Security Gateways

CheckMates Fest 2025!
Join the Biggest Event of the Year!

Watch Now

Simplifying Zero Trust Security
with Infinity Identity!

Watch Now

Operational Health Monitoring
Help us with the Short-Term Roadmap

Take the Survey

CheckMates Go:
Recently on CheckMates

LISTEN NOW

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Contributor

19400

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

19400

Solved

inside

Collaborator

19399

Displaying transceiver properties

19399

Solved

inside

Contributor

19300

F5 BIG-IP ICAP and SandBlast (TEX)

19299

inside

Contributor

19099

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

18700

inside

Collaborator

18700

Problem with VPN traffic and Nated IPs

18700

inside

Collaborator

18700

Firewall HA status (health check)

18700

Solved

inside

Contributor

18599

Blocking malicious IP addresses (sk103154) in VSX

18499

Solved

inside

Contributor

18300

Is there SNI support for inbound HTTPS inspection in R80.20?

18300

Solved

inside

Contributor

18300

Restricting Remote Access by IPv4 Address

18300

inside

Contributor

18199

VSX cluster problem - are we alone?

18199

inside

Collaborator

18199

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

18199

Solved

inside

Participant

18199

Why CP drops RST-ACK packets from client?

18199

inside

Contributor

18100

How to block traffic coming from known malicious IP addresses R81.10

18100

Solved

inside

Participant

18100

IN /VAR/LOG/messages keep getting Stopping CUL mode

18100

inside

Participant

18099

Not substituted certificate in browser Https Inspection

18099

inside

Advisor

17899

SSL Certificate Cannot Be Trusted (vulnerability)

17800

inside

Participant

17799

How do I verify Threat Emulation is working?

17699

Solved

inside

Participant

17600

Snapshot vs Backup - what's the difference?

17600

Solved

inside

Contributor

17599

Gaia r80.10 tag vlan 1 and native vlan

17599

inside

Participant

17599

Troubleshooting performance issues

17599

Solved

inside

Advisor

17500

Automatic Configuration of Appliance on boot

17500

inside

Contributor

17500

Checkpoint gateway Memory Usage

17500

inside

Collaborator

17500

Cluster XL - Failover due to Fullsync PNOTE ON

17500

inside

Advisor

17399

Checkpoint to Azure Route based - guide

17399

inside

Admin

17399

Check Point Threat Prevention Packet Flow and Architecture

17399

Solved

inside

Participant

17298

Notify when certificate expired

17298

Solved

inside

Collaborator

17298

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

17298

inside

Participant

17200

Checkpoint Advanced OSPF Capability

17200

inside

Employee Alumnus

17200

Understanding Threat Emulation logs

17200

inside

Collaborator

17199

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

17199

Solved

inside

Collaborator

17099

VSX: show configuration For All Virtual Systems

17099

inside

Employee Alumnus

16999

Using SNMP with SandBlast Network

16999

Solved

inside

Advisor

16900

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

16900

Solved

inside

Explorer

16799

Firewall rule for any tcp and udp port

16799

inside

Advisor

16799

BGP over VPN between Azure.docx

16799

inside

Advisor

16799

Uploading file works on cloud but not local gateway

16799

Solved

inside

Participant

16700

Password hashes, sha512 and the expert password

16699

Solved

inside

Participant

16500

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

16300

inside

Participant

16300

'No valid licens found on server' even though I've attached licens and contracts

16299

Solved

inside

Contributor

16200

Disable TLS/SSL support for static key cipher suites

16199

Solved

inside

Participant

16199

Troubleshooting dropped packets in Checkpoint using zdebug

16199

Solved

inside

Advisor

16098

Allow file download and block file upload with wetransfer

15999

Solved

inside

Explorer

15900

CPUSE tries to access unkown non checkpoint or akamai ip-addresses

15900

inside

Contributor

15899

BGP Routes showing Hide and in active

15899

inside

Collaborator

15899

High cpu utilization on RAD Process

15899

Solved

inside

Collaborator

15899

High Cpu utilization - Internet Speed drops to very low level

15899

Solved

inside

Participant

15897

Migrating cluster from old to new hardware

15897

inside

Mentor

15699

USFW enablement not clear (SK needed)

15699

inside

Participant

15600

Setting up a AWS VPC to Checkpoint VPN connections

15600

inside

Contributor

15600

URL Filtering Troubleshooting Help

15600

Solved

inside

Participant

15598

Best Practise for installing Hotfixes on ClusterXL in HA mode

15598

Solved

inside

Legend

15499

Test bandwidth/speed from Gaia

15499

inside

Collaborator

15499

Combining all interfaces in one bond, how bad is this practice?

