Security Gateways

Unleashing Performance & Stability
with Harmony Endpoint E88.70!

It's Here!
CPX 2025 Content

Get It Now

Zero Trust: Remote Access and Posture
Help us with the Short-Term Roadmap

Take the Survey

The Future of Browser Security:
AI, Data Leaks & How to Stay Protected!

Watch now

CheckMates Go:
Recently on CheckMates

LISTEN NOW

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Participant

30199

IPSec VPN Site to Site_Checkpoint send wrong Proxy-ID in proposal phase 2

30199

inside

Explorer

29799

IKE failure - no response from peer

29799

Solved

inside

Contributor

29500

Message seen on /var/log/messages - "simi_reorder_enqueue_packet"

29400

Solved

inside

Participant

28999

How to disable Gaia access from the Internet

28999

inside

Employee

28799

A simple way to keep your Security Gateway up-to-date – we want to hear what you think!

28799

Solved

inside

Champion

28600

Command to show the number of permitted cores

28600

Solved

inside

Explorer

28599

tcpdump for site to site vpn traffic

28599

Solved

inside

Legend

28599

Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

28100

inside

Advisor

27799

Gaia build number list including HFAs - does it exist?

27500

inside

Participant

27499

HowTo Set Up Certificate Based VPNs with Check Point Appliances – R80.x edition

27499

inside

Participant

27399

ICAP Server on Sandblast Appliance (TEX)

27399

Solved

inside

Collaborator

27199

ISP Redundancy - 2 default route pointing to different ISP

26899

Solved

inside

Collaborator

26899

ClusterXL inactive or machine is down

26899

inside

Participant

26599

Maximum number of routing entries checkpoint fw

26599

Solved

inside

Participant

26399

Cisco port channel member is suspended

26399

Solved

inside

Contributor

25900

Increasing disk space vg_splat-lv_current

25598

inside

Champion

25500

Cipher Configuration Tool (CCT)

25500

inside

Contributor

25300

Questions on upgrading from R80.10 to R80.40 or R81

25300

inside

Participant

25299

RX out of buffer drops on 25/40/100G (Mellanox) interfaces

25299

inside

Explorer

25199

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

25199

Solved

inside

Collaborator

24999

LOM password reset on 5600 and 12400 appliances

24999

inside

Explorer

24900

IPSec VPN tunnel stuck at phase 1 ESP traffic dropped

24900

inside

Participant

24900

what information do we need from the remote site customer when creating site to site VPN?

24900

Solved

inside

Collaborator

24899

Encryption Failure: according to the policy the packet should not have been decrypted

24399

Solved

inside

Authority

24399

AD-query failed with Microsoft Windows Server 2022

24399

Solved

inside

Collaborator

24000

Get SKU, MAC, and Serial Number of Appliance thru CLI

24000

inside

Advisor

24000

Identity sharing - how to change modes

24000

Solved

inside

Advisor

23999

Remote Access VPN Authentication Failure

23999

inside

Mentor

23800

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

23800

inside

Explorer

23700

TCP Packet out of state, First Packet is not syn

23700

Solved

inside

Advisor

23600

UserCheck Block Page Times Out

23299

Solved

inside

Contributor

23099

First packet isn't Syn; tcp_flags: ACK

23099

Solved

inside

Advisor

23000

Intermittent VOIP One Way Audio

22999

Solved

inside

Contributor

22899

Need CLI Command to see Interfaces and Associated IP Information

22899

Solved

inside

Contributor

22699

License about to expire but Expiration Date in the past

22699

inside

Participant

22400

ClusterXL - standby cannot reach gateway

22399

Solved

inside

Contributor

22399

cphaprob status showing down cause by routed

22399

inside

Contributor

22099

Virtual Standby member cannot reach internal DNS or Internet

21999

inside

Contributor

21975

How to measure bandwidth on CP Gateway?

