Security Gateways

Access Control and Threat Prevention Best Practices
5 November @ 5pm CET / 11am ET

Ask Check Point Threat Intelligence Anything!
October 28th, 9am ET / 3pm CET

Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Learn More

HTTPS Inspection
Help us to understand your needs better

Take the Survey

CheckMates Go:
Spark Management Portal and More!

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Participant

33100

Message seen on /var/log/messages - "simi_reorder_enqueue_packet"

33100

inside

Explorer

33099

IKE failure - no response from peer

33099

Solved

inside

Contributor

32998

'Invalid segment retransmission. Packet dropped.'

32998

inside

Advisor

32800

Anti-spoofing; network defined by routes with overlapping spaces

32800

Solved

inside

Participant

32399

How to disable Gaia access from the Internet

32399

Solved

inside

Collaborator

32199

ClusterXL inactive or machine is down

32199

Solved

inside

Participant

31699

IPSec VPN Site to Site_Checkpoint send wrong Proxy-ID in proposal phase 2

31699

inside

Employee

31599

A simple way to keep your Security Gateway up-to-date – we want to hear what you think!

31599

inside

Advisor

31400

PBR configuration is missing on Audit log

30999

Solved

inside

MVP Gold

30997

Command to show the number of permitted cores

30997

Solved

inside

Explorer

30600

tcpdump for site to site vpn traffic

30600

inside

Contributor

30099

How to measure bandwidth on CP Gateway?

30099

Solved

inside

Contributor

30000

License about to expire but Expiration Date in the past

30000

Solved

inside

Employee Alumnus

29999

ICAP Server on Sandblast Appliance (TEX)

29999

Solved

inside

Advisor

29999

Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

29999

inside

Participant

29799

HowTo Set Up Certificate Based VPNs with Check Point Appliances – R80.x edition

29799

inside

Participant

29599

ISP Redundancy - 2 default route pointing to different ISP

28799

Solved

inside

Advisor

28658

Gaia build number list including HFAs - does it exist?

28658

Solved

inside

Participant

28499

IPSec VPN tunnel stuck at phase 1 ESP traffic dropped

28499

Solved

inside

MVP Gold

28399

R82 – Install ElasticXL Cluster

28399

Solved

inside

Advisor

28300

Questions on upgrading from R80.10 to R80.40 or R81

28300

Solved

inside

Collaborator

28099

Get SKU, MAC, and Serial Number of Appliance thru CLI

28099

Solved

inside

Participant

27999

Cisco port channel member is suspended

27999

Solved

inside

Contributor

27899

Intermittent VOIP One Way Audio

27499

inside

Contributor

27399

Increasing disk space vg_splat-lv_current

27399

Solved

inside

Advisor

27399

Maximum number of routing entries checkpoint fw

27085

Solved

inside

Advisor

27000

Remote Access VPN Authentication Failure

27000

inside

Mentor

26799

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

26799

Solved

inside

MVP Gold

26799

AD-query failed with Microsoft Windows Server 2022

26799

Solved

inside

Collaborator

26699

LOM password reset on 5600 and 12400 appliances

26699

inside

Participant

26499

what information do we need from the remote site customer when creating site to site VPN?

26499

inside

MVP Gold

26000

Cipher Configuration Tool (CCT)

26000

inside

Participant

25900

UserCheck Block Page Times Out

25900

inside

Explorer

25899

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

25899

Solved

inside

Participant

25699

Encryption Failure: according to the policy the packet should not have been decrypted

