Security Gateways

Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages

Introduction to Lakera:
Securing the AI Frontier!

Watch Now!

Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Learn More

HTTPS Inspection
Help us to understand your needs better

Take the Survey

CheckMates Go:
SharePoint CVEs and More!

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Advisor

24300

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

24300

Solved

inside

Advisor

24198

HTTPS Certificate validation - SK159872

24198

inside

Admin

23999

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

23999

Solved

inside

Contributor

23799

cphaprob status showing down cause by routed

23799

inside

Contributor

23699

How to block traffic coming from known malicious IP addresses R81.10

23699

inside

Employee Alumnus

23599

AW keeps deleting Dameware Service

23599

inside

Participant

23500

Checkpoint gateway Memory Usage

23299

Solved

inside

Contributor

23095

Wrong peer gateway for decrypted packet (VPN Error code 01)

23095

Solved

inside

Contributor

22999

WMI Permission denied - From this months Windows Update

22999

Solved

inside

Advisor

22899

CPview and Top-connections in R80.20

22899

Solved

inside

Collaborator

22799

Installing VSX on on VMware ESXi

22699

Solved

inside

Participant

22699

Troubleshooting dropped packets in Checkpoint using zdebug

22699

inside

Explorer

22640

Blocking malicious IP addresses (sk103154) in VSX

22499

inside

Collaborator

22499

Firewall HA status (health check)

22499

inside

Employee

22418

Lightboard Series: High Availability Architecture with R80.10

22418

inside

Participant

22200

Allow file download and block file upload with wetransfer

22200

Solved

inside

Participant

22099

IN /VAR/LOG/messages keep getting Stopping CUL mode

22099

Solved

inside

Explorer

22022

Displaying transceiver properties

21899

inside

Contributor

21800

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

21499

inside

Advisor

21300

Not substituted certificate in browser Https Inspection

21300

Solved

inside

Collaborator

21299

F5 BIG-IP ICAP and SandBlast (TEX)

21299

inside

Advisor

21299

Why CP drops RST-ACK packets from client?

21100

inside

Collaborator

21099

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

21099

inside

MVP Gold

21032

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

21032

Solved

inside

Participant

21000

Notify when certificate expired

21000

inside

Collaborator

20900

Cluster XL - Failover due to Fullsync PNOTE ON

20900

inside

Collaborator

20899

Checkpoint device does not establish VPN tunnel

20801

Solved

inside

Contributor

20800

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

20800

inside

Champion

20636

Policy installation failures with Error code: 0-2000183-27

20636

Solved

inside

Contributor

20599

Is there SNI support for inbound HTTPS inspection in R80.20?

20599

Solved

inside

Contributor

20599

Restricting Remote Access by IPv4 Address

20599

inside

Contributor

20399

VSX cluster problem - are we alone?

20399

Solved

inside

Contributor

20199

Gaia r80.10 tag vlan 1 and native vlan

20199

Solved

inside

Contributor

20199

SSL Certificate Cannot Be Trusted (vulnerability)

20199

inside

Advisor

20099

Checkpoint to Azure Route based - guide

20099

inside

Admin

20000

How do I verify Threat Emulation is working?

20000

inside

Advisor

19800

BGP over VPN between Azure.docx

19800

inside

Contributor

19800

Terrible performance IPHTTPS - Checkpoint SG 15600

19800

Solved

inside

Advisor

19720

Password hashes, sha512 and the expert password

19699

Solved

inside

Collaborator

19499

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

19499

Solved

inside

Advisor

19499

Troubleshooting performance issues

19199

Solved

inside

Participant

19099

Identity Collector: ISE and AD continually over-writing each other on the PDP

18999

Solved

inside

MVP Gold

18999

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

18999

Solved

inside

Contributor

18999

Automatic Configuration of Appliance on boot

18999

Solved

inside

Explorer

18899

Firewall rule for any tcp and udp port

18899

inside

Participant

18840

VPN Check Point - Palo Alto issue

18800

Solved

inside

Contributor

18800

Block WhatsApp Uploads/Downloads

18800

inside

Advisor

18799

Checkpoint Advanced OSPF Capability

18700

inside

Collaborator

18699

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

18699

inside

Employee Alumnus

18699

Understanding Threat Emulation logs

18699

inside

Collaborator

18600

High cpu utilization on RAD Process

18600

Solved

inside

Contributor

18599

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

18599

Solved

inside

Participant

18599

Snapshot vs Backup - what's the difference?