21975

inside

Admin

21799

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

21799

inside

Employee

21799

Lightboard Series: High Availability Architecture with R80.10

21799

Solved

inside

Advisor

21799

HTTPS Certificate validation - SK159872

21799

inside

Explorer

21799

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

21699

Solved

inside

Contributor

21599

Wrong peer gateway for decrypted packet (VPN Error code 01)

21399

Solved

inside

Explorer

21199

Identity Awareness using Azure AD

21199

inside

Explorer

21199

Installing VSX on on VMware ESXi

21199

Solved

inside

Advisor

20999

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

20999

Solved

inside

Explorer

20899

AW keeps deleting Dameware Service

20899

inside

Collaborator

20800

CP Firewall Migration (From CP 23500 R81.10 To CP 19200 R81.20)

297

inside

Participant

224

Updateable Objects - Office 365

224

inside

Collaborator

129

Checkpoint option for DMZ-based update server

343

inside

Explorer

127

Blocking addresses using a link with a list of malicious IP addresses according to sk103154

127

Solved

inside

Participant

1266

CheckPoint Firewall blocks Aruba Instanton access points connectivity to Aruba cloud

1266

inside

Legend

5870

Policy push causes vpn tunnel to go down in R80.30

5870

inside

Legend

3392

VPN users, SAML and IPassignments

181

Solved

inside

Contributor

530

Has anyone implemented sk180808?

530

inside

Explorer

136

R81.20 Gaia BGP export routemap per peer with single AS

136

inside

Participant

202

How install InitialPolicy after use fw unloadlocal

202

inside

Authority

4584

Run a command on each firewall via CPRID

4584

Solved

inside

Participant

414

81.20 Logging issue after cluster switch

435

inside

Explorer

Excluding traffic from VPN with Policy based routing

inside

Advisor

557

Check Point ISP Redundancy - Dynamic Objects (Something Interesting Network)

557

Solved

inside

Collaborator

475

VSX and Bond interfaces going down after few hours

475

inside

Explorer

162

Strangeness with UDP packets filtering by src port

162

inside

Advisor

154

Found some traffic prevented by optimized profile although didn't use it as firewall IPS profile

154

Solved

inside

Participant

1486

3CX Phone System behind Check Point 3100

1486

Solved

inside

Contributor

882

HTTPS Inspection Bypass via URL vs IP Address

882

inside

Contributor

1050

Central license open platform cluster hardware upgrade primary

1050

inside

Contributor

149

Detach license and then add it back later (Does core config change or only if you reboot between)?

149

inside

Contributor

1315

IKE Crashes and RA VPN issues on R81.20 Take 98

1315

Solved

inside

Champion

874221

458

310

R8x Ports Used for Communication by Various Check Point Modules (new version 2.1)

874221

458

310

Solved

inside

Contributor

352

What happens if licences expire on gateway

352

Solved

inside

Participant

266

Check Point Identity Collector - Windows Server firewall Permisoins

266

Solved

inside

Contributor

19354

Identity Collector - Identity Sources configuration

4365

Solved

inside

Collaborator

249

Building VSNext in R82 walk through (with videos)

1208

inside

Employee

8890

R81.20 - Waiting for another automatic update to finish

8890

inside

Explorer

295

Identity Provider Reply URL section is blank

1431

inside

Advisor

182

CloudGuard AWS HA to third party - VPN Tunnel Instability? BGP/ICMP traffic

129

Solved

inside

Participant

724

R82 VSNext cluster with multiple VS

724

Solved

inside

Collaborator

507

Something to keep in mind when VPN tunnel is down

318

inside

Contributor

631

Problem with VPN & PPPoE: R81.20 - Build 039

631

inside

Explorer

395

Usage of XFF with Identity Awareness and Identity Agent

1493

Solved

inside

Legend

192

Question about 6600 fw replacement

305

inside

Legend

188

Site-to-Site AWS VPN not working with Central Managed SMB.

