Security Gateways

Introduction to Lakera:
Securing the AI Frontier!

Watch Now!

Quantum Spark Management Unleashed!

Watch Now

Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Learn More

HTTPS Inspection
Help us to understand your needs better

Take the Survey

CheckMates Go:
SharePoint CVEs and More!

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Participant

28599

ISP Redundancy - 2 default route pointing to different ISP

28599

Solved

inside

Contributor

28499

IPSec VPN tunnel stuck at phase 1 ESP traffic dropped

27901

Solved

inside

Advisor

27893

Questions on upgrading from R80.10 to R80.40 or R81

27893

Solved

inside

Participant

27800

Cisco port channel member is suspended

27800

Solved

inside

Collaborator

27701

Get SKU, MAC, and Serial Number of Appliance thru CLI

27701

Solved

inside

Contributor

27499

Increasing disk space vg_splat-lv_current

27201

Solved

inside

Champion

27199

R82 – Install ElasticXL Cluster

27199

inside

Participant

27026

Maximum number of routing entries checkpoint fw

27026

Solved

inside

Advisor

26999

Intermittent VOIP One Way Audio

26699

Solved

inside

Collaborator

26499

LOM password reset on 5600 and 12400 appliances

26499

Solved

inside

Advisor

26399

Remote Access VPN Authentication Failure

26399

Solved

inside

Authority

26399

AD-query failed with Microsoft Windows Server 2022

26399

inside

Participant

26299

what information do we need from the remote site customer when creating site to site VPN?

26299

inside

Mentor

26214

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

26214

inside

Champion

25913

Cipher Configuration Tool (CCT)

25913

inside

Explorer

25700

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

25700

inside

Participant

25600

UserCheck Block Page Times Out

25600

Solved

inside

Participant

25599

Encryption Failure: according to the policy the packet should not have been decrypted

25599

inside

Explorer

25199

First packet isn't Syn; tcp_flags: ACK

25199

Solved

inside

Contributor

25189

TCP Packet out of state, First Packet is not syn

25100

Solved

inside

Advisor

25100

ClusterXL - standby cannot reach gateway

24928

Solved

inside

Advisor

24899

Virtual Standby member cannot reach internal DNS or Internet

24899

inside

Collaborator

24600

Problem with VPN traffic and Nated IPs

24600

inside

Advisor

24400

Identity sharing - how to change modes

24400

Solved

inside

Contributor

24400

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

24400

Solved

inside

Contributor

24300

Need CLI Command to see Interfaces and Associated IP Information

24300

Solved

inside

Advisor

24001

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

24001

Solved

inside

Explorer

23999

Identity Awareness using Azure AD

23999

Solved

inside

Advisor

23999

HTTPS Certificate validation - SK159872

23999

inside

Admin

23800

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

23800

Solved

inside

Contributor

23699

cphaprob status showing down cause by routed

23699

Solved

inside

Contributor

23599

How to block traffic coming from known malicious IP addresses R81.10

23399

inside

Employee Alumnus

23398

AW keeps deleting Dameware Service

23398

Solved

inside

Contributor

23302

Wrong peer gateway for decrypted packet (VPN Error code 01)

22999

inside

Contributor

22708

Checkpoint gateway Memory Usage

22708

Solved

inside

Advisor

22700

WMI Permission denied - From this months Windows Update

22700

inside

Contributor

22699

CPview and Top-connections in R80.20

22600

inside

Collaborator

22599

Installing VSX on on VMware ESXi

22401

inside

Employee

22400

Lightboard Series: High Availability Architecture with R80.10

22400

inside

Collaborator

22300

Firewall HA status (health check)

22300

Solved

inside

Contributor

22284

Blocking malicious IP addresses (sk103154) in VSX

22284

Solved

inside

Participant

22200

Troubleshooting dropped packets in Checkpoint using zdebug

22200

Solved

inside

Explorer

21899

Displaying transceiver properties

21799

Solved

inside

Participant

21791

IN /VAR/LOG/messages keep getting Stopping CUL mode

21791

inside

Contributor

21700

Allow file download and block file upload with wetransfer

21599

inside

Advisor

21399

F5 BIG-IP ICAP and SandBlast (TEX)

21199

inside

Admin

21199

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

21199

Solved

inside

Contributor

21099

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

20999

inside

Collaborator

20999

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

20999

Solved

inside

Contributor

20993

Not substituted certificate in browser Https Inspection

20993

Solved

inside

Participant

20900

Why CP drops RST-ACK packets from client?