18599

inside

Admin

18519

Check Point Threat Prevention Packet Flow and Architecture

18519

Solved

inside

Participant

18499

Uploading file works on cloud but not local gateway

18499

Solved

inside

Participant

18498

Test bandwidth/speed from Gaia

18498

inside

Contributor

18399

URL Filtering Troubleshooting Help

18399

Solved

inside

Collaborator

18302

VSX: show configuration For All Virtual Systems

18302

Solved

inside

Contributor

18299

SecureXL DoS Rate Limiting (samp rules)

18299

inside

Admin

18299

CPview and DiagnosticsView TechTalk: Video, Q&A, and Slides

18299

inside

Participant

18199

'TCP packet out of state' drops

18199

inside

Employee Alumnus

18199

Using SNMP with SandBlast Network

18199

Solved

inside

Participant

18100

Migrating cluster from old to new hardware

18100

Solved

inside

Collaborator

18100

High Cpu utilization - Internet Speed drops to very low level

18100

Solved

inside

Contributor

18099

Difference between clean install and upgrade via CPUSE

18099

Solved

inside

Participant

18088

'No valid licens found on server' even though I've attached licens and contracts

18020

inside

Participant

17999

How to Renew Certificate on Security Gateway.

17999

Solved

inside

MVP Gold

17905

HTTPS inspection certificate question

17905

inside

Explorer

17800

HTTPS Weak Ciphers and other vulnerabilities

17800

Solved

inside

Contributor

17699

Site to Site VPN (policy based) and routing behavior

17699

inside

Contributor

17699

Site to Site Route Based VPN in Checkpoint

17699

inside

MVP Gold

17650

USFW enablement not clear (SK needed)

17650

Solved

inside

Participant

17615

Disable TLS/SSL support for static key cipher suites

17615

Solved

inside

MVP Gold

17599

Identity Collector Exclusion List

17499

inside

Collaborator

17499

Grafana and Prometheus for monitoring Check Point firewalls

17499

Solved

inside

Participant

17408

Apple services not working with HTTPS inspection

17408

Solved

inside

Participant

17399

block port 443 and 80 and 18264 on checkpoint external firewall

17399

inside

Contributor

17399

BGP Routes showing Hide and in active

17399

Solved

inside

Explorer

17300

Check Point LDAPS connection breaks everytime AD certificate is renewed

17300

Solved

inside

Advisor

17199

To block 18264 on CheckPoint External Firewall

17199

inside

Collaborator

17198

Combining all interfaces in one bond, how bad is this practice?

17198

Solved

inside

MVP Gold

17120

ClusterXL Different Subnet Configuration

17099

Solved

inside

Participant

17099

Best Practise for installing Hotfixes on ClusterXL in HA mode

17099

inside

MVP Gold

16999

max performance / throughput of site2site-VPN

16999

Solved

inside

Participant

16799

Route specific subnet out second ISP interface

16799

Solved

inside

Explorer

16700

Checkpoint to ASA VPN traffic selection issue

16700

Solved

inside

Explorer

16700

How to configure external dynamic lists in Checkpoint

16699

inside

Participant

16600

Does R80.40 support HP DL380 G10 ?

16600

inside

Explorer

16600

Unable to Access/Ping Checkpoint Gateway interfaces.

