Security Gateways

MVP 2026: Submissions
Are Now Open!

More details here

What's New in R82.10?
10 December @ 5pm CET / 11am ET

Announcing Quantum R82.10!

Learn More

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
Maestro Madness

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Explorer

399

Check Point allows HTTP/HTTPS without rule

399

inside

Leader

399

Identity Awarenes - Identity Collector and ISE group filters (regex)

399

inside

Participant

399

Switch configuration for ClusterXL using OSPF

399

inside

Admin

399

Tips and Tricks 2025 #6 - Best Practices for Infinity Portal Identity and Access Management

399

inside

MVP Gold

399

LDAP connections are not closed and accumulating on the gateway

399

inside

Advisor

399

domain object and updatable object behavior

399

inside

Advisor

399

simple question about 3900 and 82.10 on those ?

398

Solved

inside

MVP Silver

398

ElasticXL and VSNext CoreXL question

398

Solved

inside

Explorer

398

Firewall Decom: Investigating Interface Traffic

398

Solved

inside

Participant

384

Problem with creating LDAP Account Unit

384

inside

Explorer

356

Excluding traffic from VPN with Policy based routing

356

inside

Admin

352

APAC Deep Dive Troubleshooting 101 September 2025 Video and Slides

352

inside

Participant

352

Detected Sweep Scan originating from source: internal server - destination: empty

352

inside

Advisor

349

Memory usage on 9000 series appliances

349

inside

Explorer

349

ElasticXL Bond/Aggregate Behavior

349

inside

Explorer

346

RADIUS Authentication via Non-Mgmt Interface

337

inside

Collaborator

336

Capsule Workspace and SSL/TLS ciphers

336

inside

MVP Gold

332

question regarding limitation of Lightspeed 100G interfaces and enabling UPPAK

332

Solved

inside

Contributor

327

Export / Import Configuration of existing GWs to new appliances

318

inside

MVP Gold CHKP

314

Hands-on HTTPS Inspection (Oct'25)

314

inside

Explorer

313

Blocking addresses using a link with a list of malicious IP addresses according to sk103154

310

Solved

inside

Explorer

309

How to change path in a Scheduled system backup?

309

Solved

inside

MVP Platinum

307

Port TCP 264 displays hostname and domain name in the port scan.

304

Solved

inside

Contributor

301

In a cluster environment, is it possible to make the snmp daemon listen on a VIP ?

301

Solved

inside

Advisor

301

Is it possible to enable SSH on Security Gateway during initial setup?"

301

inside

MVP Silver

301

Possible attacks in a VSX environment

301

inside

Participant

300

Site to Site VPN Check Point to Azure

300

inside

Advisor

300

Constant updates on PIM on GaiaOS article

300

Solved

inside

Advisor

300

Warning about topology when installing a policy with the Internet object

300

inside

Participant

300

Threat Emulation failure "Gzip exceeded maximum decompression ratio"

300

inside

Participant

300

Using Cluster Object in NAT rules

300

inside

Explorer

300

Guidance Needed: R82 T34 ClusterXL Bridge Mode Causing Loops & Crashes

300

inside

MVP Platinum

300

Tip for case where adding so many wildcards/fqdns does not work in the policy

300

inside

Collaborator

300

Checkpoint Active-Active Traffic Handling

300

inside

Participant

300

Adding IDC account to protected users group

300

inside

Contributor

300

ESP packets use ISP router MAC instead of ISP HSRP MAC

300

Solved

inside

Collaborator

299

Redundant/Backup IPSEC VPN Options R81.20

299

Solved

inside

Contributor

299

What could be the impacts if, in the Gateway platform field, we select the wrong hardware type ?

299

Solved

inside

MVP Silver

299

REMOVE WEAK CIPHER FROM TLS1.2

299

Solved

inside

Contributor

299

Install Certificate on firewall

299

Solved

inside

Advisor

299

What does the priority field in Signature Tool (ACST) do?

299

inside

Contributor

299

unable to activate license with new management ip for quantum gateways (security group)

299

Solved

inside

Advisor

299

A Thought about the DHCP server on the gateway

299

Solved

inside

Collaborator

299

Failed to read certificate from database after enabling/disabling IPSec VPN blade (centrally managed

299

inside

MVP Gold CHKP

299

Hands-On Quantum Network Firewall as Web Proxy - Proxy Chaining (Oct'25)

299

Solved

inside

Participant

299

BGP Route imports, Route filter vs Route maps?

