Security Gateways

CheckMates Fest 2026
Join the Celebration!

Quantum SD-WAN Monitoring

AI Security Masters
Hacking with AI: The Dark Side of Innovation

MVP 2026: Submissions
Are Now Open!

More details here

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
R82.10 and Rationalizing Multi Vendor Security Policies

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Contributor

23199

Displaying transceiver properties

22895

inside

Contributor

22800

Lightboard Series: High Availability Architecture with R80.10

22755

inside

Admin

22700

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

22700

Solved

inside

Contributor

22696

Not substituted certificate in browser Https Inspection

22696

Solved

inside

Participant

22597

Why CP drops RST-ACK packets from client?

22597

Solved

inside

Explorer

22540

VPN Check Point - Palo Alto issue

22304

Solved

inside

Participant

22299

Notify when certificate expired

22299

inside

Collaborator

22299

Cluster XL - Failover due to Fullsync PNOTE ON

22299

inside

Contributor

22288

F5 BIG-IP ICAP and SandBlast (TEX)

22288

Solved

inside

Collaborator

22077

Block WhatsApp Uploads/Downloads

21998

inside

Advisor

21899

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

21899

inside

Contributor

21899

Terrible performance IPHTTPS - Checkpoint SG 15600

21899

Solved

inside

Contributor

21799

Is there SNI support for inbound HTTPS inspection in R80.20?

21799

Solved

inside

Contributor

21799

Restricting Remote Access by IPv4 Address

21799

inside

Collaborator

21500

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

21486

inside

MVP Platinum

21429

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

21429

inside

Admin

21399

How do I verify Threat Emulation is working?

21399

inside

MVP Platinum

21399

VSX cluster problem - are we alone?

21355

inside

Advisor

21299

Checkpoint to Azure Route based - guide

21299

Solved

inside

Contributor

21200

Gaia r80.10 tag vlan 1 and native vlan

21200

Solved

inside

Contributor

21199

SSL Certificate Cannot Be Trusted (vulnerability)

21199

Solved

inside

Participant

21139

Checkpoint device does not establish VPN tunnel

21139

inside

Advisor

21100

BGP over VPN between Azure.docx

21100

inside

Champion

21000

Policy installation failures with Error code: 0-2000183-27

21000

inside

Participant

20900

Password hashes, sha512 and the expert password

20900

Solved

inside

Participant

20800

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

20720

Solved

inside

Advisor

20700

Identity Collector: ISE and AD continually over-writing each other on the PDP

20664

Solved

inside

Participant

20600

Apple services not working with HTTPS inspection

20600

Solved

inside

Advisor

20423

HTTPS inspection certificate question

20099

Solved

inside

MVP Gold

20011

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

20011

inside

Participant

19999

Troubleshooting performance issues

19999

Solved

inside

Contributor

19900

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

19900

inside

Participant

19899

Checkpoint Advanced OSPF Capability

19899

inside

Contributor

19899

URL Filtering Troubleshooting Help

19899

Solved

inside

Contributor

19800

Automatic Configuration of Appliance on boot

19800

inside

Collaborator

19800

High cpu utilization on RAD Process

19800

inside

Participant

19799

'TCP packet out of state' drops

19799

Solved

inside

Contributor

19799

SecureXL DoS Rate Limiting (samp rules)

19799

Solved

inside

Explorer

19799

Firewall rule for any tcp and udp port

19799

Solved

inside

Participant

19713

Test bandwidth/speed from Gaia

19713

inside

Participant

19611

CPview and DiagnosticsView TechTalk: Video, Q&A, and Slides

19499

inside

Collaborator

19399

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

19399

inside

Explorer

19305

HTTPS Weak Ciphers and other vulnerabilities

19305

inside

Employee Alumnus

19299

Understanding Threat Emulation logs

19299

Solved

inside

Participant

19299

Uploading file works on cloud but not local gateway

19299

Solved

inside

Contributor

19199

Difference between clean install and upgrade via CPUSE

19199

inside

Contributor

19199

Site to Site Route Based VPN in Checkpoint

19199

Solved

inside

Collaborator

19129

High Cpu utilization - Internet Speed drops to very low level

19129

Solved

inside

Participant

19114

Migrating cluster from old to new hardware

19114

inside

Participant

19113

How to Renew Certificate on Security Gateway.

19099

Solved

inside

Participant

19099

Snapshot vs Backup - what's the difference?

