Security Gateways

The Great Exposure Reset
24 February 2026 @ 5pm CET / 11am EST

Watch Now

CheckMates Fest 2026

Watch Now!

AI Security Masters
Hacking with AI: The Dark Side of Innovation

CheckMates Go:
CheckMates Fest

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Explorer

16299

command to check the hotfix version installed in Gaia

16299

inside

Explorer

16299

telnet from cli by specifying source add

16299

Solved

inside

MVP Silver

16284

Allow an encrypted communication channel between servers

16200

inside

Participant

16199

Restrict VPN access by GEO location

16199

Solved

inside

Contributor

16099

Concurrent Connections - R80.40

16099

Solved

inside

Participant

16000

Add cluster state to gaia prompt - clish and bash

16000

Solved

inside

Advisor

15999

Switching Identity Awareness AD - NTLMv1 to NTLMv2

15999

inside

Participant

15901

How to configure VPN tunnel should get up if point to point link goes down

15901

Solved

inside

Collaborator

15800

Error on updating - Internal error in a hook script: bin/hook_cvpn_HOTFIX_R80_40_JUMBO_

15800

Solved

inside

Participant

15700

Configure Checkpoint as NTP server

15700

Solved

inside

Participant

15699

Management IP address after factory reset

15699

inside

Participant

15699

Check Point sizing solution for VMware.

15699

inside

Collaborator

15600

How to set syslog severity grade log send to syslog server

15600

Solved

inside

Advisor

15600

DNS not working on gateway with internal DNS servers

15600

Solved

inside

Collaborator

15600

Remote Access - SSH to Gateway

15600

inside

Admin

15599

Dynamic CLI and Gaia APIs TechTalk and Q&A

15599

Solved

inside

Employee

15599

How to see route metric in CLI of CP

15553

inside

Advisor

15500

Disable TLS 1.0/1.1 for https inspection

15500

Solved

inside

Collaborator

15500

Inject license failed, on some blade security gateway

15500

Solved

inside

Collaborator

15499

Identity Collector not working for some users

15499

inside

Advisor

15499

Checkpoint dynamic MTU value over IPSEC tunnel

15497

Solved

inside

Contributor

15422

TCPdump active: performance increases and problem disappears

15399

Solved

inside

Contributor

15399

Adding default gateway outside scope of interface

15399

Solved

inside

Contributor

15303

R81.10 VPN site-2-site to Cisco C8500-12X IOS XE (not Palo Alto as previously stated)

15303

inside

Authority

15300

Monitoring of Anti-Spoofing traffic

15300

inside

Advisor

15300

R81.10 Threat Emulation: Error:Disk Space usage is above allowed value.

15300

inside

Employee Alumnus

15300

Many-to-One NAT from VPN to Internal

15300

inside

Collaborator

15299

Strange ( periodic ) packet loss

15299

inside

Champion

15199

Proxy ARP after upgrade to R80.30

15199

Solved

inside

Participant

15199

configure Proxy Arp on VSX cluster firewall

15199

inside

Explorer

15199

Enabled SecureXL means no traffic

15199

Solved

inside

MVP Gold CHKP

15199

URLF detect events with "Untrusted Certificate" for Microsoft sites with "HTTPS lite"

15199

Solved

inside

Participant

15100

GW causes high CPU on all cores

15100

inside

Participant

15100

How to get DHCP relase and renew logs from Checkpoint Firewall R80.10

15100

inside

Collaborator

15099

CPUSE Agent import package option not available

15099

inside

Advisor

15000

Interpreting the output of fwaccel conns table

15000

Solved

inside

Contributor

14900

Phase 2 Site-to-site VPN error

14900

inside

Contributor

14899

Virtual System bridge interfaces

14899

Solved

inside

Contributor

14899

Domain resolving error. Check DNS configuration on the gateway (0)

14799

inside

Explorer

14799

VPN/SSH connection disconnected during data transfer

14799

inside

Explorer

14799

Monitor IPS blade status and IPS update status

14799

inside

Explorer

14600

Captive portal access failure using google chrome

14600

inside

Explorer

14600

Command to show HW Accessories' serial numbers (R77.30)?

14600

Solved

inside

MVP Platinum

14599

One-liner for duplex settings summary

14599

inside

Contributor

14599

TE appliance not downloading the image

14599

inside

Employee

14599

5600 Gateway 80% memory utilisation

14500

inside

Contributor

14500

IPsec Checkpoint R80.10 and Fortinet issue. Only traffic in one direction.

14499

Solved

inside

Advisor

14499

URL Filtering acess to specific link

14499

inside

MVP Gold

14399

Microsoft forces LDAPS march 2020, is Check Point aware of this

14399

Solved

inside

Advisor

14300

Saturation of concurrent connections

14300

inside

Collaborator

14300

Upgrading 3000 cluster to 5000 cluster

14300

Solved

inside

Explorer

14299

SSL inspection performance question on 15K cluster.

14299

inside

Contributor

14299

SAML identity provider auth issue

14299

inside

Advisor

14297

How to delete an specific entry from the Connections Table with script

14200

Solved

inside

Contributor

14199

How to configure SNMP V3 on checkpoint firewall

14199

Solved

inside

Contributor

14199

Auto-Connect Endpoint VPN Client

14199

inside

Participant

14199

GAIA: tcpdump filtering with GRE ?