20900

inside

Collaborator

20800

Notify when certificate expired

20799

Solved

inside

Contributor

20799

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

20799

Solved

inside

Participant

20599

Checkpoint device does not establish VPN tunnel

20599

inside

Champion

20599

Policy installation failures with Error code: 0-2000183-27

20599

inside

Collaborator

20599

Cluster XL - Failover due to Fullsync PNOTE ON

20599

Solved

inside

Contributor

20499

Is there SNI support for inbound HTTPS inspection in R80.20?

20499

Solved

inside

Contributor

20499

Restricting Remote Access by IPv4 Address

20499

inside

Contributor

20292

VSX cluster problem - are we alone?

20292

Solved

inside

Contributor

20099

SSL Certificate Cannot Be Trusted (vulnerability)

20099

Solved

inside

Contributor

20000

Gaia r80.10 tag vlan 1 and native vlan

20000

inside

Advisor

19799

Checkpoint to Azure Route based - guide

19799

inside

Admin

19799

How do I verify Threat Emulation is working?

19799

inside

Advisor

19600

BGP over VPN between Azure.docx

19600

inside

Participant

19599

Password hashes, sha512 and the expert password

19599

Solved

inside

Advisor

19599

Terrible performance IPHTTPS - Checkpoint SG 15600

19599

inside

Participant

333

TIL: no impact when changing physical port in Virtual Switch in a VSX Environment

333

Solved

inside

Participant

498

Not able to install latest Take

498

Solved

inside

Legend

357

Any idea when it will be possible to configure routemaps via web UI?

357

Solved

inside

Advisor

355

R82 Gateway - Public Interface - Extender.html

355

inside

Participant

580

IPSec VPN redundancy is not working using MEP

580

inside

Explorer

314

Question about Sync Interface Routing in Check Point Cluster

314

Solved

inside

Contributor

320

VPN SITE TO SITE CHECKPOINT VSX ROUTE BASED

2783

Solved

inside

Participant

3515

ISP redundancy and DNS records for Web Servers in DMZ

3515

Solved

inside

Advisor

6063

BGP peer Throught IPSEC tunnel

6063

inside

Legend

198

Tip for case where adding so many wildcards/fqdns does not work in the policy

198

Solved

inside

Legend

374

VSX as Web proxy using IP different from the interface

888

inside

Advisor

764

Debugging IKE/Tunnel establishment on VSX R81.20.

3659

Solved

inside

Advisor

744

ClusterXL - moving to newer appliances

522

inside

Employee

462

NIAP Common Criteria cPP for R81.20 on the Product Compliant List

462

inside

Collaborator

139

Change cluster interface to private and required interfaces count didn't change

139

inside

Explorer

306

BGP sessions under the same VLAN

306

inside

Advisor

595

DNS traffic in DETECT mode in VSX

595

inside

Admin

675

Identity Awareness Deep Dive August 2025: Video and Slides

675

Solved

inside

Contributor

1445

AD Quary to Identity collector

1445

Solved

inside

Contributor

1403

Packet timeout with unknown reason in Quantum Force 9100 only

1403

inside

Advisor

217

Possible attacks in a VSX environment

217

Solved

inside

Explorer

263

UserCheck not using provided certificate - MultiPortal configuration?

388

inside

Contributor

4418

R81.20 first time wizard Gui setup error

4418

Solved

inside

Collaborator

340

Management Server Traffic Hits the Implied Rules

340

Solved

inside

Collaborator

336

ClusterXL – Changing MGMT and eth2 from 1Gb to 10Gb

336

Solved

inside

Explorer

591

Upgrade R81.10 Cluster to R82 issues

591

Solved

inside

Participant

15945

Default State table Timers on Checkpoint?

15945

Solved

inside

Participant

335

CPNotEnoughDataForRuleMatch first possible match is Cleanup Rule and is allowing traffic the Cleanup

335

Solved

inside

Explorer

252

Connect single quantum gateway to redundant core switches

185

inside

Advisor

893

Load Balancing on Quantum Spark 1800 SMB

2573

Solved

inside

Participant

172

enabling MDPS on 3600 or 3900 devices works as expected ?