299

Solved

inside

Collaborator

299

About VSX support on 3900 series

299

Solved

inside

Explorer

299

Implementing HTTPS Inspection in a Multi-Tenant VSX Setup — What’s the Industry Standard?

299

Solved

inside

Contributor

299

Anti-Spoofing on VTI interfaces

299

Solved

inside

Explorer

299

AAAA (IPv6) DNS requests control

299

Solved

inside

Advisor

294

What System TLS Configuration do?

294

inside

Contributor

283

Does ElasticXL really require 4 interfaces?

283

inside

Explorer

255

How to configure IPv6 network with existing Check Point IPV4 Network

255

inside

Participant

254

Hands-On Known Threat Prevention (Oct'25)

246

inside

Explorer

245

Connect single quantum gateway to redundant core switches

245

inside

Explorer

237

IPSec VPN - Multiple level chain of trust certificate

237

inside

Participant

232

RVPN Not Working on Active-Active ElasticXL R82

232

Solved

inside

Explorer

226

R81.20 snapshot size more than doubled as compared to R80.40

226

Solved

inside

MVP Silver

225

VPN management in CLI and Smartview in latest versions

225

inside

Collaborator

225

Change cluster interface to private and required interfaces count didn't change

225

inside

Advisor

218

SSL Inbound Inspection on IMAPS

218

inside

MVP Gold CHKP

216

Hands-on Access and Application Control

216

Solved

inside

Participant

215

enabling MDPS on 3600 or 3900 devices works as expected ?

215

inside

Explorer

215

“Legacy GeoProtection Maximum Ranges” alert

208

Solved

inside

MVP Silver

200

Setting up ClusterXL in different DCs

200

Solved

inside

Participant

200

Lightspeed acceleration disabled

200

inside

Participant

200

VPN Site to Site with Third Party Gateway and using DynDNS

200

Solved

inside

Collaborator

200

IDM integration with Check Point

200

inside

MVP Gold CHKP

200

Hands-On Unknown Threat Prevention (Oct'25)

200

Solved

inside

Explorer

200

replacing the SSH connection port

200

inside

Participant

200

MEP VPN Gateway: force specific client to connect to backup gateway

200

inside

Employee

199

Check Point Quantum Force 3980 Unboxing

199

Solved

inside

Advisor

199

Security Gateways and NTP - Implied rule?

199

inside

Participant

199

Whitelisted AWS domains still blocked

199

Solved

inside

Participant

199

Quantum Spark 2500 series - HA Pair. Manager required?

199

inside

Explorer

199

enable asynmetric routing firewall checkpoint

199

Solved

inside

MVP Platinum

199

Tech Tip - Dynamic Routing: Default Originate

199

Solved

inside

Explorer

199

PPPoE is not supported with SecureXL User Space mode on 3950, R82.10?

199

Solved

inside

Explorer

199

unable to advertise network to peer via iBGP

199

inside

Collaborator

199

Logging Server crashing after calling Web Smartviewer

199

inside

MVP Gold CHKP

199

Hands-on Adjusting Threat Prevention to Your Needs (Oct'25)

199

inside

Explorer

199

Cisco Jabber External Connectivity Issue After Migrating from ASA to Check Point (Solved)

199

inside

Contributor

199

MAB portal File Share App web-interface customization

199

inside

MVP Gold

198

"Multiple obects have the same IP address" with no duplicate objects

198

Solved

inside

Collaborator

198

Certificate based S2S with Palo Alto

198

inside

Contributor

198

communication between mplane and dplane is not working

194

Solved

inside

Contributor

191

How to migrate a Standalone 6200 unit to a VM SMS server?

191

inside

Employee

185

Check Point Quantum Force 3920 Unboxing

185

inside

Participant

165

S1C managed SG9100-Cluster Upgrade R81.20 JHFT105 > R82JHFT39 / best practise, hints recommendations

164

inside

Contributor

164

How are "Limit" objects enforced on gateway?

