Security Gateways

CheckMates Fest 2026
Join the Celebration!

AI Security Masters
E1: How AI is Reshaping Our World

MVP 2026: Submissions
Are Now Open!

More details here

What's New in R82.10?

Watch Now

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
R82.10 and Rationalizing Multi Vendor Security Policies

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Contributor

408

BGP Route imports, Route filter vs Route maps?

408

Solved

inside

Advisor

407

Any specific reason that routed daemon is 32-bit in a 64-bit system?

407

Solved

inside

Explorer

405

Export / Import Configuration of existing GWs to new appliances

404

Solved

inside

Contributor

403

Check Point Quantum Force 3980 Unboxing

400

Solved

inside

MVP Platinum

400

In a cluster environment, is it possible to make the snmp daemon listen on a VIP ?

400

Solved

inside

Collaborator

400

Failed to read certificate from database after enabling/disabling IPSec VPN blade (centrally managed

400

inside

Participant

400

Threat Emulation failure "Gzip exceeded maximum decompression ratio"

400

Solved

inside

Explorer

400

How to change path in a Scheduled system backup?

400

inside

Explorer

400

Upgrade standalone FW from R81 to R82 failed

399

inside

Contributor

399

Site to Site VPN Check Point to Azure

399

Solved

inside

Contributor

399

VPN Site to Site with Third Party Gateway and using DynDNS

399

Solved

inside

Contributor

399

REMOVE WEAK CIPHER FROM TLS1.2

399

inside

Advisor

399

Constant updates on PIM on GaiaOS article

399

Solved

inside

Advisor

399

What does the priority field in Signature Tool (ACST) do?

399

inside

Contributor

399

unable to activate license with new management ip for quantum gateways (security group)

399

Solved

inside

Advisor

399

Is it possible to enable SSH on Security Gateway during initial setup?"

399

Solved

inside

MVP Silver

399

A Thought about the DHCP server on the gateway

399

Solved

inside

Participant

399

Using Cluster Object in NAT rules

399

inside

Participant

399

Detected Sweep Scan originating from source: internal server - destination: empty

399

inside

MVP Platinum

399

Tip for case where adding so many wildcards/fqdns does not work in the policy

399

inside

Collaborator

399

Capsule Workspace and SSL/TLS ciphers

399

inside

Explorer

399

Excluding traffic from VPN with Policy based routing

399

inside

Explorer

398

Site-to-Site BGP VPN to Azure on Check Point VSX (R81.20) – step-by-step guidance needed

398

Solved

inside

Explorer

398

What could be the impacts if, in the Gateway platform field, we select the wrong hardware type ?

398

inside

MVP Gold CHKP

387

Hands-on HTTPS Inspection (Oct'25)

387

inside

Explorer

382

ElasticXL Bond/Aggregate Behavior

382

inside

Explorer

378

Warning about topology when installing a policy with the Internet object

377

inside

Admin

375

APAC Deep Dive Troubleshooting 101 September 2025 Video and Slides

375

Solved

inside

MVP Platinum

364

RADIUS Authentication via Non-Mgmt Interface

358

inside

MVP Gold

354

question regarding limitation of Lightspeed 100G interfaces and enabling UPPAK

354

inside

Collaborator

351

Anti-Spoofing on VTI interfaces

351

inside

Contributor

349

Port TCP 264 displays hostname and domain name in the port scan.

349

Solved

inside

Contributor

347

Install Certificate on firewall

347

Solved

inside

Participant

342

Implementing HTTPS Inspection in a Multi-Tenant VSX Setup — What’s the Industry Standard?