15499

inside

Admin

15499

CPview and DiagnosticsView TechTalk: Video, Q&A, and Slides

15499

Solved

inside

Advisor

15400

Identity Collector Exclusion List

15400

inside

Advisor

15399

Identity Collector: ISE and AD continually over-writing each other on the PDP

15399

inside

Explorer

15299

HTTPS Weak Ciphers and other vulnerabilities

15299

inside

Contributor

15205

Ports Used for Communication by Various Check Point Modules (old)

15205

Solved

inside

Contributor

15199

Site to Site VPN (policy based) and routing behavior

15199

Solved

inside

Contributor

15199

SecureXL DoS Rate Limiting (samp rules)

15199

inside

Collaborator

15199

Grafana and Prometheus for monitoring Check Point firewalls

15199

inside

Authority

15199

max performance / throughput of site2site-VPN

15199

Solved

inside

Contributor

15099

Difference between clean install and upgrade via CPUSE

15099

Solved

inside

Participant

15099

Route specific subnet out second ISP interface

15099

inside

Participant

15099

Certificate Renewal - how is this task processed - Reporting options required

15099

Solved

inside

Participant

15098

ClusterXL Different Subnet Configuration

15098

inside

Participant

14899

'TCP packet out of state' drops

14899

Solved

inside

Authority

14800

Check and config SSHv1 or SSHv2 on GAIA

14799

Solved

inside

Champion

14799

R82 – Install ElasticXL Cluster

14799

inside

Contributor

14799

Site to Site Route Based VPN in Checkpoint

14799

inside

Explorer

14700

curl: Received HTTP code 403 from proxy after CONNECT (IPS)

14700

Solved

inside

Participant

14699

block port 443 and 80 and 18264 on checkpoint external firewall

14699

Solved

inside

Participant

14699

Management IP address after factory reset

14699

Solved

inside

Advisor

14600

Finding Bandwidth consuming for particular Host

14600

Solved

inside

Champion

14599

ARP table size increase is not surviving the reboot

14599

inside

Explorer

14499

telnet from cli by specifying source add

14499

inside

Participant

14400

Does R80.40 support HP DL380 G10 ?

14400

inside

Explorer

14400

command to check the hotfix version installed in Gaia

14400

Solved

inside

Explorer

14400

Check Point LDAPS connection breaks everytime AD certificate is renewed

14400

inside

Participant

14399

Vulnerability Mitigation for TLS 1.0 and Weak Ciphers

14300

Solved

inside

Advisor

14299

Terrible performance IPHTTPS - Checkpoint SG 15600

14299

inside

Contributor

14200

How to configure external dynamic lists in Checkpoint

14200

inside

Advisor

14200

How to configure VPN tunnel should get up if point to point link goes down

14199

Solved

inside

Advisor

14199

WebUI does not work with Firefox 56

14099

inside

Advisor

14099

Adding default gateway outside scope of interface

14099

inside

Participant

13999

User Directory vs. Identity Awareness

13999

inside

Authority

13999

Default State table Timers on Checkpoint?

13999

inside

Explorer

13999

Unable to Access/Ping Checkpoint Gateway interfaces.

13999

Solved

inside

Participant

13900

How to determine top talker host IP

13900

inside

Advisor

13899

Dynamic CLI and Gaia APIs TechTalk and Q&A

13799

Solved

inside

Explorer

13799

How to Renew Certificate on Security Gateway.

13799

inside

Contributor

13700

IKEv2 VPN issues after upgrade to R80.40

13699

Solved

inside

Explorer

13600

To block 18264 on CheckPoint External Firewall

13600

Solved

inside

Collaborator

13502

Command to show HW Accessories' serial numbers (R77.30)?

13500

Solved

inside

Contributor

13499

Central Deployment Tool v1.5 (CDT) has been released

13499

Solved

inside

Contributor

13499

Gateway Firewall running above 90% Memory usage

13499

inside

Contributor

13400

How to set syslog severity grade log send to syslog server

13400

inside

Contributor

13399

Traffic not accelerated by Secure XL

13399

Solved

inside

Participant

13399

Switching Identity Awareness AD - NTLMv1 to NTLMv2

13399

Solved

inside

Contributor

13300

VPN/SSH connection disconnected during data transfer

13299

inside

Explorer

13199

Enabled SecureXL means no traffic

13199

inside

Participant

13199

CPUSE Agent import package option not available

13199

Solved

inside

Contributor

13199

Block WhatsApp Uploads/Downloads

13199

Solved

inside

Explorer

13199

Checkpoint to ASA VPN traffic selection issue

13199

inside

Participant

13199

Check Point sizing solution for VMware.