138

inside

Participant

115

Site-2-Site VPN with Cisco Cloud (Cisco Secure Acccess)

115

inside

Contributor

114

NAT Rules not matching with new R82 gateway in place.

106

inside

Collaborator

105

License Sync issue with MGMT Box

105

Solved

inside

Explorer

103

Will R82.10 ship with a ClusterXL to ElasticXL Conversion Tool?

inside

Contributor

Connectivity down between a 9100 gateway and a cisco 4500 module

inside

Explorer

Application layer showing "Missing cleanup rule - Unmatched traffic will be accepted and not logged"

Solved

inside

Explorer

Office 365 Third Party Domains

inside

MVP Platinum CHKP

Tech Tip - Dynamic Routing: BFD

inside

MVP Platinum CHKP

Tech Tip - Dynamic Routing: Router-ID

Solved

inside

Explorer

ISP Redundancy (two links) and a new one independent

inside

Contributor

IPsec tunnel use private IP to negotia

inside

MVP Platinum CHKP

Tech Tip - Dynamic Routing: Protocol Rank

inside

Explorer

Modifying Public Interface Topology

inside

Employee

Quantum Force – The Next Generation of Branch Office Security

inside

Explorer

Which Object Needed for Office 365 Deployment?

inside

Participant

Forwarding specific traffic from a particular cluster member(unicast LS)

inside

Explorer

VSX: SCP backup being blocked by non-existing rule 705 ???

inside

MVP Silver

Intermittency in P2 of an S2S VPN

inside

Explorer

Quantum Force 3980 – High-Performance Security for Demanding Branch and Mid-Size Environments

inside

Explorer

After upgrade R82 - RTP (VOIP) not working, with secureXL enabled

inside

Participant

2902

Smart-1 appliances new line and Fiber Channel SAN Card support

2902

inside

Champion

6296

SSH vulnerability detected, please verify.

6296

Solved

inside

Contributor

2719

Can I replaced a tradicional Antivirus by Anti-Virus blade?

2719

inside

Participant

13209

Factory reset button on 2200 appliance

13209

Solved

inside

Explorer

10537

Design of new Smart-1 appliances

1839

Solved

inside

Explorer

4881

Changing management IP - changing appliance SIC

9690

inside

Explorer

4094

Migrate configuration from an old device (R77.30) to a new device with R80.10

4094

inside

Explorer

2763

Import R77.30 configuration into new R80.10 Gateway

3193

inside

Advisor

5270

Is Show configuration output oreder is correct

5270

inside

Explorer

3347

Hardware upgrade - 2200 to 4200

3347

inside

Participant

2034

Question about Cluster fail-over and connections

2034

inside

Collaborator

2138

Users are able to ping the disabled/disconnected interfaces IP-Address

2138

inside

Explorer

3516

STIG - Technical Implementation Guidelines

5793

inside

Explorer

3296

SSL inspection performance question on 15K cluster.

13753

inside

Collaborator

2364

ISP Redundancy for 2 ISP links

2580

Solved

inside

Collaborator

3999

Intel CPU Bug in Check Point appliances?

3999

inside

Advisor

5584

Not all images for emulation on SandBlast TE1000X

5584

inside

Employee

6725

Blink - Full gateway installation in 5 minutes

6725

inside

Collaborator

3322

Is R80.10 Endpoint is supported for Sandblast Agent

3322

inside

Advisor

2709

Why status is 0 in output of cpstat -f sensors os ?

4152

inside

Contributor

2884

Migration of Standalone HA to new set of hardwares in distributed set up

2884

Solved

inside

Explorer

11189

High CPU usage on security gateway after R80.10 Fresh install

5024

inside

Explorer

1645

SNMP Issue -- i have added trap2sink ip community at /etc/snmp/snmpd.conf but still snmp is not happenning, can you help me in configuring snmp on R71.20

1645

inside

Explorer

3778

Disable Web Service on Outside Interface

3778

inside

Explorer

4640

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

27795

Solved

inside

Participant

4391

How to calculate IPS and Antibot throghput

4391

inside

Participant

1939

Office Mode IP requiring route to DG

1939

Solved

inside

Collaborator

4042

Malicious file sent through Sandblast

4983

inside

Participant

4045

CLI slow response on new appliances

4045

inside

Advisor

21917

New Early Availability Program - New Gaia OS for Security Management Server

3713

inside

Explorer

2018

Issues running SPLAT and Gaia on 2 appliances

2018

inside

Participant

5347

Adding 2nd HDD to VM for upgradation

5347

inside

Advisor

3163

R80.10 advanced isomorphic for open servers?