342

Solved

inside

Collaborator

336

About VSX support on 3900 series

336

inside

Explorer

334

Blocking addresses using a link with a list of malicious IP addresses according to sk103154

334

Solved

inside

Advisor

333

Possible attacks in a VSX environment

332

Solved

inside

Explorer

328

AAAA (IPv6) DNS requests control

328

inside

Explorer

327

Guidance Needed: R82 T34 ClusterXL Bridge Mode Causing Loops & Crashes

327

inside

Collaborator

326

Checkpoint Active-Active Traffic Handling

326

inside

Participant

318

Adding IDC account to protected users group

318

inside

Contributor

307

ESP packets use ISP router MAC instead of ISP HSRP MAC

307

inside

Participant

306

RVPN Not Working on Active-Active ElasticXL R82

306

Solved

inside

Contributor

306

Hands-On Quantum Network Firewall as Web Proxy - Proxy Chaining (Oct'25)

305

Solved

inside

Participant

301

SIC re-establishment for VSX cluster after SMS migration from R81.20 to R82

301

Solved

inside

Collaborator

301

“Legacy GeoProtection Maximum Ranges” alert

301

inside

Participant

300

R81.20 Browser-Based Authentication with RADIUS – “Bad username or password”

300

Solved

inside

Collaborator

300

Intermittency in P2 of an S2S VPN

300

inside

MVP Platinum CHKP

300

Tech Tip - Dynamic Routing: Default Originate

300

Solved

inside

Contributor

300

"Multiple obects have the same IP address" with no duplicate objects

300

inside

Contributor

300

Change cluster interface to private and required interfaces count didn't change

300

inside

Explorer

300

How to configure IPv6 network with existing Check Point IPV4 Network

300

Solved

inside

Contributor

299

Did anyone else suffer from recent CPDIAG script update causing their Gateway to lock? - SK184446

299

Solved

inside

MVP Platinum

299

ISP redundancy/ PBR /sd-wan question

299

inside

Explorer

299

VSX: SCP backup being blocked by non-existing rule 705 ???

299

inside

Employee

299

Check Point Quantum Force 3920 Unboxing

299

Solved

inside

Participant

299

Quantum Spark 2500 series - HA Pair. Manager required?

299

inside

Explorer

299

enable asynmetric routing firewall checkpoint

299

Solved

inside

Explorer

299

How are "Limit" objects enforced on gateway?

299

Solved

inside

Collaborator

299

Hands-On Known Threat Prevention (Oct'25)

299

inside

MVP Gold CHKP

299

Hands-on Access and Application Control

299

Solved

inside

Contributor

299

replacing the SSH connection port

299

inside

Explorer

299

IPSec VPN - Multiple level chain of trust certificate

299

inside

Advisor

299

SSL Inbound Inspection on IMAPS

299

inside

Collaborator

298

License Sync issue with MGMT Box

298

inside

Explorer

295

3950 - Host Access doesn't work for SSH

294

inside

Explorer

273

Connect single quantum gateway to redundant core switches

273

Solved

inside

Collaborator

262

Certificate based S2S with Palo Alto

262

Solved

inside

Explorer

262

R81.20 snapshot size more than doubled as compared to R80.40

262

inside

Explorer

260

enabling MDPS on 3600 or 3900 devices works as expected ?

246

inside

MVP Gold CHKP

240

Hands-On Unknown Threat Prevention (Oct'25)

240

Solved

inside

Advisor

238

Security Gateways and NTP - Implied rule?

238

Solved

inside

Participant

235

communication between mplane and dplane is not working

235

inside

Collaborator

231

Logging Server crashing after calling Web Smartviewer

231

inside

Contributor

229

MAB portal File Share App web-interface customization

229

Solved

inside

Explorer

228

PPPoE is not supported with SecureXL User Space mode on 3950, R82.10?

228

inside

MVP Silver

223

IDM integration with Check Point

223

inside

MVP Gold CHKP

219

Hands-on Adjusting Threat Prevention to Your Needs (Oct'25)

219

inside

Participant

218

MEP VPN Gateway: force specific client to connect to backup gateway

218

inside

Explorer

216

unable to advertise network to peer via iBGP

216

inside

Contributor

214

Connectivity down between a 9100 gateway and a cisco 4500 module

214

inside

Explorer

211

Cisco Jabber External Connectivity Issue After Migrating from ASA to Check Point (Solved)

211

inside

MVP Gold

208

Dedicated Sync Interfaces as an internal or external interface

201

Solved

inside

MVP Silver

201

Office 365 Third Party Domains

201

inside

Contributor

200

mgmt ports and main Cluster VIP

200

inside

Explorer

200

Questions about ElasticXL in production real customer experience

200

Solved

inside

Advisor

200

Domain Controllers not detected by Identity Collector

200

inside

Participant

200

After upgrade R82 - RTP (VOIP) not working, with secureXL enabled

200

inside

Collaborator

200

Will R82.10 ship with a ClusterXL to ElasticXL Conversion Tool?