19099

Solved

inside

Contributor

18999

Site to Site VPN (policy based) and routing behavior

18999

inside

Admin

18999

Check Point Threat Prevention Packet Flow and Architecture

18999

Solved

inside

Collaborator

18933

VSX: show configuration For All Virtual Systems

18933

inside

Contributor

18899

'No valid licens found on server' even though I've attached licens and contracts

18811

inside

Participant

18807

To block 18264 on CheckPoint External Firewall

18799

inside

Employee Alumnus

18705

Using SNMP with SandBlast Network

18705

Solved

inside

Contributor

18699

I have a question about the LACP (8023AD) Bond interface.

18699

Solved

inside

Advisor

18599

Identity Collector Exclusion List

18599

inside

Collaborator

18438

Grafana and Prometheus for monitoring Check Point firewalls

18438

Solved

inside

Advisor

18422

Check Point LDAPS connection breaks everytime AD certificate is renewed

18415

inside

MVP Gold

18363

USFW enablement not clear (SK needed)

18363

Solved

inside

Participant

18326

block port 443 and 80 and 18264 on checkpoint external firewall

18326

Solved

inside

Participant

18214

ClusterXL Different Subnet Configuration

18214

Solved

inside

Participant

18211

Disable TLS/SSL support for static key cipher suites

18211

Solved

inside

Explorer

18099

Check Point Gateway CLI Uptime vs last reboot command output Not Matched (Doubt)

18099

inside

Contributor

18062

BGP Routes showing Hide and in active

18062

inside

Collaborator

17999

Combining all interfaces in one bond, how bad is this practice?

17999

Solved

inside

Contributor

17998

VPN problems - Clear text packet should be encrypted

17998

Solved

inside

Explorer

17911

Checkpoint to ASA VPN traffic selection issue

17911

inside

Contributor

17883

How to configure external dynamic lists in Checkpoint

17883

Solved

inside

Participant

17841

Snapshots are not created after installing HFA Take66 for R81.10

17841

inside

Explorer

17810

Unable to Access/Ping Checkpoint Gateway interfaces.

17810

Solved

inside

Participant

17799

Best Practise for installing Hotfixes on ClusterXL in HA mode

17799

inside

MVP Gold

17736

max performance / throughput of site2site-VPN

17736

inside

Participant

17726

Does R80.40 support HP DL380 G10 ?

17726

Solved

inside

MVP Platinum

17721

R80.40+ and GNAT. How to clear the NAT-table ?

17599

inside

Collaborator

17551

Route specific subnet out second ISP interface

17499

Solved

inside

Contributor

17300

R81.20 "HTTP parsing error occurred" / body filter failed in response

17300

Solved

inside

Advisor

17299

Finding Bandwidth consuming for particular Host

17299

inside

Contributor

17199

Identity Collector Not Collecting dot1x sessions from Cisco ISE

17199

inside

MVP Gold

17198

Is it advisable to change affinity in my scenario?

17198

inside

Authority

17099

Gateway Firewall running above 90% Memory usage

17000

inside

Advisor

16999

Vulnerability Mitigation for TLS 1.0 and Weak Ciphers

16999

inside

Contributor

16999

curl: Received HTTP code 403 from proxy after CONNECT (IPS)

16999

inside

Collaborator

16899

IKEv2 VPN issues after upgrade to R80.40

16899

inside

Contributor

16813

Ports Used for Communication by Various Check Point Modules (old)

16813

Solved

inside

MVP Platinum

16800

IPsec VPN [NATting intresting traffic] config help

16799

Solved

inside

Participant

16798

Default State table Timers on Checkpoint?

16798

Solved

inside

Participant

16699

Site-to-Site VPN and 'packet should not have been decrypted'

16699

Solved

inside

Explorer

16666

CPUSE tries to access unkown non checkpoint or akamai ip-addresses

16666

inside

Contributor

16638

WebUI does not work with Firefox 56

16638

Solved

inside

Participant

16599

User Directory vs. Identity Awareness

16599

Solved

inside

Explorer

16599

SecureXL - No accelerated connections

16599

Solved

inside

MVP Platinum

16596

Check Point VSX Cluster - Virtual Systems down after upgrade from R80.20 to R81.10