16600

Solved

inside

Advisor

16500

Finding Bandwidth consuming for particular Host

16500

Solved

inside

Contributor

16500

I have a question about the LACP (8023AD) Bond interface.

16500

Solved

inside

Explorer

16415

CPUSE tries to access unkown non checkpoint or akamai ip-addresses

16415

Solved

inside

Participant

16399

Snapshots are not created after installing HFA Take66 for R81.10

16399

inside

Contributor

16205

Ports Used for Communication by Various Check Point Modules (old)

16205

inside

Advisor

16199

Vulnerability Mitigation for TLS 1.0 and Weak Ciphers

16199

inside

Participant

16199

Setting up a AWS VPC to Checkpoint VPN connections

16199

inside

Collaborator

16199

curl: Received HTTP code 403 from proxy after CONNECT (IPS)

16198

Solved

inside

Contributor

205

Message seen on /var/log/messages - "simi_reorder_enqueue_packet"

32937

Solved

inside

Contributor

381

Detected Sweep Scan originating from source: internal server - destination: empty

292

inside

Participant

347

TIL: no impact when changing physical port in Virtual Switch in a VSX Environment

347

Solved

inside

Participant

589

Not able to install latest Take

589

Solved

inside

MVP Gold

389

Any idea when it will be possible to configure routemaps via web UI?

389

Solved

inside

Advisor

395

R82 Gateway - Public Interface - Extender.html

395

inside

Participant

695

IPSec VPN redundancy is not working using MEP

695

inside

Explorer

340

Question about Sync Interface Routing in Check Point Cluster

340

Solved

inside

Contributor

368

VPN SITE TO SITE CHECKPOINT VSX ROUTE BASED

2955

Solved

inside

Participant

3570

ISP redundancy and DNS records for Web Servers in DMZ

3570

Solved

inside

Advisor

6128

BGP peer Throught IPSEC tunnel

6128

inside

MVP Gold

224

Tip for case where adding so many wildcards/fqdns does not work in the policy

224

Solved

inside

MVP Gold

406

VSX as Web proxy using IP different from the interface

963

inside

MVP Silver

800

Debugging IKE/Tunnel establishment on VSX R81.20.

3747

Solved

inside

MVP Gold

797

ClusterXL - moving to newer appliances

571

inside

Employee

495

NIAP Common Criteria cPP for R81.20 on the Product Compliant List

495

inside

Collaborator

161

Change cluster interface to private and required interfaces count didn't change

161

inside

Explorer

345

BGP sessions under the same VLAN

345

inside

MVP Silver

689

DNS traffic in DETECT mode in VSX

689

inside

Admin

736

Identity Awareness Deep Dive August 2025: Video and Slides

736

Solved

inside

Contributor

1794

AD Quary to Identity collector

1794

Solved

inside

Contributor

1485

Packet timeout with unknown reason in Quantum Force 9100 only

1485

inside

MVP Silver

253

Possible attacks in a VSX environment

253

Solved

inside

Explorer

283

UserCheck not using provided certificate - MultiPortal configuration?

441

inside

Contributor

4577

R81.20 first time wizard Gui setup error

4577

Solved

inside

Collaborator

399

Management Server Traffic Hits the Implied Rules

399

Solved

inside

Collaborator

389

ClusterXL – Changing MGMT and eth2 from 1Gb to 10Gb

389

Solved

inside

Explorer

686

Upgrade R81.10 Cluster to R82 issues

686

Solved

inside

Participant

16055

Default State table Timers on Checkpoint?

16055

Solved

inside

Participant

388

CPNotEnoughDataForRuleMatch first possible match is Cleanup Rule and is allowing traffic the Cleanup

388

Solved

inside

Explorer

278

Connect single quantum gateway to redundant core switches

209

inside

MVP Silver

921

Load Balancing on Quantum Spark 1800 SMB

2696

Solved

inside

Participant

190

enabling MDPS on 3600 or 3900 devices works as expected ?