14199

inside

Participant

14199

Changing a port for vpn portal

14199

inside

Explorer

14101

Disabling physical interfaces in VSX

14100

inside

Advisor

14100

R81.20 - Waiting for another automatic update to finish

14099

Solved

inside

Participant

14099

Alert message on Policy install after R81 upgrade

14099

Solved

inside

Contributor

14098

Check Point - AWS VPN tunnels question

14005

inside

Participant

14000

ClusterXL issues after carrying out steps in sk43807

14000

inside

Participant

13999

R80.10 Installation Error "doAutoPartition" Exception Occured - then crashes

13999

Solved

inside

Contributor

13998

System fault LED indicator - how to find reason?

13998

Solved

inside

Explorer

13900

Standby Cluster Member cannot reach the Internet

13900

inside

Contributor

13900

BLOCK BAD REPUTATION IPS IN A DYNAMIC WAY

13899

inside

Collaborator

13800

Check Point Gateway Cores and FW Workers

13799

Solved

inside

Employee Alumnus

13799

IPSec VPN Tunnel & SSL VPN user capacity

13799

inside

Contributor

13799

ipassignment.conf -- is there a logfile to check assignment requests

13797

Solved

inside

Advisor

13792

HTTPS Inspection documentation for R80.30

13792

inside

MVP Diamond

13787

R80.30 3.10 EA Program is now available!

13699

Solved

inside

Advisor

13599

URL Filtering Pornography Category not Working - Custom Application Works

13599

inside

MVP Gold

13594

Jumbo HFA Download Archive Now Available

13594

Solved

inside

Collaborator

13500

Feasible Option to send specific traffic to Zscaler- From Checkpoint Gateway

13500

inside

Collaborator

13400

HTTPS Inspection Limiting TCP receive window to 262144 bytes and limiting throughput of tcp stream

13400

inside

Contributor

13399

Identity awareness access group problem

13399

inside

Participant

13399

Factory reset button on 2200 appliance

13399

inside

Participant

13399

SNX - Authentication failed error on ubuntu machine

13399

inside

MVP Gold

13399

What are fw monitor chain position c and r

13399

Solved

inside

Contributor

13399

User check Page not displaying for https sites

13399

Solved

inside

Advisor

13299

Identity Awareness on Remote Gateway

13299

inside

Participant

13299

Shutting Down Checkpoint ClusterXL

13299

Solved

inside

Contributor

13299

LOM Session Expired - LOM Firmware 6.10.0

13299

inside

Participant

13299

Allowing SSH username/password authentication to Gateways in AWS / GCP

13298

inside

Employee

13297

Using Wireshark to capture packets on Firewall using standard out.

13297

Solved

inside

MVP Silver

13200

Disable NAT-T in Checkpoint GW.

13200

inside

Contributor

13200

Show cluster members interfaces all from Gaia Clish - see the IP/MAC of each member and VIP

13200

inside

Contributor

13199

SSL inspection bypass for Signal app

13199

Solved

inside

Participant

13199

NAT policy rules hit count not visible in .csv export file

13199

Solved

inside

MVP Diamond

13199

Policy push overwrote default route on cluster active gateway

13199

Solved

inside

Explorer

13199

Identity Conciliation behavior

13194

Solved

inside

MVP Silver

13099

Best Practice when blocking URL

13099

Solved

inside

Contributor

13097

users facing issue during Microsoft Teams call

13094

inside

Advisor

13000

O365 + HTTPS Inspection + Bypass

13000

Solved

inside

Participant

13000

Filling var/log space due /opt/CPsuite-R80/fw1/tmp/dlp

13000

Solved

inside

MVP Diamond

12999

Rebuilding R80.30 gateways due to issues, should I stick with Gaia 2.6.18 or move to Gaia 3.1?

12999

inside

Collaborator

12999

$CPDIR/tmp/ directory is filled

12999

Solved

inside

Participant

12999

Policy Installation failed on GW | sk125152 | High Cpu | Problem wih sync link

12999

inside

Explorer

12997

HTTPS inspection not working correctly

12997

inside

Contributor

12899

Can the 3200 appliance be managed locally?

12899

inside

Advisor

12899

traffic shaping - by ip subnet

12899

Solved

inside

Contributor

12899

Mobile Access - AD users not belonging to an access role have access to mobile access portal

12899

inside

Contributor

12898

Protocol violation detected with protocol:(IKE Nat traversal - UDP)

12898

inside

Explorer

12801

Why is port 80 and 443 still open to the internet?

12801

inside

Explorer

12800

Quantum Force CPU cores <=> virtual

12799

inside

Contributor

12799

schedule backup keeps failing after upgraded from R77.30 to R81.10

12799

Solved

inside

Explorer

12798

After updating to 81.10 HA module not started

12798

inside

Collaborator

12795

Receive SN from embedded appliance

12700

inside

Advisor

12699

HA Cluster with 150+ VLAN Interfaces

12600

inside

MVP Silver

12599

ISP Redundancy - Host Not Responding

12599

inside

Participant

12599

Expect commands with R80.10 - not working as expected

12599

inside

Contributor

12599

Connection terminated before detection: Insufficient data passed. To learn more see sk113479.

