Security Gateways

Unleashing Performance & Stability
with Harmony Endpoint E88.70!

It's Here!
CPX 2025 Content

Get It Now

Zero Trust: Remote Access and Posture
Help us with the Short-Term Roadmap

Take the Survey

The Future of Browser Security:
AI, Data Leaks & How to Stay Protected!

Watch now

CheckMates Go:
Recently on CheckMates

LISTEN NOW

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Contributor

25899

Increasing disk space vg_splat-lv_current

25598

inside

Champion

25500

Cipher Configuration Tool (CCT)

25500

Solved

inside

Advisor

25400

Questions on upgrading from R80.10 to R80.40 or R81

25400

inside

Contributor

25300

RX out of buffer drops on 25/40/100G (Mellanox) interfaces

25299

inside

Explorer

25199

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

25199

Solved

inside

Collaborator

24999

LOM password reset on 5600 and 12400 appliances

24999

inside

Explorer

24900

IPSec VPN tunnel stuck at phase 1 ESP traffic dropped

24900

inside

Participant

24900

what information do we need from the remote site customer when creating site to site VPN?

24900

Solved

inside

Collaborator

24899

Encryption Failure: according to the policy the packet should not have been decrypted

24399

Solved

inside

Authority

24399

AD-query failed with Microsoft Windows Server 2022

24399

Solved

inside

Collaborator

24000

Get SKU, MAC, and Serial Number of Appliance thru CLI

24000

inside

Advisor

24000

Identity sharing - how to change modes

24000

Solved

inside

Advisor

23999

Remote Access VPN Authentication Failure

23999

inside

Mentor

23800

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

23800

inside

Explorer

23700

TCP Packet out of state, First Packet is not syn

23700

Solved

inside

Advisor

23600

UserCheck Block Page Times Out

23299

Solved

inside

Contributor

23099

First packet isn't Syn; tcp_flags: ACK

23099

Solved

inside

Advisor

23000

Intermittent VOIP One Way Audio

22999

Solved

inside

Contributor

22899

Need CLI Command to see Interfaces and Associated IP Information

22899

Solved

inside

Contributor

22699

License about to expire but Expiration Date in the past

22699

inside

Participant

22400

ClusterXL - standby cannot reach gateway

22399

Solved

inside

Contributor

22399

cphaprob status showing down cause by routed

22399

inside

Contributor

22099

Virtual Standby member cannot reach internal DNS or Internet

21999

inside

Contributor

21975

How to measure bandwidth on CP Gateway?

21975

inside

Admin

21799

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

21799

inside

Employee

21799

Lightboard Series: High Availability Architecture with R80.10

21799

Solved

inside

Advisor

21799

HTTPS Certificate validation - SK159872

21799

inside

Explorer

21799

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

21699

Solved

inside

Contributor

21599

Wrong peer gateway for decrypted packet (VPN Error code 01)

21399

Solved

inside

Explorer

21199

Identity Awareness using Azure AD

21199

inside

Explorer

21199

Installing VSX on on VMware ESXi

21199

Solved

inside

Advisor

20999

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

20999

Solved

inside

Explorer

20899

AW keeps deleting Dameware Service

20899

inside

Collaborator

20800

CPview and Top-connections in R80.20

20799

Solved

inside

Contributor

20799

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

20499

Solved

inside

Contributor

20199

WMI Permission denied - From this months Windows Update

20199

Solved

inside

Collaborator

20099

Policy installation failures with Error code: 0-2000183-27

20099

Solved

inside

Participant

19999

Checkpoint device does not establish VPN tunnel

19999

Solved

inside

Contributor

19900

Displaying transceiver properties

19799

Solved

inside

Contributor

19700

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

19700

inside

Contributor

19699

F5 BIG-IP ICAP and SandBlast (TEX)

19699

Solved

inside

Contributor

19699

How to block traffic coming from known malicious IP addresses R81.10

19499

inside

Explorer

19398

Problem with VPN traffic and Nated IPs

19300

Solved

inside

Contributor

19299

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

19299

inside

Collaborator

19299

Firewall HA status (health check)

19299

Solved

inside

Contributor

19101

Blocking malicious IP addresses (sk103154) in VSX

19101

inside

Collaborator

18999

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

18999

Solved

inside

Participant

18900

IN /VAR/LOG/messages keep getting Stopping CUL mode

18900

Solved

inside

Contributor

18899

Not substituted certificate in browser Https Inspection

18899

inside

Contributor

18800

VSX cluster problem - are we alone?