200

inside

Participant

200

FW-rule matches although destination is not part of mentioned FW-group

199

inside

Explorer

199

Application layer showing "Missing cleanup rule - Unmatched traffic will be accepted and not logged"

199

inside

Contributor

199

IPsec tunnel use private IP to negotia

199

inside

MVP Platinum CHKP

199

Tech Tip - Dynamic Routing: BFD

199

inside

Explorer

199

S1C managed SG9100-Cluster Upgrade R81.20 JHFT105 > R82JHFT39 / best practise, hints recommendations

199

inside

Contributor

199

Modifying Public Interface Topology

198

Solved

inside

Explorer

156

ISP Redundancy (two links) and a new one independent

156

inside

MVP Platinum CHKP

138

Tech Tip - Dynamic Routing: Protocol Rank

138

inside

MVP Silver

125

SAML Auth failure after upgrade to R82.10

124

inside

Contributor

114

Which Object Needed for Office 365 Deployment?

111

inside

Participant

101

Forwarding specific traffic from a particular cluster member(unicast LS)

101

inside

MVP Platinum

100

Quantum Force 3920 – Seamless Onboarding for Secure Branch Deployments

100

Solved

inside

Explorer

Install database vs install policy

inside

MVP Platinum

Routing check/tip when moving config from one fw to another

inside

Employee

Quantum Force 3980 Branch Office Security On-Boarding

inside

Employee

Quantum Force 3980 – High-Performance Security for Demanding Branch and Mid-Size Environments

inside

Advisor

Problem with IPSEC tunnel and source NAT

7454

inside

Participant

2961

Smart-1 appliances new line and Fiber Channel SAN Card support

2961

inside

Champion

6413

SSH vulnerability detected, please verify.

6413

Solved

inside

Contributor

2778

Can I replaced a tradicional Antivirus by Anti-Virus blade?

2778

inside

Participant

13328

Factory reset button on 2200 appliance

13328

Solved

inside

Explorer

10710

Design of new Smart-1 appliances

1874

Solved

inside

Explorer

5006

Changing management IP - changing appliance SIC

9793

inside

Explorer

4149

Migrate configuration from an old device (R77.30) to a new device with R80.10

4149

inside

Explorer

2815

Import R77.30 configuration into new R80.10 Gateway

3255

inside

Advisor

5368

Is Show configuration output oreder is correct

5368

inside

Explorer

3397

Hardware upgrade - 2200 to 4200

3397

inside

Participant

2075

Question about Cluster fail-over and connections

2075

inside

Collaborator

2184

Users are able to ping the disabled/disconnected interfaces IP-Address

2184

inside

Explorer

3573

STIG - Technical Implementation Guidelines

5904

inside

Explorer

3351

SSL inspection performance question on 15K cluster.

14140

inside

Collaborator

2423

ISP Redundancy for 2 ISP links

2616

Solved

inside

Collaborator

4064

Intel CPU Bug in Check Point appliances?

4064

inside

Advisor

5669

Not all images for emulation on SandBlast TE1000X

5669

inside

Employee

6798

Blink - Full gateway installation in 5 minutes

6798

inside

Collaborator

3390

Is R80.10 Endpoint is supported for Sandblast Agent

3390

inside

Advisor

2753

Why status is 0 in output of cpstat -f sensors os ?