12599

inside

Advisor

12599

Create Geo cluster in checkpoint?

12599

inside

Participant

12599

Site to Site VPN troubleshooting R80

12599

inside

Advisor

12500

Show bgp peers across VSX in CLI

12500

inside

Collaborator

12500

Checkpoint Standby Cluster is using VIP to communicate with outside

12500

Solved

inside

Advisor

12499

Disable TLS1.0 Chekcpoint R80.40

12499

Solved

inside

Contributor

12499

Check Point Scans/DoS protection is BROKEN

12499

Solved

inside

Advisor

12498

Show Ruleset and Objects on the Gateway (Emergency Recovery)

12426

Solved

inside

Collaborator

12404

"Decrypted in community" vs "Traffic Accepted"

12299

Solved

inside

Explorer

12299

Traffic dropped with IKE failure error

12299

inside

Explorer

12245

centrally manage a DAIP gateway

12245

Solved

inside

Contributor

12200

VPN community routing not working

12200

inside

MVP Gold

12200

TCP Out of State Drops - Hidden Monitor Mode

12200

inside

Contributor

12199

Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to

12199

Solved

inside

Participant

12199

Common Criteria EAL4+ compliance for R80.10?

12199

Solved

inside

Advisor

12100

Identity Awareness not authentic user through identity agent with Radius

12100

Solved

inside

Advisor

12099

Security Flaw? in Dynamic Anti-Spoofing (R80.20 and above)

12099

Solved

inside

Participant

12099

Proxy ARP for Manual NAT – (local.arp file) rewritten after restart

12099

inside

Contributor

12001

How to clear the DNS Cache in Checkpoint Firewall.

12001

Solved

inside

Collaborator

12000

R80.40 5400 Cluster - HA module not started

12000

Solved

inside

Collaborator

12000

Received notification from peer: Traffic selectors unacceptable

12000

Solved

inside

Explorer

11999

site-to-site VPN - Encryption domain issue

11999

inside

MVP Diamond

11999

R80.30 ClusterXL with 2.6 kernel and 3.10 kernel

11999

inside

Advisor

11999

'Authentication Error' after configuring Cloning groups

11900

inside

MVP Gold CHKP

11899

Cheat sheet for "dynamic" type objects references

11899

inside

Advisor

11899

How to size a firewall according to the different throughputs

11899

inside

Participant

11899

Traffic logs show drop message "IP routing failed (ipin routing failure)"

11899

inside

Contributor

11800

Asymmetric Routing issue-Checkpoint

11800

inside

Contributor

11799

How to clear DHCP leases on Gaia R80.10?

11799

Solved

inside

Collaborator

11799

https inspection performance issue - F2F traffic 82%..

11799

inside

Employee

11799

Unnumbered VTI to 3rd party gateway

11799

inside

Contributor

11798

Problems to start Gaia Portal in the management server

11798

Solved

inside

Contributor

11795

Var/log/messages SPAM - cmik_loader_fw_context_match_cb: match_cb for CMI APP 31

11795

inside

Explorer

11700

PPPoE Interface don´t reconnect - VE R80.40

11699

Solved

inside

Explorer

11699

VPN Site-2-Site on alias interface

11699

Solved

inside

Contributor

11699

Checkpoint using draft NAT-T Standard in VPN

11699

Solved

inside

Contributor

11699

Deleting VSX VS object from Smart Console / management server

11699

Solved

inside

Contributor

11699

Can we disable/delete/rename the default "admin" in Gaia?

11699

inside

Admin

11600

Identity Awareness Best Practices TechTalk: Video, Slides, and Q&A

11600

inside

MVP Platinum

11599

RAID issue on HP ProLiant DL360 G10

11599

inside

Advisor

11599

ICAP client on R80.20 and 3rd DLP Server Symantec

11599

inside

Participant

11599

How to Implement QoS for VoIP/RTP

11599

inside

Contributor

11598

Checkpoint Bandwidth utilization check for the uneven spike in the traffic .

11598

Solved

inside

Collaborator

11588

Check Point 23800 appliances / VSX/VSLS / Files in /tmp folder

11588

inside

Participant

11526

Sandblast appliance Downgrade from R80.10 to R77.30

11526

Solved

inside

Advisor

11509

Dropped Radius Packets with 80.20 Gateway

11509

inside

Explorer

11501

updatable objects with wildcard entries

11500

Solved

inside

Contributor

11500

Installing Expansion Interface Cards to a Cluster Gateway

11500

Solved

inside

Contributor

11500

Checkpoint OpenServer Installation Problems using PERC H750P Controller

11500

inside

MVP Diamond

11500

R81.x Performance Tuning Tip – HyperFlow (R81.20+)

11500

Solved

inside

Contributor

11499

Hardware: How to determine the CK of an SFP?

