Security Gateways

CheckMates Fest 2025!
Join the Biggest Event of the Year!

Simplifying Zero Trust Security
with Infinity Identity!

Watch Now

Zero Trust Implementation
Help us with the Short-Term Roadmap

Take the Survey

CheckMates Go:
Recently on CheckMates

LISTEN NOW

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Participant

26299

HowTo Set Up Certificate Based VPNs with Check Point Appliances – R80.x edition

26299

inside

Employee

26299

ICAP Server on Sandblast Appliance (TEX)

26199

inside

Participant

26099

ISP Redundancy - 2 default route pointing to different ISP

26099

inside

Champion

25500

Cipher Configuration Tool (CCT)

25500

inside

Advisor

25399

Cisco port channel member is suspended

25299

Solved

inside

Contributor

24899

Increasing disk space vg_splat-lv_current

24799

inside

Explorer

24799

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

24799

Solved

inside

Collaborator

24200

LOM password reset on 5600 and 12400 appliances

24200

inside

Participant

24100

what information do we need from the remote site customer when creating site to site VPN?

24100

Solved

inside

Collaborator

24099

Encryption Failure: according to the policy the packet should not have been decrypted

23699

inside

Advisor

23699

Identity sharing - how to change modes

23699

Solved

inside

Advisor

23499

Questions on upgrading from R80.10 to R80.40 or R81

23499

Solved

inside

Participant

23399

ClusterXL inactive or machine is down

23199

Solved

inside

Authority

23099

AD-query failed with Microsoft Windows Server 2022

23099

inside

Explorer

23000

TCP Packet out of state, First Packet is not syn

23000

Solved

inside

Advisor

22799

IPSec VPN tunnel stuck at phase 1 ESP traffic dropped

22699

Solved

inside

Advisor

22398

Remote Access VPN Authentication Failure

22398

inside

Participant

22199

UserCheck Block Page Times Out

22199

inside

Explorer

22099

First packet isn't Syn; tcp_flags: ACK

22099

Solved

inside

Contributor

21999

Need CLI Command to see Interfaces and Associated IP Information

21999

inside

Participant

21996

cphaprob status showing down cause by routed

21799

inside

Collaborator

21699

Get SKU, MAC, and Serial Number of Appliance thru CLI

21699

inside

Mentor

21599

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

21599

inside

Employee

21502

Lightboard Series: High Availability Architecture with R80.10

21502

Solved

inside

Contributor

21499

Intermittent VOIP One Way Audio

21499

inside

Explorer

21300

ClusterXL - standby cannot reach gateway

21199

inside

Explorer

20699

Installing VSX on on VMware ESXi

20699

Solved

inside

Advisor

20599

Wrong peer gateway for decrypted packet (VPN Error code 01)

20500

inside

Admin

20499

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

20499

Solved

inside

Contributor

20499

HTTPS Certificate validation - SK159872

20499

inside

Collaborator

20400

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

20300

Solved

inside

Explorer

20199

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

20199

inside

Advisor

20099

Identity Awareness using Azure AD

19899

Solved

inside

Collaborator

19899

Policy installation failures with Error code: 0-2000183-27

19800

Solved

inside

Advisor

19799

Virtual Standby member cannot reach internal DNS or Internet

19799

Solved

inside

Participant

19799

CPview and Top-connections in R80.20

19799

inside

Collaborator

19797

Checkpoint device does not establish VPN tunnel

19499

inside

Collaborator

19499

RX out of buffer drops on 25/40/100G (Mellanox) interfaces

19401

inside

Advisor

19300

AW keeps deleting Dameware Service

19299

Solved

inside

Contributor

19100

How to measure bandwidth on CP Gateway?

19099

Solved

inside

Contributor

19099

License about to expire but Expiration Date in the past

19099

Solved

inside

Contributor

19098

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

19098

Solved

inside

Collaborator

19000

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

18999

inside

Contributor

18899

F5 BIG-IP ICAP and SandBlast (TEX)

18899

Solved

inside

Collaborator

18799

Displaying transceiver properties

18799

Solved

inside

Contributor

18600

WMI Permission denied - From this months Windows Update

18600

inside

Contributor

18399

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

18200

Solved

inside

Contributor

17999

Restricting Remote Access by IPv4 Address

17700

inside

Collaborator

17699

Firewall HA status (health check)

17699

inside

Participant

17599

Is there SNI support for inbound HTTPS inspection in R80.20?

17499

Solved

inside

Contributor

17400

Blocking malicious IP addresses (sk103154) in VSX

17400

inside

Advisor

16713

nic down after upgrading dell r640 to gaia r81

2058

inside

Legend

1776

Remove old, unused and expired IDA broker certificate

123

inside

Legend

329

5400 Appliances losing Routing-Connection after reboot

508

inside

Participant

329

Issues with TCP/IP connectivity on IPSEC VPN

118

inside

Explorer

164

Replacement for Client Authentication

164

inside

Collaborator

R82 – Install ElasticXL Cluster

11567

inside

Leader

590

Clarification on sk108600 - VPN with 3rd parties

590

inside

Contributor

574

Content awareness and blocking .bat files issue

574

inside

Explorer

241

Working without connection to checkpoint servers

241

Solved

inside

Contributor

4436

SSL VPN Native Apps Disconnections

4436

inside

Advisor

514

CloudGard IaaS Blade on Gateway logs

265

inside

Participant

728

Slow download site-to-site VPN

728

inside

Contributor

189

Traffic was dropped in LAN interface of 300 appliance manageb by smart-1 cloud

189

inside

Participant

9390

Restrict VPN access by GEO location

9390

inside

Contributor

164

Identity Awareness fetch over IP-sec vpn || Azure

164

inside

Advisor

464

DNS traffic seen over SYNC interface with dummy MAC addresses?