13199

inside

Explorer

13100

Monitor IPS blade status and IPS update status

13100

Solved

inside

Contributor

13099

How to see route metric in CLI of CP

13099

Solved

inside

Contributor

13099

Proxy ARP after upgrade to R80.30

12900

Solved

inside

Participant

12900

Snapshots are not created after installing HFA Take66 for R81.10

12900

Solved

inside

Legend

12899

HTTPS inspection certificate question

12899

inside

Explorer

12799

Checkpoint dynamic MTU value over IPSEC tunnel

12799

inside

Contributor

12799

Virtual System bridge interfaces

12799

Solved

inside

Contributor

12799

Auto-Connect Endpoint VPN Client

12799

Solved

inside

Collaborator

12799

Remote Access - SSH to Gateway

12799

inside

Advisor

12699

TE appliance not downloading the image

12699

inside

Participant

12600

URL Filtering acess to specific link

12600

inside

Explorer

12500

Domain resolving error. Check DNS configuration on the gateway (0)

12500

Solved

inside

Contributor

12500

I have a question about the LACP (8023AD) Bond interface.

12500

inside

Authority

12497

Monitoring of Anti-Spoofing traffic

12497

inside

Contributor

12400

cphwd_q_init_ke process running out of control after upgrade to R80.30

12400

inside

Participant

12400

SNX - Authentication failed error on ubuntu machine

12400

inside

Participant

12399

Check Point VSX Cluster - Virtual Systems down after upgrade from R80.20 to R81.10

12399

Solved

inside

Advisor

12399

R80.40+ and GNAT. How to clear the NAT-table ?

12399

inside

Contributor

1640

What is the difference between interface topologies: Internet and Internal default route based?

1640

inside

Contributor

495

Problem with VPN & PPPoE: R81.20 - Build 039

495

inside

Legend

2634

R80.x Performance Tuning and Debug Tips – fw monitor

70044

113

inside

Explorer

6251

Check Point Endpoint Security VPN on Linux

6251

Solved

inside

Legend

1104

Separate OSPF routing instance

550

Solved

inside

Advisor

624

Geoip Protection outubound Enforcement

624

Solved

inside

Participant

708

What is "Drop-reason of FW = Capacity"?

708

inside

Contributor

3643

Uninstalling CPUSE-Gaia Deployment Agent via CLI

3643

Solved

inside

Advisor

328

Migration assistance needed for HA 2 node Cluster - 5100s to 9100s

328

Solved

inside

Contributor

550

Validate the Manual NAT and access control policy rules

550

inside

Contributor

278

Sizing base on bandwidth for Cloud Guard Network Security

460

inside

Explorer

1760

Dynamic Layer in R82: Direct Gateway API Policy Management Made Easy - Tutorial

2425

inside

Contributor

1151

Methods to Reset Site-to-Site IPSec VPN tunnel

1151

inside

Advisor

398

Checkpoint inspection https and http

398

Solved

inside

Contributor

497

How to filter a established connection logs (request-reply)

497

inside

Contributor

464

Gaia Embedded in hyper-v lab environment

464

inside

Explorer

1734

Cluster failure - routed cannot allocate memory

1734

inside

Collaborator

303

How to install a wildcard certificate without generating a CSR from each gateway

377

inside

Explorer

367

VTI with policy based routing site2site question

367

Solved

inside

Explorer

2867

Find a IOC in checkpoint database (malicious IP, domain)

292

inside

Participant

294

How to exclude IP from SAM rules

302

inside

Contributor

301

Malformed reply from site" error message when Capsule Connect / VPN

301

Solved

inside

Collaborator

629

Allowing access to a specific URL path

629

Solved

inside

Legend

763

Limiting number of connections per user/IP address during specific timeframe

763

inside

Legend

3051

Hand-edited Files to Check After Gateway Upgrade/Fresh-load

3051

Solved

inside

Advisor

625

Traffic not working on Mobile phone

461

inside

Advisor

870

Smart Event and Log Server Replacement

998

inside

Participant

207

SNMP monitoring of MaaS tunnel

207

inside

Contributor

2122

Check Point SMB 1570 Upgrade to R81.10

2122

inside

Contributor

412

Checkpoint NGFW Showing "High Utilization" Symptoms When Pushing Policies

912

Solved

inside

Contributor

198

OpenPlatform interface names (make sure of consistency)