4239

inside

Contributor

2937

Migration of Standalone HA to new set of hardwares in distributed set up

2937

Solved

inside

Explorer

11278

High CPU usage on security gateway after R80.10 Fresh install

5121

inside

Explorer

1674

SNMP Issue -- i have added trap2sink ip community at /etc/snmp/snmpd.conf but still snmp is not happenning, can you help me in configuring snmp on R71.20

1674

inside

Explorer

3835

Disable Web Service on Outside Interface

3835

inside

Explorer

4693

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

28215

Solved

inside

Participant

4453

How to calculate IPS and Antibot throghput

4453

inside

Participant

1986

Office Mode IP requiring route to DG

1986

Solved

inside

Collaborator

4129

Malicious file sent through Sandblast

5090

inside

Participant

4095

CLI slow response on new appliances

4095

inside

Advisor

22016

New Early Availability Program - New Gaia OS for Security Management Server

3755

inside

Explorer

2073

Issues running SPLAT and Gaia on 2 appliances

2073

inside

Participant

5479

Adding 2nd HDD to VM for upgradation

5479

inside

Advisor

3196

R80.10 advanced isomorphic for open servers?

3196

inside

Champion

8506

How to determine uptime intervals from gateway logs?

8506

inside

Explorer

1435

BL460 G9 blades compatible with 560SFP

1435

inside

Explorer

3976

cluster xl start time after reboot

3976

inside

Collaborator

2791

Installing NIC drivers manually

3207

inside

Advisor

2550

Cloudformation template for SmartEvent?

2550

inside

Advisor

8960

Possible to use GAIA as dhcp server and vlan on one ethernet port?

8960

inside

Contributor

9199

Threat Extraction: Link to original file

4134

inside

Advisor

6912

Removing old R77.20 and R77.10 software on management server before upgrading from Checkpoint R77.30 to R80.10

5514

inside

Explorer

5921

Checkpoint WebUI http 404 error and htdocs directory missing

5921

inside

MVP Gold

2240

Anyone have experience with 40Gbit fiber cards for 15000/23000?

2240

inside

Advisor

2094

Dashboard cannot be initiate after R77.30 add-on

2094

inside

Explorer

1905

Hi Checkmates, Can some one provide me a templates or procedure for Power on Self Test (POST) on Checkpoint appliances.

1905

inside

MVP Gold

5561

Migrating Checkpoint management station

2763

inside

Contributor

2634

Embedded Office.com links in .PDF's

2634

Solved

inside

Contributor

5237

ATRG Threat Emulation VNC section

5237

inside

Champion

3608

R80.10 Gaia incorrect license information in CPUSE

3608

inside

Advisor

1735

Connecting to vSEC in AWS using WinSCP

4295

inside

Participant

6926

Sandblast average emulation time?

6926

inside

Explorer

3653

ClusterXL does can not connect to the ISP Gateway

3653

inside

Admin

18980

Check Point Threat Prevention Packet Flow and Architecture

18980

inside

Contributor

11452

How to configure External interface in Clusterxl

11452

inside

Explorer

3090

Migrate standalone 4800 cluster to separate management server

3843

inside

Explorer

5752

wetransfer.com - Uploading files

5752

inside

Explorer

14563

Command to show HW Accessories' serial numbers (R77.30)?

14563

inside

Employee

7151

Activating NGTX (Cloud SandBox) on your gateway

7151

Solved

inside

Contributor

7078

Sandboxing http/https traffics with web proxy(bluecoat) in place

7078

inside

Employee Alumnus

2018

Join Us For An Informative Luncheon!

2018

inside

Contributor

5925

NAT with ECMP / multiple default routes

5925

Solved

inside

Advisor

5907

Sandblast appliance installation

5907

Solved

inside

Advisor

5462

Why the cluster interfaces are showing as "Partially UP"

6264

inside

MVP Gold CHKP

4024

5900 appliance core split between CoreXL and SXL

4024

inside

Participant

1956

HBA card for Mouting new volume

1956

inside

Explorer

7566

Deploying 1450 Appliances to Branch Offices

1153

Solved

inside

Participant

3448

Standalone to Full HA Member (VLANs, Cluster on different subnets, VPN, etc involved)

8668

Solved

inside

Explorer

11630

Checkpoint gateway firewall Backup through smart console

60872

inside

Explorer

2381

Checkpoint 5600 v80.10. Internet Surfing Issues

2381

Solved

inside

Contributor

6854

Directing specific ports traffic to second ISP interface

6854

inside

Contributor

4114

June’s Most Wanted Malware: RoughTed Malvertising Campaign Impacts 28% of Organizations

1517

Solved

inside

Contributor

3520

Is there a way to configure a Standalone machine (Security Gateway + Security Management) to become a part of a HA Legacy Mode Cluster?