464

inside

Contributor

243

Find a IOC in checkpoint database (malicious IP, domain)

160

Solved

inside

Participant

259

Proper protocol to advertise a netblock to a BGP peer

259

Solved

inside

Advisor

139

Route Internet traffic through S2S

139

inside

Participant

286

Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

286

Solved

inside

Collaborator

268

What is the current kernel debug buffer size?

268

Solved

inside

Explorer

190

Building ElasticXL in R82 walk through (with videos)

3156

Solved

inside

Contributor

166

Identity Awareness daemon status

166

Solved

inside

Contributor

363

Incoming VOIP calls disconnect after 30/31 seconds

363

inside

Participant

1723

rule based on a group not working anymore

215

Solved

inside

Advisor

2204

Warning: R81.20 JHF 89 for VSX

2204

inside

Participant

805

R81.20 JHF 89 SAML Forced Re-authentication

805

inside

Explorer

296

Usage of XFF with Identity Awareness and Identity Agent

296

Solved

inside

Collaborator

364

Let's talk about MDPS and why it sucks!

355

inside

Contributor

3630

Management Plane Separation - mdps_tun connected route

3630

Solved

inside

Authority

5005

Quantum Force CPU cores <=> virtual

5005

inside

Explorer

126

IPsec Gateway is Always Defined Cluster Management IP

126

inside

Explorer

247

Gata 81.10/Quantum 6200: Cannot manage snapshots: Gaia Web-UI recognized a non-valid input data

358

inside

Admin

802

EMEA: Web Filtering Best Practices November 2024: Video and Slides

802

inside

Explorer

268

Possible to use certificate authentication with ActiveSync over Checkpoint Gateway

268

inside

Contributor

261

Can not access to secondary firewall via 4434 web port

261

inside

Explorer

500

Checkpoint Management Server(Open) is not getting App & URL updates

500

Solved

inside

Participant

646

CP-to-CP Site-to-Site VPN woes

646

Solved

inside

Explorer

298

R81.20 High CPU being reported by Solarwinds and TOP

1103

Solved

inside

Participant

27742

How to disable Gaia access from the Internet

27742

Solved

inside

Advisor

410

R81.20 | Gateway Fresh Install - Can't set partition sizes properly

410

inside

Explorer

597

Gaia Portal Recognized a non-valid username

597

Solved

inside

Participant

344

Gaia 81.10/Quantum 6200: Can I drop ICMP redirect packets without logging?

344

Solved

inside

Contributor

1032

HTTPS Inspection over IPv6 on R82

1032

inside

Contributor

159

Check Point response to CVE-2024-24914

232

Solved

inside

Contributor

1244

AzureAD Identity Awareness on VSX - sk179788

1244

Solved

inside

Participant

10750

Configure Checkpoint as NTP server

10750

inside

Collaborator

659

VSX Funny IP behavior with 81.20 ,they are used to do real traffic generated by VS

659

Solved

inside

Contributor

8401

Migration to ClusterXL with alias interface

265

Solved

inside

Contributor

868

Vulnerability scan shows ports 18231 uses weak ciphers

868

inside

Participant

2436

Change from Smart Console to local Gaia portal management

1206

inside

Contributor

361

How to check history vpn tunnel status on command line

361

inside

Participant

916

Gaia 81.10/Quantum 6200: The gateway's clock is not synchronizing automatically to my NTP servers

916

Solved

inside

Contributor

406

Vpn domain based and eBGP + VSX

406

inside

Collaborator

3167

Zendesk voice application 3 second delay

3167

Solved

inside

Contributor

262

OSPF to Cisco FULL/DR but CP not sending routes LSU TooLow/LSAck TooLow

262

inside

Explorer

236

Both AD Query and Identity Collector

236

Solved

inside

Contributor

1195

identity awareness debugging commands fail on R81.20

1195

inside

Employee

546

Building VSNext in R82 walk through (with videos)

546

Solved

inside

Collaborator

190

R81.10 VPN site-2-site to Cisco C8500-12X IOS XE (not Palo Alto as previously stated)

5072

inside

Explorer

2612

migration from one SMS to a different SMS

2612

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 09 Jan 2025 @ 10:00 AM (CET)

Infinity XDR/XPR Product Updates (EMEA)

Virtual

Thu 09 Jan 2025 @ 10:00 AM (CET)

CheckMates Live BeLux: 2024 Recap and Quiz!

Virtual

Thu 09 Jan 2025 @ 05:00 PM (CET)

Infinity XDR/XPR Product Updates (Americas)

Virtual

Fri 10 Jan 2025 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 32: Infinity External Risk Management (CyberInt)

Virtual

Wed 15 Jan 2025 @ 05:00 PM (CET)

CheckMates Fest 2025!

Virtual

Thu 09 Jan 2025 @ 10:00 AM (CET)

Infinity XDR/XPR Product Updates (EMEA)

Virtual

Thu 09 Jan 2025 @ 10:00 AM (CET)

CheckMates Live BeLux: 2024 Recap and Quiz!

Virtual

Thu 09 Jan 2025 @ 05:00 PM (CET)

Infinity XDR/XPR Product Updates (Americas)

Virtual

Fri 10 Jan 2025 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 32: Infinity External Risk Management (CyberInt)

Virtual

Wed 15 Jan 2025 @ 05:00 PM (CET)

CheckMates Fest 2025!

CheckMates Events

Are you a member of CheckMates?