18800

Solved

inside

Contributor

18699

Is there SNI support for inbound HTTPS inspection in R80.20?

18699

Solved

inside

Participant

18600

Why CP drops RST-ACK packets from client?

18600

Solved

inside

Contributor

18499

Restricting Remote Access by IPv4 Address

18499

inside

Advisor

18400

Checkpoint gateway Memory Usage

18301

Solved

inside

Contributor

18299

SSL Certificate Cannot Be Trusted (vulnerability)

18299

inside

Participant

18299

Gaia r80.10 tag vlan 1 and native vlan

18099

inside

Admin

18098

How do I verify Threat Emulation is working?

18098

inside

Participant

17999

Cluster XL - Failover due to Fullsync PNOTE ON

17999

Solved

inside

Advisor

17899

Troubleshooting performance issues

17899

Solved

inside

Participant

17799

Notify when certificate expired

17799

inside

Advisor

17799

Checkpoint to Azure Route based - guide

17799

Solved

inside

Contributor

17798

Automatic Configuration of Appliance on boot

17798

Solved

inside

Collaborator

17700

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

17700

Solved

inside

Participant

17700

Snapshot vs Backup - what's the difference?

17700

Solved

inside

Contributor

882

HTTPS Inspection Bypass via URL vs IP Address

882

inside

Contributor

1050

Central license open platform cluster hardware upgrade primary

1050

inside

Contributor

149

Detach license and then add it back later (Does core config change or only if you reboot between)?

149

inside

Contributor

1318

IKE Crashes and RA VPN issues on R81.20 Take 98

1318

Solved

inside

Champion

874234

458

310

R8x Ports Used for Communication by Various Check Point Modules (new version 2.1)

874234

458

310

Solved

inside

Contributor

353

What happens if licences expire on gateway

353

Solved

inside

Participant

266

Check Point Identity Collector - Windows Server firewall Permisoins

266

Solved

inside

Contributor

19354

Identity Collector - Identity Sources configuration

4365

Solved

inside

Collaborator

249

Building VSNext in R82 walk through (with videos)

1208

inside

Employee

8890

R81.20 - Waiting for another automatic update to finish

8890

inside

Explorer

295

Identity Provider Reply URL section is blank

1431

inside

Advisor

182

CloudGuard AWS HA to third party - VPN Tunnel Instability? BGP/ICMP traffic

129

Solved

inside

Participant

725

R82 VSNext cluster with multiple VS

725

Solved

inside

Collaborator

507

Something to keep in mind when VPN tunnel is down

318

inside

Contributor

631

Problem with VPN & PPPoE: R81.20 - Build 039

631

inside

Explorer

396

Usage of XFF with Identity Awareness and Identity Agent

1493

Solved

inside

Legend

192

Question about 6600 fw replacement

305

inside

Legend

188

Site-to-Site AWS VPN not working with Central Managed SMB.

288

Solved

inside

Explorer

659

IDC events not coming on Firewall

659

inside

Contributor

345

Zoom and Custom Application/Site

410

inside

Collaborator

1235

About "CPNotEnoughDataForRuleMatch" and connection reset

1235

Solved

inside

Employee

57910

How to manually delete an entry from the Connections Table

57910

Solved

inside

Contributor

165

access to azure web server via office CP and s2s VPN

165

inside

Explorer

742

IPS Updates & Threat Emulation Not Working

742

inside

Contributor

7539

Identity awareness and ADS machine identity propagation

7539

Solved

inside

Legend

207

Ikeview/infoview utilities issue

207

inside

Legend

6408

Checkpoint connectivity between management & gateway over vpn

242

inside

Explorer

163

Loss of access to hardware after enabling p2p ospf

163

inside

Participant

181

VPN Login Failure with Azure MFA

224

inside

Explorer

184

VSX Incorrect configuration - Local cluster member has fewer cluster interfaces configured

