Security Gateways

Unleashing Performance & Stability
with Harmony Endpoint E88.70!

It's Here!
CPX 2025 Content

Get It Now

Zero Trust: Remote Access and Posture
Help us with the Short-Term Roadmap

Take the Survey

The Future of Browser Security:
AI, Data Leaks & How to Stay Protected!

Watch now

CheckMates Go:
Recently on CheckMates

LISTEN NOW

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Advisor

32899

How to check interfaces operation failure(down) log with GUI

32699

inside

Advisor

32599

Best Practice for HA sync interface

32599

Solved

inside

Contributor

32299

rtmd Demon causing high utilization (99% CPU)

32299

Solved

inside

Employee

32100

Updatable Object for Checkpoint services

32100

Solved

inside

Advisor

31999

How to identify transceiver / SFP+ adapter?

31999

Solved

inside

Collaborator

31499

R80.40 JHF 120 - S2S VPN issue

31499

inside

Explorer

30900

How to Monitor Concurrent VPN users connected to a Gateway (OID)

30900

inside

Explorer

30899

Anti-spoofing; network defined by routes with overlapping spaces

30800

Solved

inside

Contributor

30700

'Invalid segment retransmission. Packet dropped.'

30700

inside

Explorer

30200

PBR configuration is missing on Audit log

30200

Solved

inside

Participant

30199

IPSec VPN Site to Site_Checkpoint send wrong Proxy-ID in proposal phase 2

30199

inside

Explorer

29799

IKE failure - no response from peer

29799

Solved

inside

Contributor

29500

Message seen on /var/log/messages - "simi_reorder_enqueue_packet"

29400

Solved

inside

Participant

28999

How to disable Gaia access from the Internet

28999

inside

Employee

28699

A simple way to keep your Security Gateway up-to-date – we want to hear what you think!

28699

Solved

inside

Champion

28600

Command to show the number of permitted cores

28600

Solved

inside

Explorer

28599

tcpdump for site to site vpn traffic

28599

Solved

inside

Legend

28599

Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

28100

inside

Advisor

27799

Gaia build number list including HFAs - does it exist?

27500

inside

Participant

27499

HowTo Set Up Certificate Based VPNs with Check Point Appliances – R80.x edition

27499

inside

Participant

27399

ICAP Server on Sandblast Appliance (TEX)

27399

Solved

inside

Collaborator

27199

ISP Redundancy - 2 default route pointing to different ISP

26899

Solved

inside

Collaborator

26899

ClusterXL inactive or machine is down

26899

inside

Participant

26599

Maximum number of routing entries checkpoint fw

26599

Solved

inside

Participant

26199

Cisco port channel member is suspended

26199

Solved

inside

Contributor

25900

Increasing disk space vg_splat-lv_current

25598

inside

Champion

25500

Cipher Configuration Tool (CCT)

25500

inside

Contributor

25300

Questions on upgrading from R80.10 to R80.40 or R81

25300

inside

Participant

25299

RX out of buffer drops on 25/40/100G (Mellanox) interfaces

25299

inside

Explorer

25199

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

25199

Solved

inside

Collaborator

24999

LOM password reset on 5600 and 12400 appliances

24999

inside

Explorer

24900

IPSec VPN tunnel stuck at phase 1 ESP traffic dropped

24900

inside

Participant

24900

what information do we need from the remote site customer when creating site to site VPN?

24900

Solved

inside

Collaborator

24899

Encryption Failure: according to the policy the packet should not have been decrypted

24399

Solved

inside

Authority

24399

AD-query failed with Microsoft Windows Server 2022

24399

Solved

inside

Collaborator

24000

Get SKU, MAC, and Serial Number of Appliance thru CLI

24000

inside

Advisor

24000

Identity sharing - how to change modes

24000

Solved

inside

Advisor

23999

Remote Access VPN Authentication Failure

23999

inside

Mentor

23800

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

23800

inside

Explorer

23700

TCP Packet out of state, First Packet is not syn

23700

Solved

inside

Advisor

23600

UserCheck Block Page Times Out

23299

Solved

inside

Contributor

23099

First packet isn't Syn; tcp_flags: ACK

23099

Solved

inside

Advisor

23000

Ask User Verification access rule

1308

inside

Advisor

1104

changing platform portal port on VSNext

198

inside

Participant

128

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

128

inside

Contributor

444

2 VPN tunnels with 2 different IP address

444

Solved

inside

Participant

435

MobileAccessBlade not working after SMS update to R82

196

Solved

inside

Advisor

15684

Identity Collector Exclusion List

15684

inside

Explorer

266

Https inspection bypass for application (whatsapp).

266

Solved

inside

Contributor

296

Issue Establishing VPN Tunnel Between Test Firewall and Azure Cluster (Route-Based & Domain-Based)

296

inside

Collaborator

427

Remove old, unused and expired IDA broker certificate

427

Solved

inside

Advisor

14747

CP Firewall Migration (From CP 23500 R81.10 To CP 19200 R81.20)

295

inside

Participant

221

Updateable Objects - Office 365

221

inside

Collaborator

124

Checkpoint option for DMZ-based update server

340

inside

Explorer

126

Blocking addresses using a link with a list of malicious IP addresses according to sk103154

126

Solved

inside

Participant

1264

CheckPoint Firewall blocks Aruba Instanton access points connectivity to Aruba cloud

1264

inside

Legend

5868

Policy push causes vpn tunnel to go down in R80.30

5868

inside

Legend

3388

VPN users, SAML and IPassignments

178

Solved

inside

Contributor

528

Has anyone implemented sk180808?