288

Solved

inside

Explorer

658

IDC events not coming on Firewall

658

inside

Contributor

345

Zoom and Custom Application/Site

410

inside

Collaborator

1235

About "CPNotEnoughDataForRuleMatch" and connection reset

1235

Solved

inside

Employee

57909

How to manually delete an entry from the Connections Table

57909

Solved

inside

Contributor

165

access to azure web server via office CP and s2s VPN

165

inside

Explorer

742

IPS Updates & Threat Emulation Not Working

742

inside

Contributor

7539

Identity awareness and ADS machine identity propagation

7539

Solved

inside

Legend

207

Ikeview/infoview utilities issue

207

inside

Legend

6408

Checkpoint connectivity between management & gateway over vpn

241

inside

Explorer

162

Loss of access to hardware after enabling p2p ospf

162

inside

Participant

180

VPN Login Failure with Azure MFA

224

inside

Explorer

184

VSX Incorrect configuration - Local cluster member has fewer cluster interfaces configured

184

Solved

inside

Explorer

4769

Check Point RA VPN : force the use of a specific user certificate in Windows Store

4769

inside

Contributor

1430

Identity Awareness "domain name not configured" -> nt-autoritÄt

1430

inside

Advisor

232

Suspicious traffic passed through Implied Rule - accept_outgoing

232

inside

Explorer

299

Do not understand how does Aggressive Aging work with default settings

666

inside

Contributor

182

Cross-site communication problem

182

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 25 Mar 2025 @ 09:00 AM (CET)

CheckMates Live Paris: Harmony – Protection avancée de l’espace utilisateur

In-Person

Tue 25 Mar 2025 @ 09:00 AM (EDT)

Canada In-Person Cloud Security with Hands-On CloudGuard Workshops!

Virtual

Wed 26 Mar 2025 @ 04:00 PM (IST)

Validating Cyber Exposures: How To Continuously Test Exposures For Exploitability

Virtual

Thu 27 Mar 2025 @ 03:00 PM (CET)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - EMEA

Virtual

Thu 27 Mar 2025 @ 02:00 PM (EDT)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - Americas

Virtual

Tue 01 Apr 2025 @ 11:00 AM (IDT)

Simplifying Zero Trust with Infinity Identity: Centralized, Scalable, Secure - EMEA

Virtual

Wed 26 Mar 2025 @ 04:00 PM (IST)

Validating Cyber Exposures: How To Continuously Test Exposures For Exploitability

Virtual

Thu 27 Mar 2025 @ 03:00 PM (CET)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - EMEA

Virtual

Thu 27 Mar 2025 @ 02:00 PM (EDT)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - Americas

Virtual

Tue 01 Apr 2025 @ 11:00 AM (IDT)

Simplifying Zero Trust with Infinity Identity: Centralized, Scalable, Secure - EMEA

Virtual

Tue 01 Apr 2025 @ 06:00 PM (IDT)

Simplifying Zero Trust with Infinity Identity: Centralized, Scalable, Secure - Americas

Virtual

Wed 02 Apr 2025 @ 03:00 PM (CEST)

The Power of SASE: Smarter Security, Stronger Network - EMEA

In-Person

Tue 25 Mar 2025 @ 09:00 AM (CET)

CheckMates Live Paris: Harmony – Protection avancée de l’espace utilisateur

In-Person

Tue 25 Mar 2025 @ 09:00 AM (EDT)

Canada In-Person Cloud Security with Hands-On CloudGuard Workshops!

In-Person

Tue 08 Apr 2025 @ 12:00 PM (MDT)

Denver: CPX 2025 Recap

In-Person

Thu 10 Apr 2025 @ 10:00 AM (EEST)

CheckMates Live Sofia - Maintenance and Upgrade Best Practices

In-Person

Thu 10 Apr 2025 @ 12:00 PM (PDT)

Renton, WA: Golf and Learn!

In-Person

Wed 16 Apr 2025 @ 12:00 PM (PDT)

Hillsboro, OR: Golf and Learn!

CheckMates Events

Are you a member of CheckMates?