16500

inside

Contributor

16497

Traffic not accelerated by Secure XL

16497

Solved

inside

Participant

16454

How to determine top talker host IP

16454

inside

Participant

16437

Setting up a AWS VPC to Checkpoint VPN connections

16437

Solved

inside

Champion

16410

ARP table size increase is not surviving the reboot

16410

inside

Participant

16401

Certificate Renewal - how is this task processed - Reporting options required

16401

inside

MVP Platinum

16336

Check and config SSHv1 or SSHv2 on GAIA

16336

Solved

inside

Contributor

16300

command to check the hotfix version installed in Gaia

16223

inside

Explorer

16200

telnet from cli by specifying source add

16200

inside

Admin

16199

Central Deployment Tool v1.5 (CDT) has been released

16199

inside

MVP Gold

16199

dynamic balancing, VSX and core affinity

16199

inside

Contributor

16180

cphwd_q_init_ke process running out of control after upgrade to R80.30

16099

inside

Participant

16023

Switching Identity Awareness AD - NTLMv1 to NTLMv2

15808

inside

Participant

15799

How to configure VPN tunnel should get up if point to point link goes down

15799

Solved

inside

Contributor

15799

Concurrent Connections - R80.40

15799

inside

Participant

15799

Restrict VPN access by GEO location

15799

Solved

inside

Advisor

15700

IPSec VPN tunnel with Fortinet

15700

inside

Explorer

15699

Allow an encrypted communication channel between servers

15699

Solved

inside

Participant

15644

Add cluster state to gaia prompt - clish and bash

15644

Solved

inside

Participant

15638

Management IP address after factory reset

15638

inside

Participant

15604

Check Point sizing solution for VMware.

15604

Solved

inside

Collaborator

346

Certificate based S2S with Palo Alto

346

Solved

inside

Advisor

431

What does the priority field in Signature Tool (ACST) do?

431

inside

Contributor

173

Need a bit of clarification/sanity check for my hardware migration plan

958

inside

Contributor

1577

Gaia portal 404 after expanding logs volume

1577

inside

Collaborator

412

License Sync issue with MGMT Box

412

inside

Contributor

511

unable to activate license with new management ip for quantum gateways (security group)

511

inside

Collaborator

928

BGP Graceful Restart in HA cluster in Azure

928

Solved

inside

Contributor

6554

install a Certificate for IPSec VPN

6554

inside

Explorer

390

Access Control and Threat Prevention Best Practices TechTalk: Video, Slides, and Q&A

2611

Solved

inside

Collaborator

370

“Legacy GeoProtection Maximum Ranges” alert

370

Solved

inside

Explorer

766

Modifying Public Interface Topology

267

Solved

inside

MVP Gold

4215

saml redirect from portal page broke after upgrading from JHF84 to JHF89

4215

inside

MVP Gold CHKP

780

Securing Microsoft Intune using Access Control Policy

780

Solved

inside

Contributor

443

In a cluster environment, is it possible to make the snmp daemon listen on a VIP ?

443

inside

Participant

581

ISP Redundancy: LAN via ISP‑1, WLAN via ISP‑2

581

Solved

inside

Explorer

298

PPPoE is not supported with SecureXL User Space mode on 3950, R82.10?

298

inside

MVP Silver

891

One cluster not establishing s2s tunnels - Invalid IKE SPI

792

Solved

inside

Advisor

440

Is it possible to enable SSH on Security Gateway during initial setup?"

440

Solved

inside

MVP Silver

577

VSX R80.40 - Remote access and RADIUS

4908

Solved

inside

Contributor

3317

Has anyone been able to have redundant VPN tunnels with AWS using vti's?

3317

Solved

inside

Contributor

1313

Migrating R81.20 Cluster XL to new 9100 appliances

1406

inside

Participant

788

IPsec VPN with both gateways in the same subnet

788

inside

Contributor

1243

IPS Management Update requires manual update

1243

Solved

inside

Explorer

337

R81.20 "HTTP parsing error occurred" / body filter failed in response

17467

inside

MVP Silver

313

IDM integration with Check Point

313

Solved

inside

Advisor

3055

R81.20 JHF99 - Radius VPN Issues

3055

inside

Explorer

249

unable to advertise network to peer via iBGP

249

Solved

inside

Participant

811

Lightspeed accelerated connection problems after R81.20 JHF Take 111

811

Solved

inside

Authority

904

Troubleshooting 101 EMEA October 2025: Video and Slides

1649

Solved

inside

Participant

966

Adding security zone to gateway interface using Ansible

966

Solved

inside

Advisor

384

Password error while renewing SSL certificate

976

Solved

inside

Participant

833

Removing VS after deleting its domain (MDS / VSX)

833

inside

Explorer

5629

VPN community routing not working

10926

Solved

inside

Participant

1082

Old version HF bundles taking up disk space, best way to remove?