198

inside

Explorer

480

Traffic Dropped with error failed to resolve VPN MEP gateway

480

Solved

inside

Employee

4598

IA Captive Portal missing after upgrade to R80.40 Take 91

4598

inside

Contributor

737

How to temporary stop VS in both VSX cluster Node 1 and Node 2

282

inside

Authority

1403

strange TCP closed value in cpview

1403

inside

Explorer

223

Checkpoint 15400 in VSX cluster lost connectivity

223

Solved

inside

Legend

2048

No Downtime (Zero Downtime) hardware refresh

1003

Solved

inside

Participant

420

REPLACING DEFAULT AC POWER WITH DC POWER

420

inside

Collaborator

683

Remote VPn certificate based authentication issue.

546

inside

Contributor

280

Identity Agent for Terminal Servers - users not authenticated

280

Solved

inside

Participant

700

Installing Policies on an HA cluster one member at a time

700

inside

Contributor

656

Site to Site VPN terminate on firewall with no public ip address via external firewall

656

Solved

inside

Contributor

1360

Anti-Bot response with wrong status code

1360

Solved

inside

Collaborator

1975

R80.40 VSX clusterXL down after failover

2954

Solved

inside

Contributor

5086

Var/log/messages SPAM - cmik_loader_fw_context_match_cb: match_cb for CMI APP 31

5086

inside

Participant

518

Can we have different encryption domain in STAR S2S VPN topology

518

Solved

inside

Contributor

1202

How to actually configure Identity Collectors and Identity Sharing

1202

Solved

inside

Explorer

2987

exclude anti-spoofing for communication from specific IP addresses

2987

inside

Explorer

428

Issue with Check Point Load Balancer Traffic Routing

428

inside

Contributor

245

CheckPoint Firewall blocks Aruba Instanton access points connectivity to Aruba cloud

787

inside

Contributor

197

Checkpoint parameter monitoring - Log - File Path

197

inside

Participant

252

VPN between on-premise cluster and Azure using VTI

766

inside

Contributor

173

Respond special http status code from Firewall on website connect

173

inside

Collaborator

597

Unable to login to Security Gateway in Console, SSH, or Gaia Portal

1020

inside

Advisor

17938

nic down after upgrading dell r640 to gaia r81

2240

inside

Collaborator

248

Remove old, unused and expired IDA broker certificate

248

inside

Legend

486

5400 Appliances losing Routing-Connection after reboot

735

inside

Participant

440

Issues with TCP/IP connectivity on IPSEC VPN

216

inside

Explorer

279

Replacement for Client Authentication

279

inside

Collaborator

155

Clarification on sk108600 - VPN with 3rd parties

829

inside

Contributor

970

Content awareness and blocking .bat files issue

970

inside

Explorer

354

Working without connection to checkpoint servers

354

Solved

inside

Contributor

4804

SSL VPN Native Apps Disconnections

4804

inside

Advisor

902

CloudGard IaaS Blade on Gateway logs

440

inside

Participant

1072

Slow download site-to-site VPN

1072

inside

Contributor

298

Traffic was dropped in LAN interface of 300 appliance manageb by smart-1 cloud

298

inside

Participant

10454

Restrict VPN access by GEO location

10454

inside

Contributor

278

Identity Awareness fetch over IP-sec vpn || Azure

278

inside

Advisor

768

DNS traffic seen over SYNC interface with dummy MAC addresses?

768

inside

Contributor

365

Proper protocol to advertise a netblock to a BGP peer

431

Solved

inside

Advisor

280

Route Internet traffic through S2S

280

inside

Participant

462

Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

462

Solved

inside

Advisor

425

What is the current kernel debug buffer size?

425

Solved

inside

Explorer

386

Building ElasticXL in R82 walk through (with videos)

4359

Solved

inside

Contributor

303

Identity Awareness daemon status

303

Solved

inside

Contributor

557

Incoming VOIP calls disconnect after 30/31 seconds

557

inside

Participant

2121

rule based on a group not working anymore

353

Solved

inside

Advisor

2864

Warning: R81.20 JHF 89 for VSX

2864

inside

Participant

1111

R81.20 JHF 89 SAML Forced Re-authentication

1111

inside

Explorer

465

Usage of XFF with Identity Awareness and Identity Agent

465

Solved

inside

Collaborator

632

Let's talk about MDPS and why it sucks!