25699

inside

Explorer

25699

First packet isn't Syn; tcp_flags: ACK

25699

Solved

inside

Contributor

25698

Virtual Standby member cannot reach internal DNS or Internet

25399

inside

Explorer

25300

TCP Packet out of state, First Packet is not syn

25300

Solved

inside

Advisor

25300

ClusterXL - standby cannot reach gateway

25299

inside

Collaborator

25000

Problem with VPN traffic and Nated IPs

25000

Solved

inside

Contributor

24698

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

24698

Solved

inside

Advisor

24600

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

24600

Solved

inside

Explorer

24499

Identity Awareness using Azure AD

24499

inside

Advisor

24499

Identity sharing - how to change modes

24499

Solved

inside

Contributor

24499

Need CLI Command to see Interfaces and Associated IP Information

24499

Solved

inside

Advisor

24300

HTTPS Certificate validation - SK159872

24300

inside

Admin

24199

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

24199

inside

Contributor

23999

How to block traffic coming from known malicious IP addresses R81.10

23999

Solved

inside

Contributor

23900

cphaprob status showing down cause by routed

23899

inside

Employee Alumnus

23799

AW keeps deleting Dameware Service

23799

inside

Explorer

23799

Checkpoint gateway Memory Usage

23699

inside

Participant

23500

WMI Permission denied - From this months Windows Update

23199

Solved

inside

MVP Gold

1202

Converting Tool - ClusterXL to ElasticXL

1202

Solved

inside

Contributor

181

BGP Route imports, Route filter vs Route maps?

181

inside

Participant

207

Web Filtering Best Practices October 2025: Video and Slides

274

inside

Advisor

11934

Show bgp peers across VSX in CLI

11934

Solved

inside

Advisor

2940

VPN drops - decrypt mspi is not valid

2940

Solved

inside

Contributor

153

Threat Emulation failure "Gzip exceeded maximum decompression ratio"

153

Solved

inside

Advisor

766

replacing the SSH connection port

149

Solved

inside

Contributor

2376

What happens if licences expire on gateway

2376

Solved

inside

Participant

366

Replacing R81.20 cluster with new R82 cluster

366

Solved

inside

Collaborator

34991

IPSec VPN - Multiple level chain of trust certificate

171

Solved

inside

Explorer

6444

S1C managed SG9100-Cluster Upgrade R81.20 JHFT105 > R82JHFT39 / best practise, hints recommendations

139

Solved

inside

MVP Gold

18163

TACACS+ with Check Point Gaia & Cisco ISE — AuthZ Profile Created but Still Getting Denied

1926

inside

Participant

2392

OSPF stops annoucing connected routes

2392

inside

Contributor

541

Alert message on Policy install after R81 upgrade

12600

inside

Contributor

138

Troubleshooting 101 Americas September 2025 Video and Slides

1109

inside

Participant

1268

Internet access rules for proxy and transparent

1268

inside

Employee

11355

Using Wireshark to capture packets on Firewall using standard out.

11355

inside

MVP Gold

1772

RVPN Not Working on Active-Active ElasticXL R82

206

inside

Explorer

406

Management set to wrong appliance version

284

inside

Participant

465

Bridging Trunked VLANs on ClusterXL Active/Standby Bridge Mode

465

Solved

inside

Collaborator

636

Zero Touch Clarification Help - 3920

636

inside

Participant

252

Using Cluster Object in NAT rules

252

inside

Admin

292

Americas Deep Dive: HTTPS Inspection Best Practices Video and Slides

292

inside

Participant

94754

geo policy on website behind haproxy using sni

419

inside

Explorer

326

Traffic selectors unacceptable

326

Solved

inside

Explorer

491

User Account creation for file deletion

491

Solved

inside

Contributor

30086

License about to expire but Expiration Date in the past

30086

Solved

inside

Advisor

543

FW blade drops a suspicious packet like IPS blade?

543

inside

MVP Silver

467

Route based VPN with palo alto firewall

356

Solved

inside

Explorer

217

Implementing HTTPS Inspection in a Multi-Tenant VSX Setup — What’s the Industry Standard?

217

Solved

inside

Collaborator

633

Replacing 5800 HA ClusterXL with 9200s. Should I convert to ElasticXL?