11499

inside

Collaborator

11499

https inbound inspection on port 8443

11499

Solved

inside

Participant

11499

SSL Self-Signed Certificate vulnerabily

11499

inside

Contributor

11498

How to configure External interface in Clusterxl

11498

inside

Contributor

11497

Historical connections in cpview

11497

inside

MVP Gold

11492

Announcement - Max Power 2020: Check Point Firewall Performance Optimization (Third Edition)

11492

inside

Collaborator

11400

Gaia R81.20 Titan on centrally-managed 3200 HA cluster

11400

Solved

inside

Explorer

11400

TCP segment out of maximum allowed

11400

inside

Collaborator

11399

Translate destination on client side

11399

inside

Employee

11399

File Transfers over port 22 are failing

11399

Solved

inside

Contributor

11399

Cluster inconsistency after policy installation

11399

inside

Contributor

11399

fw zdebug drop fail to allocate memory

11300

inside

Champion

11300

AD User rights for LDAP Account Unit configuration used with Identity Collector

11300

inside

MVP Silver

11300

No supported authentication methods available (server sent: publickey)

11300

inside

Participant

11299

Implementing vlan interfaces on a physical interface that doesnt have a physical IP.

11299

Solved

inside

Contributor

11299

Using Clusterxl_admin down/up on members with differnet versions

11299

inside

Explorer

11200

Checkpoint r77.30 cipher suites

11200

inside

Collaborator

11199

Changing ssh port on CP firewall

11099

Solved

inside

Employee Alumnus

11099

Best Practices for Threat Prevention API Calls to Appliance

11099

inside

Collaborator

11099

McAfee Web Gateway ICAP and Sandblast Appliance (TEX)

11099

Solved

inside

Champion

11099

No LACP on 2x10G bond with Cisco 3850

11099

inside

Contributor

11099

cluster member down after upgrade from R80.40 to R81.20 via CPUSE

11099

Solved

inside

Contributor

11099

At least one DC is currently disconnected > Bad Credentials

11099

inside

Participant

11099

Identity Awarness Certificate Change

11098

inside

Contributor

11001

Private traffic match Internet Object

11001

inside

Explorer

11000

Question regarding FTP through Checkpoint FW

11000

inside

Contributor

11000

Content Awareness does not match to rule

11000

inside

MVP Diamond

10999

GAIA - Backup all clish configs from all gateways with one CLI command.

10999

inside

Advisor

10999

Threat Emulation Environment selection of Images - issue

10999

inside

Collaborator

10999

Fix correct mac address in Gaia

10999

inside

Collaborator

10999

Stealth rule drops inbound connection

10999

Solved

inside

Admin

10989

Disable/enable Anti-spoofing globally on security gateway

10900

inside

Advisor

10900

Backup job appears to have hung

10899

inside

Contributor

10899

Comparing 15000 series appliances against 6000 series

10899

inside

Explorer

10899

Blocking TOR Exit nodes with scripting

10899

Solved

inside

Explorer

10899

Risks for disabling "Drop out of state TCP packets"

10899

inside

Participant

10899

Short communications disruptions

10899

inside

Advisor

10889

Sandblast and .msg attachments

10889

inside

Participant

10886

Having multiple External addresses for IPsec

10800

inside

MVP Diamond

10800

The New SandBlast Threat Emulation report

10799

Solved

inside

Participant

10799

Problem with AutoCad licencing servers

10799

Solved

inside

Advisor

10799

Default BIOS password for 2200 Appliances

10799

inside

Participant

10799

Access serial console of another device thru Checkpoint Appliance USB port

10799

Solved

inside

Contributor

10799

Custom Identity Awareness settings not applying

10799

inside

Admin

10799

Running VSX Like a PRO TechTalk and Q&A

10799

Solved

inside

Explorer

10799

VPN Tunnel to Cisco ASA doesn't work

10799

Solved

inside

Collaborator

10799

How to configure two separated ISP external interfaces

10799

Solved

inside

Participant

10799

Cisco ISE integration with Identity Awareness

10799

Solved

inside

Explorer

711

Firewall Decom: Investigating Interface Traffic

711

Solved

inside

MVP Diamond

2772

Converting Tool - ClusterXL to ElasticXL

2772

Solved

inside

Contributor

642

BGP Route imports, Route filter vs Route maps?

642

inside

Participant

468

Web Filtering Best Practices October 2025: Video and Slides

497

inside

Advisor

12561

Show bgp peers across VSX in CLI

12561

Solved

inside

Advisor

3474

VPN drops - decrypt mspi is not valid

3474

Solved

inside

Contributor

575

Threat Emulation failure "Gzip exceeded maximum decompression ratio"

575

Solved

inside

Advisor

1771

replacing the SSH connection port

387

Solved

inside

Contributor

4095

What happens if licences expire on gateway

4095

Solved

inside

Participant

1428

Replacing R81.20 cluster with new R82 cluster

1428

inside

Explorer

348

IPSec VPN - Multiple level chain of trust certificate

348

Solved

inside

Explorer

16677

S1C managed SG9100-Cluster Upgrade R81.20 JHFT105 > R82JHFT39 / best practise, hints recommendations

252

inside

MVP Silver

908

TACACS+ with Check Point Gaia & Cisco ISE — AuthZ Profile Created but Still Getting Denied

4356

inside

Participant

2744

OSPF stops annoucing connected routes

2744

inside

Contributor

1518

Alert message on Policy install after R81 upgrade

14147

inside

Contributor

251

Troubleshooting 101 Americas September 2025 Video and Slides

1459

inside

Participant

1796

Internet access rules for proxy and transparent

1796

inside

Employee

13308

Using Wireshark to capture packets on Firewall using standard out.