3163

inside

Champion

8380

How to determine uptime intervals from gateway logs?

8380

inside

Explorer

1407

BL460 G9 blades compatible with 560SFP

1407

inside

Explorer

3911

cluster xl start time after reboot

3911

inside

Collaborator

2719

Installing NIC drivers manually

3155

inside

Advisor

2485

Cloudformation template for SmartEvent?

2485

inside

Advisor

8873

Possible to use GAIA as dhcp server and vlan on one ethernet port?

8873

inside

Contributor

9053

Threat Extraction: Link to original file

4073

inside

Advisor

6795

Removing old R77.20 and R77.10 software on management server before upgrading from Checkpoint R77.30 to R80.10

5420

inside

Explorer

5835

Checkpoint WebUI http 404 error and htdocs directory missing

5835

inside

MVP Gold

2193

Anyone have experience with 40Gbit fiber cards for 15000/23000?

2193

inside

Advisor

2061

Dashboard cannot be initiate after R77.30 add-on

2061

inside

Explorer

1867

Hi Checkmates, Can some one provide me a templates or procedure for Power on Self Test (POST) on Checkpoint appliances.

1867

inside

MVP Gold

5517

Migrating Checkpoint management station

2727

inside

Contributor

2583

Embedded Office.com links in .PDF's

2583

Solved

inside

Contributor

5148

ATRG Threat Emulation VNC section

5148

inside

Champion

3560

R80.10 Gaia incorrect license information in CPUSE

3560

inside

Advisor

1681

Connecting to vSEC in AWS using WinSCP

4154

inside

Participant

6817

Sandblast average emulation time?

6817

inside

Explorer

3569

ClusterXL does can not connect to the ISP Gateway

3569

inside

Admin

18842

Check Point Threat Prevention Packet Flow and Architecture

18842

inside

Contributor

11282

How to configure External interface in Clusterxl

11282

inside

Explorer

3017

Migrate standalone 4800 cluster to separate management server

3780

inside

Explorer

5657

wetransfer.com - Uploading files

5657

inside

Explorer

14482

Command to show HW Accessories' serial numbers (R77.30)?

14482

inside

Employee

6985

Activating NGTX (Cloud SandBox) on your gateway

6985

Solved

inside

Contributor

6860

Sandboxing http/https traffics with web proxy(bluecoat) in place

6860

inside

Employee Alumnus

1998

Join Us For An Informative Luncheon!

1998

inside

Contributor

5817

NAT with ECMP / multiple default routes

5817

Solved

inside

Advisor

5826

Sandblast appliance installation

5826

Solved

inside

Advisor

5404

Why the cluster interfaces are showing as "Partially UP"

6188

inside

MVP Gold CHKP

3971

5900 appliance core split between CoreXL and SXL

3971

inside

Participant

1911

HBA card for Mouting new volume

1911

inside

Explorer

7515

Deploying 1450 Appliances to Branch Offices

1132

Solved

inside

Participant

3320

Standalone to Full HA Member (VLANs, Cluster on different subnets, VPN, etc involved)

8526

Solved

inside

Explorer

11465

Checkpoint gateway firewall Backup through smart console

60585

inside

Explorer

2352

Checkpoint 5600 v80.10. Internet Surfing Issues

2352

Solved

inside

Contributor

6754

Directing specific ports traffic to second ISP interface

6754

inside

Contributor

4064

June’s Most Wanted Malware: RoughTed Malvertising Campaign Impacts 28% of Organizations

1484

Solved

inside

Contributor

3448

Is there a way to configure a Standalone machine (Security Gateway + Security Management) to become a part of a HA Legacy Mode Cluster?