3520

inside

Contributor

5311

R80.10 threat extraction high cpu usage

5311

inside

Contributor

4662

http threat emulation between security gateway and on premise sand blast appliance is not working

4662

inside

Contributor

4353

Emulation not working on TE 2000X

4353

Solved

inside

Participant

4375

What is MTBF and MTTR value for security gateway 5100

4375

inside

Explorer

2557

Gaia R77.30 on Esxi Host issue with https access

2557

inside

MVP Gold

4399

Updates over internet for remote agents

4399

inside

Participant

3960

What is the best option to integrate the websense and chekpoint certificates for Emulation HTTPS?

3960

inside

Employee Alumnus

2953

Anti-Ransomware Demo: Spanish Version

2953

inside

Employee Alumnus

1285

Add a process to be monitored by cpwatchdog

9082

inside

Contributor

2375

any sources scanning and attack to my network

2375

inside

Advisor

2709

Anti-Ransomware: Solution Brief & Demo

2908

inside

Participant

2551

Hello, good day, My question is oriented to the Antiramsomware module for the solution of Sandblast Agent, there would be some conflict with a solution like PGP at the time when a file is encrypted by means of PGP, that would happen with the Antiramsomwa

2551

inside

Employee Alumnus

1605

Securing the “thing” is not the answer ...

1605

Solved

inside

Contributor

11406

Hardware: How to determine the CK of an SFP?

11406

inside

Employee Alumnus

2054

Surviving the Ransomware Plague

2054

inside

Employee Alumnus

2192

WannaCry stopped by Check Point Anti-Ransomware

2192

inside

Admin

4469

WannaCry- Stopped with Check Point SandBlast Agent

4469

inside

Employee Alumnus

1484

Build your own cyber crime empire #mundohackerday recodring

1484

inside

Employee Alumnus

2236

Email attachment still remains major source of zero-day attacks

2236

inside

Admin

1179

SandBlast for SMB applainces managed by R77.30 Security Management Server

1179

inside

Admin

1697

Check Point response to Intel Elevation of Privilege vulnerability

1697

inside

Admin

4383

Description of Incident Status in SandBlast Agent Forensics

4383

inside

Employee Alumnus

1458

Check Point Anti-Ransomware: Webcast and Demo

1458

inside

Admin

1587

Files are randomly not getting scanned and emulated by Threat Emulation

1587

inside

Employee Alumnus

1845

Power of SandBlast Agent Forensics

1845

inside

Admin

1487

How do Configure a SandBlast Appliance by FDQN Instead of IP Address

1487

inside

Admin

1691

Where does SandBlast Agent for Browsers store original files?

1691

inside

Admin

2550

What's The Latest Version of the Threat Emulation Engine?

2550

inside

Admin

1320

Sandblast supports emulating files on WIN10 (+64BIT) now

1320

Solved

inside

Admin

2718

check point 12000 newly installation

3255

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 08 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 1: How AI is Reshaping Our World

Virtual

Fri 09 Jan 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 42: Looking back & forward

Wed 14 Jan 2026 @ 05:00 PM (CET)

CheckMates Fest 2026

Virtual

Wed 21 Jan 2026 @ 11:00 AM (EST)

TechTalk: Quantum SD-WAN Monitoring

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Thu 12 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 3: Exposing AI Vulnerabilities: CP<R> Latest Security Findings

Virtual

Thu 08 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 1: How AI is Reshaping Our World

Virtual

Fri 09 Jan 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 42: Looking back & forward

Virtual

Wed 21 Jan 2026 @ 11:00 AM (EST)

TechTalk: Quantum SD-WAN Monitoring

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Virtual

Thu 26 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 4: Powering Prevention: The AI Driving Check Point’s ThreatCloud

CheckMates Events

Are you a member of CheckMates?