Security Gateways

Open Garden In Action:
Find and Remediate Threats Everywhere!

New Appliance Announcements
and Faster Threat Prevention

Watch Now!

Check Point Named Leader
Forrester Wave™: Zero Trust Platforms, Q3 2025

Learn More

Remote Access VPN – User Experience
Help us with the Short-Term Roadmap

Take the Survey

CheckMates Go:
AI Agents

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Contributor

299

R81.20 support for the brand new 39xx Appliances

299

inside

Explorer

299

Quantum Force 9300 and 9400 series - Clean install

299

inside

Contributor

299

R81.20 Inbound SSL inspection - custom applications are not working

299

Solved

inside

Contributor

299

clusterxl 81.20 hjf 99 or 98 passive mode throws Threat Emulation update failed cannot download exe_

299

Solved

inside

Participant

299

Connections to Checkpoint native services do not encrypt within the VPN for firewall management

299

inside

Participant

299

Machines in EPG (Cisco ACI) are rebooted but not updated on Gateway

299

inside

Contributor

299

TIP: Creating Identity Agent MSI pre configured

299

inside

Authority

299

MobileAccessBlade not working after SMS update to R82

299

inside

Collaborator

299

Found some traffic prevented by optimized profile although didn't use it as firewall IPS profile

299

inside

Explorer

299

Loss of access to hardware after enabling p2p ospf

299

inside

Contributor

299

Cross-site communication problem

299

inside

Contributor

299

Application Server Message Block v1 (SMBv1) experience

299

inside

Explorer

299

vpn client connection error ISP version 6

299

inside

Explorer

299

Checkpoint site2site vpn loadsharing with fortigate

299

inside

Collaborator

299

VSNext and evaluation license issue

298

inside

Explorer

292

Does the smart console override the setting on the end points or do they work in conjunction

290

inside

Contributor

288

VPN users, SAML and IPassignments

288

inside

Explorer

282

Strangeness with UDP packets filtering by src port

282

inside

Collaborator

280

MEP configuration hints for failover P2P VPN to non-Check Point Gateway.

280

inside

Authority

277

temporary disable policy install ?

277

inside

Advisor

263

LDAP connections are not closed and accumulating on the gateway

263

inside

Advisor

261

R81.20 Gaia BGP export routemap per peer with single AS

260

inside

Participant

255

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

255

inside

Legend

252

SAML Authentication for Gaia Administrators?

250

inside

Advisor

247

Disable FIPS for HotFix install

240

inside

Advisor

239

domain object and updatable object behavior

239

inside

Explorer

237

if WebRTC needs to leak the REAL IP address of the user for the signaling

237

inside

Contributor

233

Detach license and then add it back later (Does core config change or only if you reboot between)?

233

inside

Participant

216

OSPF Between Checkpoint and Cisco Nexus switches

216

inside

Explorer

215

Performance Questions Quantum 9300 - SNMP Fast Accel & UDP: Check Point.

212

inside

Advisor

209

CloudGuard AWS HA to third party - VPN Tunnel Instability? BGP/ICMP traffic

209

inside

Authority

207

question regarding limitation of Lightspeed 100G interfaces and enabling UPPAK

207

inside

Employee

203

NIAP Common Criteria cPP for R81.20 on the Product Compliant List

203

Solved

inside

Contributor

201

Ordered Layers vs In-Line Layers

200

inside

Explorer

200

Routing the return Traffic Through the Same incoming interface

200

Solved

inside

Advisor

200

Any specific reason that routed daemon is 32-bit in a 64-bit system?

200

inside

Ambassador

200

new SGM detection stucked in ElasticXL and a workaround

200

inside

Collaborator

200

Capsule Workspace and SSL/TLS ciphers

200

inside

Explorer

200

Excluding traffic from VPN with Policy based routing

200

inside

Explorer

200

RADIUS Authentication via Non-Mgmt Interface

200

inside

Explorer

199

Identity Agent Connection Issue

199

Solved

inside

Participant

199

Hardware Compatibility for Adding a gateway to Existing VSX Cluster.