633

Solved

inside

Contributor

507

FW Hardware Datetime instead of NTP-settings

507

inside

Participant

4483

Special Character change in R81.20 JHF 96

4483

Solved

inside

Admin

9002

Let's Encrypt forward requests to the correct internal server (DNS-NAT)

360

inside

Participant

4784

IPsec VPN termination on Loopback interfaces -R80.40

4784

inside

Admin

1570

Improved App Control Detection Without HTTPS Inspection + TLS 1.3 Classification

1570

inside

Participant

345

SmartConsole keep relaunch to solve the experience problem

345

inside

Participant

866

Site to Site VPN Issue (Checkpoint to Fortigate)

866

Solved

inside

Collaborator

227

About VSX support on 3900 series

227

Solved

inside

Explorer

441

ISP Redundacy Load Sharing - NAT

441

Solved

inside

Participant

678

Identity Awareness randomly loosing identitys

678

Solved

inside

MVP Gold

329

Locally administrated MAC addresses

329

Solved

inside

Participant

499

Cores on CheckPoint VM are not effective

499

Solved

inside

MVP Gold

28404

R82 – Install ElasticXL Cluster

28404

inside

Explorer

321

Log for IPS but with a Drop rule for exact source IP

321

inside

Participant

175

communication between mplane and dplane is not working

175

inside

Admin

736

PSA: Check Point and Palo Alto - GCM Phase 1

2221

inside

Participant

266

Failed to Build a Cluster Interface OSPF

266

Solved

inside

MVP Gold

1330

Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

1330

inside

Explorer

233

Guidance Needed: R82 T34 ClusterXL Bridge Mode Causing Loops & Crashes

233

inside

Contributor

1815

The URL list inside the Custom Application/Site object is not being applied.

1815

inside

Collaborator

258

Export / Import Configuration of existing GWs to new appliances

258

inside

MVP Gold

2792

Route based VPN tunnel to Azure

2792

Solved

inside

MVP Gold

408

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Mon 27 Oct 2025 @ 09:00 AM (PDT)

Los Angeles, CA: Hands-on CloudGuard Workshops

Virtual

Tue 28 Oct 2025 @ 11:00 AM (EDT)

Under the Hood: CloudGuard Network Security for Google Cloud Network Security Integration - Overview

Virtual

Tue 28 Oct 2025 @ 12:30 PM (EDT)

Check Point & AWS Virtual Immersion Day: Web App Protection

Virtual

Wed 29 Oct 2025 @ 03:00 PM (CET)

EMEA Deep Dive: Maestro Best Practices

In-Person

Wed 29 Oct 2025 @ 09:00 AM (PDT)

San Francisco, CA: Hands-On CloudGuard Workshops

Virtual

Wed 29 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Maestro Best Practices

Virtual

Tue 28 Oct 2025 @ 11:00 AM (EDT)

Under the Hood: CloudGuard Network Security for Google Cloud Network Security Integration - Overview

Virtual

Tue 28 Oct 2025 @ 12:30 PM (EDT)

Check Point & AWS Virtual Immersion Day: Web App Protection

Virtual

Wed 29 Oct 2025 @ 03:00 PM (CET)

EMEA Deep Dive: Maestro Best Practices

Virtual

Wed 29 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Maestro Best Practices

Virtual

Thu 30 Oct 2025 @ 03:00 PM (CET)

Cloud Security Under Siege: Critical Insights from the 2025 Security Landscape - EMEA

Virtual

Thu 30 Oct 2025 @ 02:00 PM (EDT)

Cloud Security Under Siege: Critical Insights from the 2025 Security Landscape - AMER

In-Person

Mon 27 Oct 2025 @ 09:00 AM (PDT)

Los Angeles, CA: Hands-on CloudGuard Workshops

In-Person

Wed 29 Oct 2025 @ 09:00 AM (PDT)

San Francisco, CA: Hands-On CloudGuard Workshops

In-Person

Mon 03 Nov 2025 @ 09:00 AM (GMT)

Dublin, Ireland: Hands-On CloudGuard Workshops

In-Person

Tue 04 Nov 2025 @ 09:00 AM (EST)

Cincinnati, OH: Check Point & WIZ Cloud Workshops

In-Person

Tue 04 Nov 2025 @ 09:00 AM (CST)

San Antonio, TX: Hands-On CloudGuard Workshops

In-Person

Wed 05 Nov 2025 @ 09:00 AM (GMT)

London, UK: Hands-On CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?