1082

Solved

inside

Participant

760

SNMP monitoring of the IPS blade

760

Solved

inside

Contributor

1150

Not able to establish BGP when ISP failover, BGP is using Configured VTI

1150

Solved

inside

Contributor

1608

Delay when visiting sites hosted at Cloudflare

1608

inside

Participant

600

Disabling TLS 1.0 and TLS 1.1 on Quantum Spark 1555

600

inside

MVP Gold CHKP

500

Configuring Inbound HTTPS Inspection

500

Solved

inside

Collaborator

832

Enabling AD password expiration warning/change and SupportOldSchema impact in an MDS enviornment

832

inside

Collaborator

1536

9200 1st Time Wizard WebUI - hangs

1536

inside

Contributor

5822

R81.20 first time wizard Gui setup error

5822

inside

Explorer

768

LOM port configuration with radius

768

inside

Contributor

858

Route Based VPN (VTI) through Secondary ISP on Load Sharing Firewalls

858

Solved

inside

Participant

1053

ISP Link Redundancy - Load Sharing / Gateway keeps traffic in a single ISP

1053

Solved

inside

MVP Silver

486

A Thought about the DHCP server on the gateway

486

Solved

inside

Contributor

611

Inbound SSH traffic inspected by HTTPS inspection ? What changed ?

611

Solved

inside

MVP Platinum

631

Virtual Systems package License question

5563

Solved

inside

Collaborator

521

Route Based VPN Tunnel on VSX (Virtual System)

561

Solved

inside

Participant

644

The IP quantity limit of a NetworkFeed

644

Solved

inside

Advisor

6084

What System TLS Configuration do?

522

Solved

inside

Explorer

1117

HTTPSi INBOUND with more than one certificate (SG9100, R82 JHFT39)

1117

Solved

inside

Collaborator

445

Failed to read certificate from database after enabling/disabling IPSec VPN blade (centrally managed

445

Solved

inside

Advisor

499

Warning about topology when installing a policy with the Internet object

499

inside

Explorer

273

Cisco Jabber External Connectivity Issue After Migrating from ASA to Check Point (Solved)

273

inside

Leader

488

Identity Awarenes - Identity Collector and ISE group filters (regex)

488

Solved

inside

MVP Gold

1145

Routing the return Traffic Through the Same incoming interface

1280

inside

Contributor

1016

Sync Redundancy in ClusterXL with MDPS

1016

inside

Collaborator

270

Logging Server crashing after calling Web Smartviewer

270

Solved

inside

Participant

432

Hands-On Quantum Network Firewall as Web Proxy - Proxy Chaining (Oct'25)

380

inside

MVP Gold CHKP

277

Hands-On Unknown Threat Prevention (Oct'25)

277

inside

MVP Gold CHKP

259

Hands-on Adjusting Threat Prevention to Your Needs (Oct'25)

259

inside

MVP Gold CHKP

321

Hands-On Known Threat Prevention (Oct'25)

321

inside

Contributor

1272

Published Vmware vSphere on MAB Web portal.

1272

inside

MVP Gold CHKP

308

Hands-on Access and Application Control

308

inside

MVP Gold CHKP

435

Hands-on HTTPS Inspection (Oct'25)

435

inside

Collaborator

10845

Using Clusterxl_admin down/up on members with differnet versions

10845

Solved

inside

Advisor

765

Small 25 person branch office - Do I need a seperate ISP router?

765

Solved

inside

Collaborator

4222

implied rules getting hit and dropping traffic

4222

Solved

inside

Collaborator

855

Pushing configuration to VSX fails by Blade activation

855

Solved

inside

Explorer

564

First Packet application detection mechanism

564

Solved

inside

Explorer

624

Firewall Decom: Investigating Interface Traffic

624

Solved

inside

MVP Platinum

2406

Converting Tool - ClusterXL to ElasticXL

2406

Solved

inside

Contributor

546

BGP Route imports, Route filter vs Route maps?

546

inside

Participant

424

Web Filtering Best Practices October 2025: Video and Slides

476

inside

Advisor

12456

Show bgp peers across VSX in CLI

12456

Solved

inside

Advisor

3331

VPN drops - decrypt mspi is not valid

3331

Solved

inside

Contributor

504

Threat Emulation failure "Gzip exceeded maximum decompression ratio"

504

Solved

inside

Advisor

1542

replacing the SSH connection port

343

Solved

inside

Contributor

3741

What happens if licences expire on gateway

3741

Solved

inside

Participant

1209

Replacing R81.20 cluster with new R82 cluster

1209

inside

Explorer

323

IPSec VPN - Multiple level chain of trust certificate

323

Solved

inside

Explorer

14704

S1C managed SG9100-Cluster Upgrade R81.20 JHFT105 > R82JHFT39 / best practise, hints recommendations

236

inside

MVP Silver

822

TACACS+ with Check Point Gaia & Cisco ISE — AuthZ Profile Created but Still Getting Denied

3749

inside

Participant

2683

OSPF stops annoucing connected routes

2683

inside

Contributor

1382

Alert message on Policy install after R81 upgrade

13799

inside

Contributor

223

Troubleshooting 101 Americas September 2025 Video and Slides

1400

inside

Participant

1675

Internet access rules for proxy and transparent

1675

inside

Employee

12969

Using Wireshark to capture packets on Firewall using standard out.