13308

inside

MVP Gold

2381

RVPN Not Working on Active-Active ElasticXL R82

401

inside

Explorer

673

Management set to wrong appliance version

522

inside

Participant

729

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

729

Solved

inside

Collaborator

1248

Zero Touch Clarification Help - 3920

1248

inside

Participant

485

Using Cluster Object in NAT rules

485

inside

Admin

590

Americas Deep Dive: HTTPS Inspection Best Practices Video and Slides

590

inside

Participant

97138

geo policy on website behind haproxy using sni

744

inside

Explorer

757

Traffic selectors unacceptable

757

Solved

inside

Explorer

906

User Account creation for file deletion

906

Solved

inside

Contributor

34344

License about to expire but Expiration Date in the past

34344

Solved

inside

Advisor

906

FW blade drops a suspicious packet like IPS blade?

906

inside

MVP Silver

934

Route based VPN with palo alto firewall

670

Solved

inside

Participant

434

Implementing HTTPS Inspection in a Multi-Tenant VSX Setup — What’s the Industry Standard?

434

Solved

inside

Collaborator

1100

Replacing 5800 HA ClusterXL with 9200s. Should I convert to ElasticXL?

1100

Solved

inside

Contributor

1108

FW Hardware Datetime instead of NTP-settings

1108

inside

Participant

5946

Special Character change in R81.20 JHF 96

5946

Solved

inside

Admin

11065

Let's Encrypt forward requests to the correct internal server (DNS-NAT)

661

inside

Participant

5249

IPsec VPN termination on Loopback interfaces -R80.40

5249

inside

Admin

1768

Improved App Control Detection Without HTTPS Inspection + TLS 1.3 Classification

1768

inside

Participant

714

SmartConsole keep relaunch to solve the experience problem

714

inside

Participant

1719

Site to Site VPN Issue (Checkpoint to Fortigate)

1719

Solved

inside

Collaborator

439

About VSX support on 3900 series

439

Solved

inside

Explorer

848

ISP Redundacy Load Sharing - NAT

848

Solved

inside

Participant

1228

Identity Awareness randomly loosing identitys

1228

Solved

inside

MVP Gold

530

Locally administrated MAC addresses

530

Solved

inside

Participant

856

Cores on CheckPoint VM are not effective

856

Solved

inside

MVP Diamond

33544

R82 – Install ElasticXL Cluster

33544

inside

Explorer

517

Log for IPS but with a Drop rule for exact source IP

517

Solved

inside

Participant

309

communication between mplane and dplane is not working

309

inside

Admin

933

PSA: Check Point and Palo Alto - GCM Phase 1

2679

inside

Participant

570

Failed to Build a Cluster Interface OSPF

570

Solved

inside

MVP Gold

2324

Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

2324

inside

Explorer

451

Guidance Needed: R82 T34 ClusterXL Bridge Mode Causing Loops & Crashes

451

inside

Contributor

3843

The URL list inside the Custom Application/Site object is not being applied.

3843

inside

Collaborator

516

Export / Import Configuration of existing GWs to new appliances

516

inside

MVP Diamond

3833

Route based VPN tunnel to Azure

3833

Solved

inside

MVP Diamond

702

Inbound HTTPS inspection and Qualys SSL Labs results

514

inside

Participant

776

Multiple Users in Source User Name

776

inside

Admin

459

APAC Deep Dive Troubleshooting 101 September 2025 Video and Slides

459

Solved

inside

Explorer

2060

Is it possible to change the temp directory cpinfo uses for generation?

2060

Solved

inside

Participant

1378

Port 80, 443, 500 and 18264 are open on external interfaces, how to block it?

1378

Solved

inside

Explorer

546

HTTPS CERTIFICATE WITH AZURE AD

546

inside

Admin

1474

EMEA Deep Dive: Web Filtering Best Practices August 2025

1474

Solved

inside

Contributor

523

Message seen on /var/log/messages - "simi_reorder_enqueue_packet"

34974

Solved

inside

Collaborator

613

Detected Sweep Scan originating from source: internal server - destination: empty

504

inside

Participant

489

TIL: no impact when changing physical port in Virtual Switch in a VSX Environment

489

Solved

inside

Participant

1439

Not able to install latest Take

1439

Solved

inside

MVP Diamond

549

Any idea when it will be possible to configure routemaps via web UI?

549

Solved

inside

Advisor

647

R82 Gateway - Public Interface - Extender.html

647

inside

Participant

1456

IPSec VPN redundancy is not working using MEP

1456

inside

Explorer

620

Question about Sync Interface Routing in Check Point Cluster

620

Solved

inside

Contributor

731

VPN SITE TO SITE CHECKPOINT VSX ROUTE BASED

4166

Solved

inside

Participant

3906

ISP redundancy and DNS records for Web Servers in DMZ

3906

Solved

inside

Advisor

7123

BGP peer Throught IPSEC tunnel

7123

inside

MVP Diamond

460

Tip for case where adding so many wildcards/fqdns does not work in the policy

460

Solved

inside

MVP Diamond

733

VSX as Web proxy using IP different from the interface

1627

inside

MVP Silver

1027

Debugging IKE/Tunnel establishment on VSX R81.20.