190

Solved

inside

Contributor

894

Traffic logs show drop message "IP routing failed (ipin routing failure)"

11022

inside

Contributor

247

Anti-Spoofing on VTI interfaces

247

Solved

inside

MVP Silver

284

Alert in VS from the SmartConsole

284

Solved

inside

Advisor

305

FTW using ElasticXL cause a fatal error

305

inside

Collaborator

560

VSNext and Mobile Access issue

560

inside

MVP Gold

598

changing platform portal port on VSNext

598

Solved

inside

Explorer

492

Cluster active member lost R81.20 Take 98

492

inside

Contributor

4287

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

4287

inside

Contributor

243

Port TCP 264 displays hostname and domain name in the port scan.

243

inside

MVP Silver

697

Unusual higher that average CPU

3298

inside

Advisor

1066

Installing Hotfix on R82 ElasticXL

745

Solved

inside

Advisor

684

What are the 2550, 2570, 2590 and 2680 appliances

684

inside

Advisor

345

Block WhatsApp Uploads/Downloads

18821

inside

Contributor

163

MAB portal File Share App web-interface customization

163

inside

Advisor

183

SSL Inbound Inspection on IMAPS

183

inside

MVP Silver CHKP

3189

R81.20 JHF41 TCP Handshake counter fills up

3189

inside

Participant

495

Auditing File Uploads (with view to block using Application Rule)

495

Solved

inside

Advisor

536

Log viewer Resolve (IP) is always checked/enabled by default.

604

inside

Contributor

657

AppControl/URLF - Rules and classification

657

Solved

inside

MVP Gold

6495

How to view cpview history file on other machine

6495

inside

MVP Gold

15900

Assistance Required: Issue with UDP Port 5060 Packet Drop

1027

Solved

inside

Explorer

249

How to change path in a Scheduled system backup?

249

inside

MVP Silver

560

Checkpoint Identity collector - gateway certificate untrusted

2407

inside

Contributor

630

Anti-Spoofing on Internet (External) Interface?

630

inside

MVP Gold

6878

Sharing Threat Emulation Appliance Between Two Security Gateways

504

Solved

inside

Contributor

1413

Ordered Layers vs In-Line Layers

1413

inside

Contributor

458

Replace a cluster of 15400 appliance by a cluster of 9700 appliance

304

Solved

inside

Explorer

240

AAAA (IPv6) DNS requests control

240

Solved

inside

Explorer

6074

Nat rule over tunnel/community

6074

inside

Participant

156

MEP VPN Gateway: force specific client to connect to backup gateway

156

inside

Contributor

12865

Phase 2 Site-to-site VPN error

12865

inside

MVP Silver CHKP

735

New MCP Signature Now Available in Application Control

735

Solved

inside

Explorer

196

R81.20 snapshot size more than doubled as compared to R80.40

196

inside

MVP Silver

4043

First time wizard stucks at 90% R80.40

4043

Solved

inside

Advisor

1409

ElasticXL Traffic Distribution question

1409

Solved

inside

Explorer

884

Different DNS server per Domain R81.20

884

inside

Collaborator

365

BGP Graceful Restart in HA cluster in Azure

365

Solved

inside

Explorer

2532

Loopback interface on VSX virtual system

2532

Solved

inside

Explorer

4060

Loopback interface is going out of routing table

4060

Solved

inside

Advisor

855

Brand new appliance with non-default IP on Mgmt interface

855

inside

Collaborator

1478

Application Control and URL filtering Matching Multiple Categories/Objects

1478

inside

Explorer

338

Check Point allows HTTP/HTTPS without rule

336

inside

MVP Silver

346

Identity Collector support for Cisco ISE 3.2

2777

inside

Explorer

395

Identity Agent Connection Issue

395

Solved

inside

Advisor

11081

Gateway Firewall running above 90% Memory usage

15940

inside

Admin

686

Web Filtering Best Practices June 2025: Video and Slides

686

inside

Explorer

813

Issues Replacing/Upgrading Appliances in H/A Cluster

813

Solved

inside

Participant

610

Gaia Radius auth with encryption

610

inside

MVP Silver CHKP

1065

Seeking Guidance on Adding 9400 Appliance to Existing 15400 VSX Cluster

573

Solved

inside

Participant

456

Hardware Compatibility for Adding a gateway to Existing VSX Cluster.