199

inside

Collaborator

199

/var/log/messages flooded with "unregister_netdevice: waiting for lo to become free"

199

Solved

inside

Collaborator

199

AD Query to Identity Collector

199

Solved

inside

Participant

199

CoreXL affinity vs CoreXL Dynamic Dispatcher

199

inside

Explorer

199

identity awareness ADQuery Test Result Document share it please

199

inside

Collaborator

199

P2P VPN Star Community - Link Selection Mode

199

Solved

inside

Explorer

199

What are the 2550, 2570, 2590 and 2680 appliances

199

inside

Legend

199

Switch configuration for ClusterXL using OSPF

199

inside

Explorer

199

Blocking addresses using a link with a list of malicious IP addresses according to sk103154

199

Solved

inside

Advisor

164

Adding IDC account to protected users group

145

inside

Contributor

145

ESP packets use ISP router MAC instead of ISP HSRP MAC

145

inside

Explorer

143

Checkpoint 26000 Cluster XL Down

143

inside

Collaborator

123

Identity awareness Update frequency

123

inside

Explorer

122

ElasticXL Bond/Aggregate Behavior

122

inside

Contributor

106

Anti-Spoofing on Internet (External) Interface?

106

Solved

inside

Participant

105

BGP Graceful Restart in HA cluster in Azure

100

inside

Advisor

100

Check Point allows HTTP/HTTPS without rule

100

inside

Admin

100

Tips and Tricks 2025 #6 - Best Practices for Infinity Portal Identity and Access Management

100

Solved

inside

Contributor

inside

Collaborator

Checkpoint Active-Active Traffic Handling

inside

Explorer

How to configure IPv6 network with existing Check Point IPV4 Network

Solved

inside

Explorer

AAAA (IPv6) DNS requests control

inside

Explorer

R81.20 snapshot size more than doubled as compared to R80.40

inside

Participant

MEP VPN Gateway: force specific client to connect to backup gateway

inside

Participant

Sharing Threat Emulation Appliance Between Two Security Gateways

inside

Participant

4613

Malicious file sent through Sandblast

4613

inside

Participant

3639

CLI slow response on new appliances

3639

inside

Advisor

21228

New Early Availability Program - New Gaia OS for Security Management Server

3493

inside

Explorer

1830

Issues running SPLAT and Gaia on 2 appliances

1830

inside

Participant

4909

Adding 2nd HDD to VM for upgradation

4909

inside

Advisor

3021

R80.10 advanced isomorphic for open servers?

3021

inside

Champion

7909

How to determine uptime intervals from gateway logs?

7909

inside

Explorer

1277

BL460 G9 blades compatible with 560SFP

1277

inside

Explorer

3670

cluster xl start time after reboot

3670

inside

Collaborator

2511

Installing NIC drivers manually

2917

inside

Advisor

2207

Cloudformation template for SmartEvent?

2207

inside

Advisor

8411

Possible to use GAIA as dhcp server and vlan on one ethernet port?

8411

inside

Contributor

8543

Threat Extraction: Link to original file

3844

inside

Advisor

6003

Removing old R77.20 and R77.10 software on management server before upgrading from Checkpoint R77.30 to R80.10

5064

inside

Explorer

4397

Checkpoint WebUI http 404 error and htdocs directory missing

4397

inside

Legend

1988

Anyone have experience with 40Gbit fiber cards for 15000/23000?

1988

inside

Advisor

1896

Dashboard cannot be initiate after R77.30 add-on

1896

inside

Explorer

1692

Hi Checkmates, Can some one provide me a templates or procedure for Power on Self Test (POST) on Checkpoint appliances.

1692

inside

Leader

5302

Migrating Checkpoint management station

2548

inside

Contributor

2385

Embedded Office.com links in .PDF's

2385

Solved

inside

Contributor

4818

ATRG Threat Emulation VNC section

4818

inside

Champion

3403

R80.10 Gaia incorrect license information in CPUSE

3403

inside

Advisor

1521

Connecting to vSEC in AWS using WinSCP

3709

inside

Participant

6355

Sandblast average emulation time?

6355

inside

Explorer

3288

ClusterXL does can not connect to the ISP Gateway

3288

inside

Admin

18221

Check Point Threat Prevention Packet Flow and Architecture

18221

inside

Contributor

10594

How to configure External interface in Clusterxl

10594

inside

Explorer

2731

Migrate standalone 4800 cluster to separate management server

3575

inside

Explorer

5289

wetransfer.com - Uploading files

5289

inside

Explorer

13960

Command to show HW Accessories' serial numbers (R77.30)?

13960

inside

Employee

6401

Activating NGTX (Cloud SandBox) on your gateway

6401

Solved

inside

Contributor

6357

Sandboxing http/https traffics with web proxy(bluecoat) in place

6357

inside

Employee Alumnus

1842

Join Us For An Informative Luncheon!