4667

Solved

inside

MVP Gold

1306

ClusterXL - moving to newer appliances

901

inside

Employee

847

NIAP Common Criteria cPP for R81.20 on the Product Compliant List

847

inside

Collaborator

356

Change cluster interface to private and required interfaces count didn't change

356

inside

Explorer

602

BGP sessions under the same VLAN

602

inside

MVP Silver

1213

DNS traffic in DETECT mode in VSX

1213

inside

Admin

1129

Identity Awareness Deep Dive August 2025: Video and Slides

1129

Solved

inside

Collaborator

3308

AD Quary to Identity collector

3308

Solved

inside

Contributor

2343

Packet timeout with unknown reason in Quantum Force 9100 only

2343

inside

MVP Silver

384

Possible attacks in a VSX environment

384

Solved

inside

Explorer

624

UserCheck not using provided certificate - MultiPortal configuration?

881

Solved

inside

Collaborator

704

Management Server Traffic Hits the Implied Rules

704

Solved

inside

Collaborator

828

ClusterXL – Changing MGMT and eth2 from 1Gb to 10Gb

828

Solved

inside

Explorer

1966

Upgrade R81.10 Cluster to R82 issues

1966

Solved

inside

Participant

17112

Default State table Timers on Checkpoint?

17112

Solved

inside

Participant

913

CPNotEnoughDataForRuleMatch first possible match is Cleanup Rule and is allowing traffic the Cleanup

913

Solved

inside

Explorer

632

Connect single quantum gateway to redundant core switches

329

inside

MVP Silver

1129

Load Balancing on Quantum Spark 1800 SMB

3721

Solved

inside

Participant

336

enabling MDPS on 3600 or 3900 devices works as expected ?

336

Solved

inside

Collaborator

1446

Traffic logs show drop message "IP routing failed (ipin routing failure)"

11945

inside

Collaborator

446

Anti-Spoofing on VTI interfaces

446

Solved

inside

MVP Silver

510

Alert in VS from the SmartConsole

510

Solved

inside

Advisor

546

FTW using ElasticXL cause a fatal error

546

inside

Collaborator

886

VSNext and Mobile Access issue

886

inside

MVP Gold

843

changing platform portal port on VSNext

843

Solved

inside

Explorer

941

Cluster active member lost R81.20 Take 98

941

inside

Contributor

9733

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

9733

inside

Contributor

448

Port TCP 264 displays hostname and domain name in the port scan.

448

inside

MVP Silver

1082

Unusual higher that average CPU

4714

inside

Advisor

2287

Installing Hotfix on R82 ElasticXL

1292

Solved

inside

Advisor

1174

What are the 2550, 2570, 2590 and 2680 appliances

1174

inside

Advisor

553

Block WhatsApp Uploads/Downloads

22991

inside

Contributor

325

MAB portal File Share App web-interface customization

325

inside

Advisor

419

SSL Inbound Inspection on IMAPS

419

inside

MVP Silver CHKP

4019

R81.20 JHF41 TCP Handshake counter fills up

4019

inside

Participant

699

Auditing File Uploads (with view to block using Application Rule)

699

Solved

inside

Advisor

880

Log viewer Resolve (IP) is always checked/enabled by default.

1133

inside

Contributor

1262

AppControl/URLF - Rules and classification

1262

Solved

inside

MVP Gold

7323

How to view cpview history file on other machine

7323

inside

Participant

2454

Assistance Required: Issue with UDP Port 5060 Packet Drop

2454

Solved

inside

Explorer

495

How to change path in a Scheduled system backup?

495

inside

MVP Silver

1125

Checkpoint Identity collector - gateway certificate untrusted

2775

inside

Contributor

1409

Anti-Spoofing on Internet (External) Interface?

1409

inside

MVP Gold

9445

Sharing Threat Emulation Appliance Between Two Security Gateways

896

Solved

inside

Contributor

2780

Ordered Layers vs In-Line Layers

2780

inside

Contributor

793

Replace a cluster of 15400 appliance by a cluster of 9700 appliance

575

Solved

inside

Explorer

420

AAAA (IPv6) DNS requests control

420

Solved

inside

Explorer

6626

Nat rule over tunnel/community

6626

inside

Participant

272

MEP VPN Gateway: force specific client to connect to backup gateway

272

inside

Employee Alumnus

980

New MCP Signature Now Available in Application Control

980

Solved

inside

Explorer

334

R81.20 snapshot size more than doubled as compared to R80.40

334

inside

MVP Silver

4619

First time wizard stucks at 90% R80.40

4619

Solved

inside

Advisor

2651

ElasticXL Traffic Distribution question

2651

Solved

inside

Explorer

1196

Different DNS server per Domain R81.20

1196

Solved

inside

Explorer

2900

Loopback interface on VSX virtual system

2900

Solved

inside

Explorer

4855

Loopback interface is going out of routing table

4855

Solved

inside

Advisor

1533

Brand new appliance with non-default IP on Mgmt interface

1533

inside

Collaborator

2822

Application Control and URL filtering Matching Multiple Categories/Objects

2822

inside

Explorer

565

Check Point allows HTTP/HTTPS without rule

566

inside

MVP Silver

551

Identity Collector support for Cisco ISE 3.2

3555

inside

Explorer

805

Identity Agent Connection Issue

805

Solved

inside

Advisor

12182

Gateway Firewall running above 90% Memory usage

17352

inside

Admin

899

Web Filtering Best Practices June 2025: Video and Slides

899

inside

Explorer

1417

Issues Replacing/Upgrading Appliances in H/A Cluster

1417

Solved

inside

Participant

1017

Gaia Radius auth with encryption

1017

inside

Employee Alumnus

1568

Seeking Guidance on Adding 9400 Appliance to Existing 15400 VSX Cluster

821

Solved

inside

Participant

852

Hardware Compatibility for Adding a gateway to Existing VSX Cluster.