12969

inside

MVP Gold

2220

RVPN Not Working on Active-Active ElasticXL R82

357

inside

Explorer

598

Management set to wrong appliance version

481

inside

Participant

657

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

657

Solved

inside

Collaborator

1144

Zero Touch Clarification Help - 3920

1144

inside

Participant

425

Using Cluster Object in NAT rules

425

inside

Admin

517

Americas Deep Dive: HTTPS Inspection Best Practices Video and Slides

517

inside

Participant

96741

geo policy on website behind haproxy using sni

686

inside

Explorer

661

Traffic selectors unacceptable

661

Solved

inside

Explorer

818

User Account creation for file deletion

818

Solved

inside

Contributor

33293

License about to expire but Expiration Date in the past

33293

Solved

inside

Advisor

830

FW blade drops a suspicious packet like IPS blade?

830

inside

MVP Silver

831

Route based VPN with palo alto firewall

623

Solved

inside

Participant

393

Implementing HTTPS Inspection in a Multi-Tenant VSX Setup — What’s the Industry Standard?

393

Solved

inside

Collaborator

956

Replacing 5800 HA ClusterXL with 9200s. Should I convert to ElasticXL?

956

Solved

inside

Contributor

983

FW Hardware Datetime instead of NTP-settings

983

inside

Participant

5682

Special Character change in R81.20 JHF 96

5682

Solved

inside

Admin

10626

Let's Encrypt forward requests to the correct internal server (DNS-NAT)

610

inside

Participant

5129

IPsec VPN termination on Loopback interfaces -R80.40

5129

inside

Admin

1714

Improved App Control Detection Without HTTPS Inspection + TLS 1.3 Classification

1714

inside

Participant

668

SmartConsole keep relaunch to solve the experience problem

668

inside

Participant

1512

Site to Site VPN Issue (Checkpoint to Fortigate)

1512

Solved

inside

Collaborator

405

About VSX support on 3900 series

405

Solved

inside

Explorer

769

ISP Redundacy Load Sharing - NAT

769

Solved

inside

Participant

1136

Identity Awareness randomly loosing identitys

1136

Solved

inside

MVP Gold

494

Locally administrated MAC addresses

494

Solved

inside

Participant

802

Cores on CheckPoint VM are not effective

802

Solved

inside

MVP Platinum

32228

R82 – Install ElasticXL Cluster

32228

inside

Explorer

486

Log for IPS but with a Drop rule for exact source IP

486

Solved

inside

Participant

277

communication between mplane and dplane is not working

277

inside

Admin

889

PSA: Check Point and Palo Alto - GCM Phase 1

2553

inside

Participant

519

Failed to Build a Cluster Interface OSPF

519

Solved

inside

MVP Gold

2168

Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

2168

inside

Explorer

406

Guidance Needed: R82 T34 ClusterXL Bridge Mode Causing Loops & Crashes

406

inside

Contributor

3432

The URL list inside the Custom Application/Site object is not being applied.

3432

inside

Collaborator

479

Export / Import Configuration of existing GWs to new appliances

479

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Wed 14 Jan 2026 @ 05:00 PM (CET)

CheckMates Fest 2026

Virtual

Wed 21 Jan 2026 @ 11:00 AM (EST)

TechTalk: Quantum SD-WAN Monitoring

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Virtual

Tue 27 Jan 2026 @ 11:00 AM (EST)

CloudGuard Network Security for Red Hat OpenShift Virtualization

Thu 12 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 3: Exposing AI Vulnerabilities: CP<R> Latest Security Findings

Virtual

Thu 26 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 4: Powering Prevention: The AI Driving Check Point’s ThreatCloud

Virtual

Wed 21 Jan 2026 @ 11:00 AM (EST)

TechTalk: Quantum SD-WAN Monitoring

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Virtual

Tue 27 Jan 2026 @ 11:00 AM (EST)

CloudGuard Network Security for Red Hat OpenShift Virtualization

Virtual

Thu 26 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 4: Powering Prevention: The AI Driving Check Point’s ThreatCloud

CheckMates Events

Are you a member of CheckMates?