522

inside

Contributor

3993

Management Plane Separation - mdps_tun connected route

3993

Solved

inside

Authority

6169

Quantum Force CPU cores <=> virtual

6169

inside

Explorer

212

IPsec Gateway is Always Defined Cluster Management IP

212

inside

Explorer

392

Gata 81.10/Quantum 6200: Cannot manage snapshots: Gaia Web-UI recognized a non-valid input data

463

inside

Admin

1049

EMEA: Web Filtering Best Practices November 2024: Video and Slides

1049

inside

Explorer

386

Possible to use certificate authentication with ActiveSync over Checkpoint Gateway

386

inside

Contributor

377

Can not access to secondary firewall via 4434 web port

377

inside

Explorer

785

Checkpoint Management Server(Open) is not getting App & URL updates

785

Solved

inside

Participant

1101

CP-to-CP Site-to-Site VPN woes

1101

Solved

inside

Explorer

588

R81.20 High CPU being reported by Solarwinds and TOP

1983

Solved

inside

Participant

28587

How to disable Gaia access from the Internet

28587

Solved

inside

Advisor

622

R81.20 | Gateway Fresh Install - Can't set partition sizes properly

622

inside

Explorer

751

Gaia Portal Recognized a non-valid username

751

Solved

inside

Participant

478

Gaia 81.10/Quantum 6200: Can I drop ICMP redirect packets without logging?

478

Solved

inside

Contributor

1507

HTTPS Inspection over IPv6 on R82

1507

inside

Contributor

264

Check Point response to CVE-2024-24914

327

Solved

inside

Contributor

1592

AzureAD Identity Awareness on VSX - sk179788

1592

Solved

inside

Participant

11353

Configure Checkpoint as NTP server

11353

inside

Collaborator

995

VSX Funny IP behavior with 81.20 ,they are used to do real traffic generated by VS

995

Solved

inside

Contributor

8727

Migration to ClusterXL with alias interface

366

Solved

inside

Contributor

1145

Vulnerability scan shows ports 18231 uses weak ciphers

1145

inside

Participant

3665

Change from Smart Console to local Gaia portal management

1384

inside

Contributor

532

How to check history vpn tunnel status on command line

532

inside

Participant

1193

Gaia 81.10/Quantum 6200: The gateway's clock is not synchronizing automatically to my NTP servers

1193

Solved

inside

Contributor

596

Vpn domain based and eBGP + VSX

596

inside

Collaborator

4120

Zendesk voice application 3 second delay

4120

Solved

inside

Contributor

480

OSPF to Cisco FULL/DR but CP not sending routes LSU TooLow/LSAck TooLow

480

inside

Explorer

336

Both AD Query and Identity Collector

336

Solved

inside

Contributor

1587

identity awareness debugging commands fail on R81.20

1587

inside

Employee

795

Building VSNext in R82 walk through (with videos)

795

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 04 Mar 2025 @ 04:00 PM (CET)

Check Point | WIZ : Powering the Next Era of Cloud Security - AMERICAS

Tue 04 Mar 2025 @ 05:00 PM (PST)

Check Point | WIZ : Powering the Next Era of Cloud Security - EMEA

Virtual

Thu 06 Mar 2025 @ 10:00 AM (CET)

CheckMates Live BeLux: CPX 2025 Recap

Virtual

Tue 11 Mar 2025 @ 11:00 AM (IST)

AI-Powered Cyber Risk & Compliance Management - EMEA

Virtual

Tue 11 Mar 2025 @ 06:00 PM (IST)

AI-Powered Cyber Risk & Compliance Management - Americas

Virtual

Tue 11 Mar 2025 @ 05:00 PM (CDT)

Under the Hood: Configuring Site to Site VPN with Azure Virtual WAN and CloudGuard Network Security

Virtual

Tue 04 Mar 2025 @ 04:00 PM (CET)

Check Point | WIZ : Powering the Next Era of Cloud Security - AMERICAS

Virtual

Thu 06 Mar 2025 @ 10:00 AM (CET)

CheckMates Live BeLux: CPX 2025 Recap

Virtual

Tue 11 Mar 2025 @ 11:00 AM (IST)

AI-Powered Cyber Risk & Compliance Management - EMEA

Virtual

Tue 11 Mar 2025 @ 06:00 PM (IST)

AI-Powered Cyber Risk & Compliance Management - Americas

Virtual

Tue 11 Mar 2025 @ 05:00 PM (CDT)

Under the Hood: Configuring Site to Site VPN with Azure Virtual WAN and CloudGuard Network Security

Virtual

Fri 21 Mar 2025 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 34: Smart-1 Cloud & Infinity Events

In-Person

Tue 18 Mar 2025 @ 09:30 AM (EET)

CheckMates Live Greece

CheckMates Events

Are you a member of CheckMates?