749

Solved

inside

Explorer

6729

broken tcp half-closed functionality

938

inside

Explorer

1009

Checkpoint Log exporter to Microsoft Cloud apps discovery

1009

inside

Explorer

450

MEP configuration hints for failover P2P VPN to non-Check Point Gateway.

718

inside

Explorer

627

Checkpoint 26000 Cluster XL Down

627

Solved

inside

Explorer

4443

Identity Awareness / Identity Collector and Azure AD / Autopilot devices

4443

inside

Participant

288

R82 VSNext cluster with multiple VS

2562

Solved

inside

Participant

3189

Any issues with 9100 gateways running R81.20?

1280

inside

Collaborator

651

/var/log/messages flooded with "unregister_netdevice: waiting for lo to become free"

651

inside

Contributor

18233

How to configure external dynamic lists in Checkpoint

18233

Solved

inside

MVP Silver

1738

CoreXL affinity vs CoreXL Dynamic Dispatcher

725

inside

Collaborator

776

P2P VPN Star Community - Link Selection Mode

776

Solved

inside

Collaborator

630

AD Query to Identity Collector

630

inside

Contributor

624

identity awareness ADQuery Test Result Document share it please

624

inside

Explorer

357

How to configure IPv6 network with existing Check Point IPV4 Network

357

Solved

inside

Advisor

4546

VSX, VSNext access virtual context via SSH

4546

inside

Explorer

419

How to Renew Certificate on Security Gateway.

19457

Solved

inside

Explorer

1707

No option to choose HA while setting up VSX Clusters in VM

1707

Solved

inside

Participant

1172

Slow speed for image redirection in LOM

1172

Solved

inside

Collaborator

1013

Identity Awareness Sharing in another Management

1013

inside

Participant

5092

R82: IPv6 with Prefix-Delegation Problem

5092

inside

Admin

3417

EMEA Deep Dive: What's New in R82 June 2025: Video, Slides, and Q&A

3417

Solved

inside

Collaborator

1223

Identity Collector Exclusion List

18904

Solved

inside

Explorer

833

How to find out cause Bytes Throughput high

833

Solved

inside

Explorer

922

Https inspection bypass for application (whatsapp).

9961

inside

Admin

1814

New Identity Awareness Clients Administration Guide

1814

inside

MVP Silver

1418

Any specific reason that routed daemon is 32-bit in a 64-bit system?

520

inside

MVP Silver

5334

Disadvantages of CPSizeme tool.

5334

Solved

inside

Collaborator

2021

Identity Agent - Machine not detected

1869

inside

Admin

1752

HTTPS Inspection Best Practices June 2025: Video and Slides

1752

Solved

inside

Collaborator

11873

Firewall gateway migration activity

2724

Solved

inside

MVP Silver

3565

Standby Device logs not sending to Management Server

1254

Solved

inside

Advisor

4321

QoS Bandwith Control per User/IP

4321

inside

Advisor

8968

IKEView not displaying ike.elg captures?

8968

inside

Contributor

1857

39xx appliances are NOT a replacement for any current 5xxx or 6xxx gateway customer!

1857

inside

Participant

6844

Var/log/messages SPAM - cmik_loader_fw_context_match_cb: match_cb for CMI APP 31

11887

Solved

inside

Contributor

1872

Block "IP Changed" Remote Access VPN

1872

inside

Contributor

1131

Problem with site Certificate Based VPNs

1131

Solved

inside

Explorer

1112

Disable the automatic download of updates without disabling CPUSE completely.

1112

Solved

inside

Collaborator

1048

R81.20 support for the brand new 39xx Appliances

966

Solved

inside

Explorer

2991

Regarding gateway handling of asymmetric routing

2991

inside

Collaborator

1876

ISP REDUDANCY FAILOVER NOT WORKING

1876

inside

Contributor

4961

Last working stable CPUSE that works on R77.30 for HFA update?

1808

inside

Contributor

2766

Replacement for the Quantum 3000 Series (3600/3800)?