528

inside

Explorer

136

R81.20 Gaia BGP export routemap per peer with single AS

136

inside

Participant

200

How install InitialPolicy after use fw unloadlocal

200

inside

Authority

4578

Run a command on each firewall via CPRID

4578

Solved

inside

Participant

413

81.20 Logging issue after cluster switch

431

inside

Explorer

Excluding traffic from VPN with Policy based routing

inside

Advisor

552

Check Point ISP Redundancy - Dynamic Objects (Something Interesting Network)

552

Solved

inside

Collaborator

468

VSX and Bond interfaces going down after few hours

468

inside

Explorer

162

Strangeness with UDP packets filtering by src port

162

inside

Advisor

152

Found some traffic prevented by optimized profile although didn't use it as firewall IPS profile

152

Solved

inside

Participant

1485

3CX Phone System behind Check Point 3100

1485

Solved

inside

Contributor

876

HTTPS Inspection Bypass via URL vs IP Address

876

inside

Contributor

1050

Central license open platform cluster hardware upgrade primary

1050

inside

Contributor

148

Detach license and then add it back later (Does core config change or only if you reboot between)?

148

inside

Contributor

1310

IKE Crashes and RA VPN issues on R81.20 Take 98

1310

Solved

inside

Champion

874134

458

310

R8x Ports Used for Communication by Various Check Point Modules (new version 2.1)

874134

458

310

Solved

inside

Contributor

351

What happens if licences expire on gateway

351

Solved

inside

Participant

265

Check Point Identity Collector - Windows Server firewall Permisoins

265

Solved

inside

Contributor

19350

Identity Collector - Identity Sources configuration

4362

Solved

inside

Collaborator

249

Building VSNext in R82 walk through (with videos)

1208

inside

Employee

8883

R81.20 - Waiting for another automatic update to finish

8883

inside

Explorer

294

Identity Provider Reply URL section is blank

1428

inside

Advisor

181

CloudGuard AWS HA to third party - VPN Tunnel Instability? BGP/ICMP traffic

128

Solved

inside

Participant

724

R82 VSNext cluster with multiple VS

724

Solved

inside

Collaborator

506

Something to keep in mind when VPN tunnel is down

317

inside

Contributor

631

Problem with VPN & PPPoE: R81.20 - Build 039

631

inside

Explorer

393

Usage of XFF with Identity Awareness and Identity Agent

1488

Solved

inside

Legend

188

Question about 6600 fw replacement

305

inside

Legend

187

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 25 Mar 2025 @ 09:00 AM (CET)

CheckMates Live Paris: Harmony – Protection avancée de l’espace utilisateur

In-Person

Tue 25 Mar 2025 @ 09:00 AM (EDT)

Canada In-Person Cloud Security with Hands-On CloudGuard Workshops!

Virtual

Tue 25 Mar 2025 @ 03:00 PM (CET)

Boosting Network Performance with New R82 Software and AI-Powered Gateways - EMEA

Virtual

Tue 25 Mar 2025 @ 02:00 PM (EDT)

Boosting Network Performance with New R82 Software and AI-Powered Gateways - Americas

In-Person

Tue 25 Mar 2025 @ 12:00 PM (MDT)

Salt Lake City: CPX 2025 Recap

Virtual

Tue 25 Mar 2025 @ 02:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Tue 25 Mar 2025 @ 03:00 PM (CET)

Boosting Network Performance with New R82 Software and AI-Powered Gateways - EMEA

Virtual

Tue 25 Mar 2025 @ 02:00 PM (EDT)

Boosting Network Performance with New R82 Software and AI-Powered Gateways - Americas

Virtual

Tue 25 Mar 2025 @ 02:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Wed 26 Mar 2025 @ 04:00 PM (IST)

Validating Cyber Exposures: How To Continuously Test Exposures For Exploitability

Virtual

Thu 27 Mar 2025 @ 03:00 PM (CET)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - EMEA

Virtual

Thu 27 Mar 2025 @ 02:00 PM (EDT)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - Americas

In-Person

Tue 25 Mar 2025 @ 09:00 AM (CET)

CheckMates Live Paris: Harmony – Protection avancée de l’espace utilisateur

In-Person

Tue 25 Mar 2025 @ 09:00 AM (EDT)

Canada In-Person Cloud Security with Hands-On CloudGuard Workshops!

In-Person

Tue 25 Mar 2025 @ 12:00 PM (MDT)

Salt Lake City: CPX 2025 Recap

In-Person

Tue 08 Apr 2025 @ 12:00 PM (MDT)

Denver: CPX 2025 Recap

In-Person

Thu 10 Apr 2025 @ 10:00 AM (EEST)

CheckMates Live Sofia - Maintenance and Upgrade Best Practices

In-Person

Thu 10 Apr 2025 @ 12:00 PM (PDT)

Renton, WA: Golf and Learn!

CheckMates Events

Are you a member of CheckMates?