1842

inside

Contributor

5307

NAT with ECMP / multiple default routes

5307

Solved

inside

Advisor

5517

Sandblast appliance installation

5517

Solved

inside

Advisor

5168

Why the cluster interfaces are showing as "Partially UP"

5910

inside

Employee

3716

5900 appliance core split between CoreXL and SXL

3716

inside

Participant

1742

HBA card for Mouting new volume

1742

inside

Explorer

7316

Deploying 1450 Appliances to Branch Offices

1032

Solved

inside

Participant

2915

Standalone to Full HA Member (VLANs, Cluster on different subnets, VPN, etc involved)

7926

Solved

inside

Explorer

10837

Checkpoint gateway firewall Backup through smart console

59588

inside

Explorer

2165

Checkpoint 5600 v80.10. Internet Surfing Issues

2165

Solved

inside

Contributor

6344

Directing specific ports traffic to second ISP interface

6344

inside

Contributor

3866

June’s Most Wanted Malware: RoughTed Malvertising Campaign Impacts 28% of Organizations

1350

Solved

inside

Contributor

3181

Is there a way to configure a Standalone machine (Security Gateway + Security Management) to become a part of a HA Legacy Mode Cluster?

3181

inside

Contributor

4814

R80.10 threat extraction high cpu usage

4814

inside

Contributor

4256

http threat emulation between security gateway and on premise sand blast appliance is not working

4256

inside

Contributor

3988

Emulation not working on TE 2000X

3988

Solved

inside

Participant

3774

What is MTBF and MTTR value for security gateway 5100

3774

inside

Explorer

2272

Gaia R77.30 on Esxi Host issue with https access

2272

inside

Leader

4002

Updates over internet for remote agents

4002

inside

Participant

3576

What is the best option to integrate the websense and chekpoint certificates for Emulation HTTPS?

3576

inside

Employee Alumnus

2757

Anti-Ransomware Demo: Spanish Version

2757

inside

Employee Alumnus

1122

Add a process to be monitored by cpwatchdog

8231

inside

Contributor

2098

any sources scanning and attack to my network

2098

inside

Advisor

2473

Anti-Ransomware: Solution Brief & Demo

2720

inside

Participant

2284

Hello, good day, My question is oriented to the Antiramsomware module for the solution of Sandblast Agent, there would be some conflict with a solution like PGP at the time when a file is encrypted by means of PGP, that would happen with the Antiramsomwa

2284

inside

Employee Alumnus

1457

Securing the “thing” is not the answer ...

1457

Solved

1196

Solved

inside

Admin

2481

check point 12000 newly installation

2942

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Wed 16 Jul 2025 @ 04:00 PM (CEST)

Operationalizing Threat Intelligence, Part II: Threat Hunting & Incident Response

Virtual

Wed 16 Jul 2025 @ 11:00 AM (EDT)

TechTalk: Open Garden In Action: Threat Intelligence

Virtual

Tue 22 Jul 2025 @ 10:00 AM (CEST)

Cyber Security Training in the Era of AI Threats: Managed SmartAwareness Explained - EMEA

Virtual

Tue 22 Jul 2025 @ 05:00 PM (CEST)

Cyber Security Training in the Era of AI Threats: Managed SmartAwareness Explained - AMER

Virtual

Thu 31 Jul 2025 @ 10:00 AM (CEST)

CloudGuard Network Security for Nutanix - Full Deployment with Tenant & Transit VPC - EMEA/APAC

Virtual

Thu 31 Jul 2025 @ 05:00 PM (CEST)

CloudGuard Network Security for Nutanix - Full Deployment with Tenant & Transit VPC - AMER/EMEA

Virtual

Wed 16 Jul 2025 @ 04:00 PM (CEST)

Operationalizing Threat Intelligence, Part II: Threat Hunting & Incident Response

Virtual

Wed 16 Jul 2025 @ 11:00 AM (EDT)

TechTalk: Open Garden In Action: Threat Intelligence

Virtual

Tue 22 Jul 2025 @ 10:00 AM (CEST)

Cyber Security Training in the Era of AI Threats: Managed SmartAwareness Explained - EMEA

Virtual

Tue 22 Jul 2025 @ 05:00 PM (CEST)

Cyber Security Training in the Era of AI Threats: Managed SmartAwareness Explained - AMER

Virtual

Thu 31 Jul 2025 @ 10:00 AM (CEST)

CloudGuard Network Security for Nutanix - Full Deployment with Tenant & Transit VPC - EMEA/APAC

Virtual

Thu 31 Jul 2025 @ 05:00 PM (CEST)

CloudGuard Network Security for Nutanix - Full Deployment with Tenant & Transit VPC - AMER/EMEA

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

CheckMates Events

Are you a member of CheckMates?