2766

Solved

inside

Contributor

5376

Checkpoint Site to Site VPN, Tunnel is UP, but traffic doesn't arrive to destination

5376

inside

Participant

1732

quantum gateway cluster to azure express route

1732

inside

MVP Gold

2025

BGP Community on Inbound Routemaps

4329

inside

Employee Alumnus

555

new SGM detection stucked in ElasticXL and a workaround

555

inside

MVP Gold

7991

Run a command on each firewall via CPRID

7991

Solved

inside

Collaborator

863

Routing issues for Remote Access during cluster upgrade

863

inside

Explorer

843

Checkpoint Gateway Refresh from 4600 series to 6200 series

843

inside

Collaborator

382

Checkpoint Active-Active Traffic Handling

382

Solved

inside

Explorer

684

What need to do when domain of our company is wrongly classified as malicious

684

inside

Collaborator

733

Identity awareness Update frequency

733

Solved

inside

Explorer

1515

R82 Standalone setup in Checkpoint 3600 and 3800

1515

inside

MVP Silver

986

High CPU on Security Gateway caused by RAD service / Slow Internet

4722

Solved

inside

MVP Diamond

8679

URL filtering blade (RAD process) causing high CPU tip

8679

Solved

inside

Advisor

9539

SAML authentication stops working after FW Upgrade / Fresh Install

9539

inside

MVP Gold

633

snmpd restarting every 2 hours

3180

Solved

inside

MVP Gold CHKP

15351

URLF detect events with "Untrusted Certificate" for Microsoft sites with "HTTPS lite"

15351

inside

Contributor

1254

Slow network performance via VPN.

1254

inside

Participant

2797

GAIA WebUI Login Events Not Visible in SmartConsole Audit Logs

2797

inside

Explorer

1017

Bypass Address Spoofing for a Specific Protocol

1017

inside

Collaborator

22740

Cluster XL - Failover due to Fullsync PNOTE ON

22740

inside

Explorer

468

ElasticXL Bond/Aggregate Behavior

468

inside

Participant

493

Switch configuration for ClusterXL using OSPF

493

inside

Collaborator

762

R81.20 Inbound SSL inspection - custom applications are not working

762

inside

Contributor

4482

Programatically disable Extended Cluster Anti-Spoofing

1534

inside

Participant

3737

R81.20 JHF 89 SAML Forced Re-authentication

3737

Solved

inside

Explorer

1584

Why is my BGP (TCP 179) traffic getting blocked by Check Point when set up vpn to AWS

1584

inside

Contributor

11138

cluster member down after upgrade from R80.40 to R81.20 via CPUSE

11138

Solved

inside

Collaborator

2947

SecureXL User Space Mode (UPPAK) and BFD

2947

inside

Contributor

1069

[VSX] How to disable an interface in HA monitoring

1069

Solved

inside

Explorer

1832

SAML Authentication for Gaia Administrators?

873

inside

Explorer

3201

Uninstalling Jumbo Hotfix R81.20 Take 90

3201

Solved

inside

Collaborator

7203

Policy installation failed on gateway (error code: 0-3-2000172-1)

7203

Solved

inside

Advisor

2118

standby member of clusterxl sometimes goes down for a few second

2118

inside

Contributor

1239

Active PNOTEs: LPRB on Cluster Members

2168

inside

Contributor

1595

ElasticXL on 9100 and 9700 Appliances

1746

Solved

inside

Participant

4867

HTTPS Inspection significantly slows down loading of images

4867

Solved

inside

Participant

902

Connections to Checkpoint native services do not encrypt within the VPN for firewall management

902

Solved

inside

Contributor

786

clusterxl 81.20 hjf 99 or 98 passive mode throws Threat Emulation update failed cannot download exe_

786

inside

Explorer

713

Disable FIPS for HotFix install

713

inside

Explorer

1311

Not Up, VPN site to site with NAT

1311

inside

Contributor

12239

Incorrect configuration - Local cluster member has fewer cluster interfaces configured compared to

12239

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 10 Feb 2026 @ 03:00 PM (CET)

NIS2 Compliance in 2026: Tactical Tools to Assess, Secure, and Comply

Virtual

Tue 10 Feb 2026 @ 02:00 PM (EST)

Defending Hyperconnected AI-Driven Networks with Hybrid Mesh Security

Virtual

Thu 12 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 3: AI-Generated Malware - From Experimentation to Operational Reality

Virtual

Fri 13 Feb 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 43: Terugblik op de Check Point Sales Kick Off 2026

Virtual

Tue 17 Feb 2026 @ 11:00 AM (EST)

Under The Hood: CloudGuard Network Ops App (aka NOA)

Virtual

Thu 19 Feb 2026 @ 10:00 AM (IST)

Threat Hunting with Endpoint Telemetry - EMEA

Virtual

Tue 10 Feb 2026 @ 03:00 PM (CET)

NIS2 Compliance in 2026: Tactical Tools to Assess, Secure, and Comply

Virtual

Tue 10 Feb 2026 @ 02:00 PM (EST)

Defending Hyperconnected AI-Driven Networks with Hybrid Mesh Security

Virtual

Thu 12 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 3: AI-Generated Malware - From Experimentation to Operational Reality

Virtual

Fri 13 Feb 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 43: Terugblik op de Check Point Sales Kick Off 2026

Virtual

Tue 17 Feb 2026 @ 11:00 AM (EST)

Under The Hood: CloudGuard Network Ops App (aka NOA)

Virtual

Thu 19 Feb 2026 @ 10:00 AM (IST)

Threat Hunting with Endpoint Telemetry - EMEA

In-Person

Tue 24 Feb 2026 @ 04:30 PM (EST)

Las Vegas: MDR/XMDR

In-Person

Wed 25 Feb 2026 @ 04:30 PM (MST)

Tempe, AZ: MDR/MXDR

CheckMates Events

Are you a member of CheckMates?