81 upgrade

13708

inside

Contributor

214

Troubleshooting 101 Americas September 2025 Video and Slides

1379

inside

Participant

1637

Internet access rules for proxy and transparent

1637

inside

Employee

12834

Using Wireshark to capture packets on Firewall using standard out.

12834

inside

MVP Gold

2176

RVPN Not Working on Active-Active ElasticXL R82

344

inside

Explorer

598

Management set to wrong appliance version

474

inside

Participant

631

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

631

Solved

inside

Collaborator

1111

Zero Touch Clarification Help - 3920

1111

inside

Participant

415

Using Cluster Object in NAT rules

415

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 08 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 1: How AI is Reshaping Our World

Virtual

Fri 09 Jan 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 42: Looking back & forward

Wed 14 Jan 2026 @ 05:00 PM (CET)

CheckMates Fest 2026

Virtual

Wed 21 Jan 2026 @ 11:00 AM (EST)

TechTalk: Quantum SD-WAN Monitoring

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Thu 12 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 3: Exposing AI Vulnerabilities: CP<R> Latest Security Findings

Virtual

Thu 08 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 1: How AI is Reshaping Our World

Virtual

Fri 09 Jan 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 42: Looking back & forward

Virtual

Wed 21 Jan 2026 @ 11:00 AM (EST)

TechTalk: Quantum SD-WAN Monitoring

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Virtual

Thu 26 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 4: Powering Prevention: The AI Driving Check Point’s ThreatCloud

CheckMates Events

Are you a member of CheckMates?