172

Solved

inside

Contributor

836

Traffic logs show drop message "IP routing failed (ipin routing failure)"

10919

inside

Contributor

210

Anti-Spoofing on VTI interfaces

210

Solved

inside

Advisor

259

Alert in VS from the SmartConsole

259

Solved

inside

Advisor

272

FTW using ElasticXL cause a fatal error

272

inside

Collaborator

538

VSNext and Mobile Access issue

538

inside

Authority

579

changing platform portal port on VSNext

579

Solved

inside

Explorer

454

Cluster active member lost R81.20 Take 98

454

inside

Contributor

3816

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

3816

inside

Contributor

214

Port TCP 264 displays hostname and domain name in the port scan.

214

inside

Advisor

671

Unusual higher that average CPU

3083

inside

Advisor

966

Installing Hotfix on R82 ElasticXL

695

Solved

inside

Advisor

638

What are the 2550, 2570, 2590 and 2680 appliances

638

inside

Advisor

301

Block WhatsApp Uploads/Downloads

18387

inside

Contributor

143

MAB portal File Share App web-interface customization

143

inside

Advisor

162

SSL Inbound Inspection on IMAPS

162

inside

Employee

3114

R81.20 JHF41 TCP Handshake counter fills up

3114

inside

Participant

467

Auditing File Uploads (with view to block using Application Rule)

467

Solved

inside

Advisor

521

Log viewer Resolve (IP) is always checked/enabled by default.

533

inside

Contributor

584

AppControl/URLF - Rules and classification

584

Solved

inside

Leader

6389

How to view cpview history file on other machine

6389

inside

Legend

15420

Assistance Required: Issue with UDP Port 5060 Packet Drop

903

Solved

inside

Explorer

227

How to change path in a Scheduled system backup?

227

inside

Advisor

516

Checkpoint Identity collector - gateway certificate untrusted

2377

inside

Contributor

582

Anti-Spoofing on Internet (External) Interface?

582

inside

Leader

6650

Sharing Threat Emulation Appliance Between Two Security Gateways

461

Solved

inside

Contributor

1291

Ordered Layers vs In-Line Layers

1291

inside

Contributor

426

Replace a cluster of 15400 appliance by a cluster of 9700 appliance

282

Solved

inside

Explorer

201

AAAA (IPv6) DNS requests control

201

Solved

inside

Explorer

6010

Nat rule over tunnel/community

6010

inside

Participant

137

MEP VPN Gateway: force specific client to connect to backup gateway

137

inside

Contributor

12751

Phase 2 Site-to-site VPN error

12751

inside

Employee

706

New MCP Signature Now Available in Application Control

706

Solved

inside

Explorer

175

R81.20 snapshot size more than doubled as compared to R80.40

175

inside

Mentor

4010

First time wizard stucks at 90% R80.40

4010

Solved

inside

Advisor

1259

ElasticXL Traffic Distribution question

1259

Solved

inside

Explorer

825

Different DNS server per Domain R81.20

825

inside

Collaborator

330

BGP Graceful Restart in HA cluster in Azure

330

Solved

inside

Explorer

2487

Loopback interface on VSX virtual system

2487

Solved

inside

Explorer

3971

Loopback interface is going out of routing table

3971

Solved

inside

Advisor

770

Brand new appliance with non-default IP on Mgmt interface

770

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 30 Sep 2025 @ 08:00 AM (EDT)

Tips and Tricks 2025 #13: Strategic Cyber Assessments: How to Strengthen Your Security Posture

Virtual

Tue 30 Sep 2025 @ 10:00 AM (EDT)

Wiz & Check Point: Visibility and Prevention for the Cloud

In-Person

Wed 01 Oct 2025 @ 12:00 PM (MDT)

Draper, UT: CloudGuard Network Security and WAF

Virtual

Thu 02 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

Tue 07 Oct 2025 @ 10:00 AM (CEST)

Cloud Architect Series: AI-Powered API Security with CloudGuard WAF

Virtual

Tue 30 Sep 2025 @ 08:00 AM (EDT)

Tips and Tricks 2025 #13: Strategic Cyber Assessments: How to Strengthen Your Security Posture

Virtual

Tue 30 Sep 2025 @ 10:00 AM (EDT)

Wiz & Check Point: Visibility and Prevention for the Cloud

Virtual

Thu 02 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

Virtual

Wed 22 Oct 2025 @ 11:00 AM (EDT)

Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents Outages

In-Person

Wed 01 Oct 2025 @ 12:00 PM (MDT)

Draper, UT: CloudGuard Network Security and WAF

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

In-Person

Tue 14 Oct 2025 @ 10:00 AM (CEST)

CheckMates Austria Road Show - CheckMates Live Graz

CheckMates Events

Are you a member of CheckMates?