471

Solved

inside

Explorer

5298

broken tcp half-closed functionality

482

inside

Explorer

608

Checkpoint Log exporter to Microsoft Cloud apps discovery

608

inside

Explorer

270

MEP configuration hints for failover P2P VPN to non-Check Point Gateway.

481

inside

Explorer

360

Checkpoint 26000 Cluster XL Down

360

Solved

inside

Explorer

3832

Identity Awareness / Identity Collector and Azure AD / Autopilot devices

3832

inside

Participant

144

R82 VSNext cluster with multiple VS

1766

Solved

inside

Participant

1933

Any issues with 9100 gateways running R81.20?

822

inside

Collaborator

396

/var/log/messages flooded with "unregister_netdevice: waiting for lo to become free"

396

inside

Contributor

16768

How to configure external dynamic lists in Checkpoint

16768

Solved

inside

MVP Silver

1001

CoreXL affinity vs CoreXL Dynamic Dispatcher

452

inside

Collaborator

525

P2P VPN Star Community - Link Selection Mode

525

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Mon 13 Oct 2025 @ 08:00 AM (CEST)

Madrid: Hands-On CloudGuard Workshops

In-Person

Tue 14 Oct 2025 @ 10:00 AM (CEST)

CheckMates Austria Road Show - CheckMates Live Graz

In-Person

Wed 15 Oct 2025 @ 09:00 AM (EDT)

Atlanta, GA: Hands-on CloudGuard Workshops

Virtual

Thu 16 Oct 2025 @ 11:00 AM (EDT)

Tips and Tricks 2025 #14: AIOps

In-Person

Wed 22 Oct 2025 @ 09:00 AM (EDT)

Tampa, FL: Hands-on CloudGuard Workshops

In-Person

Wed 22 Oct 2025 @ 09:00 AM (MDT)

Denver, CO: Hands-On CloudGuard Workshops

Virtual

Thu 16 Oct 2025 @ 11:00 AM (EDT)

Tips and Tricks 2025 #14: AIOps

Virtual

Wed 22 Oct 2025 @ 11:00 AM (EDT)

Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents Outages

Virtual

Thu 23 Oct 2025 @ 03:00 PM (CEST)

EMEA Deep Dive: Troubleshooting 101

Virtual

Tue 28 Oct 2025 @ 11:00 AM (EDT)

Under the Hood: CloudGuard Network Security for Google Cloud Network Security Integration - Overview

Virtual

Wed 29 Oct 2025 @ 03:00 PM (CET)

EMEA Deep Dive: Maestro Best Practices

Virtual

Wed 29 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Maestro Best Practices

In-Person

Mon 13 Oct 2025 @ 08:00 AM (CEST)

Madrid: Hands-On CloudGuard Workshops

In-Person

Tue 14 Oct 2025 @ 10:00 AM (CEST)

CheckMates Austria Road Show - CheckMates Live Graz

In-Person

Wed 15 Oct 2025 @ 09:00 AM (EDT)

Atlanta, GA: Hands-on CloudGuard Workshops

In-Person

Wed 22 Oct 2025 @ 09:00 AM (EDT)

Tampa, FL: Hands-on CloudGuard Workshops

In-Person

Wed 22 Oct 2025 @ 09:00 AM (MDT)

Denver, CO: Hands-On CloudGuard Workshops

In-Person

Mon 27 Oct 2025 @ 09:00 AM (PDT)

Los Angeles, CA: Hands-on CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?