3448

inside

Contributor

5196

R80.10 threat extraction high cpu usage

5196

inside

Contributor

4581

http threat emulation between security gateway and on premise sand blast appliance is not working

4581

inside

Contributor

4290

Emulation not working on TE 2000X

4290

Solved

inside

Participant

4275

What is MTBF and MTTR value for security gateway 5100

4275

inside

Explorer

2501

Gaia R77.30 on Esxi Host issue with https access

2501

inside

MVP Gold

4306

Updates over internet for remote agents

4306

inside

Participant

3887

What is the best option to integrate the websense and chekpoint certificates for Emulation HTTPS?

3887

inside

Employee Alumnus

2914

Anti-Ransomware Demo: Spanish Version

2914

inside

Employee Alumnus

1252

Add a process to be monitored by cpwatchdog

8951

inside

Contributor

2330

any sources scanning and attack to my network

2330

inside

Advisor

2662

Anti-Ransomware: Solution Brief & Demo

2873

inside

Participant

2495

Hello, good day, My question is oriented to the Antiramsomware module for the solution of Sandblast Agent, there would be some conflict with a solution like PGP at the time when a file is encrypted by means of PGP, that would happen with the Antiramsomwa

2495

inside

Employee Alumnus

1581

Securing the “thing” is not the answer ...

1581

Solved

inside

Contributor

11264

Hardware: How to determine the CK of an SFP?

11264

inside

Employee Alumnus

2029

Surviving the Ransomware Plague

2029

inside

Employee Alumnus

2157

WannaCry stopped by Check Point Anti-Ransomware

2157

inside

Admin

4433

WannaCry- Stopped with Check Point SandBlast Agent

4433

inside

Employee Alumnus

1460

Build your own cyber crime empire #mundohackerday recodring

1460

inside

Employee Alumnus

2198

Email attachment still remains major source of zero-day attacks

2198

inside

Admin

1154

SandBlast for SMB applainces managed by R77.30 Security Management Server

1154

inside

Admin

1668

Check Point response to Intel Elevation of Privilege vulnerability

1668

inside

Admin

4327

Description of Incident Status in SandBlast Agent Forensics

4327

inside

Employee Alumnus

1426

Check Point Anti-Ransomware: Webcast and Demo

1426

inside

Admin

1567

Files are randomly not getting scanned and emulated by Threat Emulation

1567

inside

Employee Alumnus

1822

Power of SandBlast Agent Forensics

1822

inside

Admin

1459

How do Configure a SandBlast Appliance by FDQN Instead of IP Address

1459

inside

Admin

1673

Where does SandBlast Agent for Browsers store original files?

1673

inside

Admin

2509

What's The Latest Version of the Threat Emulation Engine?

2509

inside

Admin

1300

Sandblast supports emulating files on WIN10 (+64BIT) now

1300

Solved

inside

Admin

2659

check point 12000 newly installation

3191

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 09 Dec 2025 @ 09:00 AM (CET)

Paris, FR: Hands-On CloudGuard Workshops

Virtual

Wed 10 Dec 2025 @ 11:00 AM (EST)

TechTalk: What's New in R82.10

Virtual

Thu 11 Dec 2025 @ 11:00 AM (EST)

Tips and Tricks 2025 #17: MCP Servers

Virtual

Thu 11 Dec 2025 @ 03:00 PM (EST)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Fri 12 Dec 2025 @ 10:00 AM (CET)

Check Mates Live Netherlands: #41 AI & Multi Context Protocol

Virtual

Tue 16 Dec 2025 @ 05:00 PM (CET)

Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!

Virtual

Wed 10 Dec 2025 @ 11:00 AM (EST)

TechTalk: What's New in R82.10

Virtual

Thu 11 Dec 2025 @ 11:00 AM (EST)

Tips and Tricks 2025 #17: MCP Servers

Virtual

Thu 11 Dec 2025 @ 03:00 PM (EST)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Fri 12 Dec 2025 @ 10:00 AM (CET)

Check Mates Live Netherlands: #41 AI & Multi Context Protocol

Virtual

Tue 16 Dec 2025 @ 05:00 PM (CET)

Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!

Virtual

Tue 16 Dec 2025 @ 03:00 PM (EST)

Americas Deep Dive: HTTPS Inspection Best Practices

In-Person

Tue 09 Dec 2025 @ 09:00 AM (CET)

Paris, FR: Hands-On CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?