184

Solved

inside

Explorer

4769

Check Point RA VPN : force the use of a specific user certificate in Windows Store

4769

inside

Contributor

1430

Identity Awareness "domain name not configured" -> nt-autoritÄt

1430

inside

Advisor

234

Suspicious traffic passed through Implied Rule - accept_outgoing

234

inside

Explorer

300

Do not understand how does Aggressive Aging work with default settings

666

inside

Contributor

183

Cross-site communication problem

183

Solved

inside

Collaborator

1744

Help Needed: Site-to-Site VPN Setup (Checkpoint 3600 & Fritzbox Home Router)

1744

inside

Contributor

1331

High CPU spike in GW during access policy installation

304

inside

Advisor

561

Unexpected Error in Box 9700 CP

561

Solved

inside

Contributor

462

active cluster member full partition

462

inside

Explorer

291

Remote gateways connecting to SMS over internet

291

Solved

inside

Explorer

563

Objects based on AD domain info

149

Solved

inside

Participant

3035

FTP service accepting unencrypted credentials

3035

Solved

inside

Advisor

354

Enabling Check Point FW in Transparent Mode

354

Solved

inside

Collaborator

307

VRRP not enabled: R81.20 ClusterXL with VRRP

307

Solved

inside

Participant

505

Check Point Online Web Service Response Time

505

Solved

inside

Contributor

3397

VSX + VSLS Patching: Disaster Recovery when things go wrong?

469

inside

Explorer

285

R82 Upgrade HA Configuration Error

285

Solved

inside

Explorer

1176

VALIDATION ERROR AFTER R82 UPGRADATION

1176

inside

Explorer

194

Check Point Route Based VPN configuration step by step between Checkpoint to Check Point firewall.

194

inside

Explorer

302

SMS and VSX gateway communication over ipsec tunnel

302

inside

Contributor

194

Application Server Message Block v1 (SMBv1) experience

194

inside

Contributor

407

Replacement for the Quantum 3000 Series (3600/3800)?

407

Solved

inside

Explorer

456

No ICMP traffic trough VPN after migration

456

Solved

inside

Contributor

239

Linux traceroute packets blocked, but not window packets

239

Solved

inside

Collaborator

1680

BGP Community on Inbound Routemaps

1680

Solved

inside

Participant

2504

Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

2504

inside

Legend

10103

How to add a second Sync interface in VSX

324

inside

Explorer

30932

How to Monitor Concurrent VPN users connected to a Gateway (OID)

30932

Solved

inside

Explorer

417

IA MUH agent does not pick up identities for all applications on AVD

314

inside

Employee

2047

R81.20 JHF41 TCP Handshake counter fills up

2047

inside

Contributor

321

Hide Internal Network - Interface Specific?

321

inside

Participant

355

Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

355

inside

Contributor

439

bringing new appliances into a cluster

339

Solved

inside

Contributor

358

Can we use Dell R760 as Open Server?

549

inside

Explorer

246

Can Virtual switch with no uplinks can be used to propogate routes between two virtual-systems

246

Solved

inside

Explorer

273

Cluster Node Failover/Switching Issue in Check Point Environment

273

inside

Participant

236

See diff of policy changes on specific gateway not updated in months prior to installing?

236

inside

Advisor

654

Identity Awareness Portal with iDP Auth - LoginSequenceView css not "found"

654

inside

Contributor

423

Configuration of MTA SMTP/TLS Connection | Which Certificate Format

627

Solved

inside

Collaborator

590

how to check what was going on during upgrading in clish

590

inside

Advisor

185

LDAP connections are not closed and accumulating on the gateway

185

Solved

inside

Advisor

4249

SAML authentication stops working after FW Upgrade / Fresh Install

4249

inside

Explorer

352

How do I enter SFTP path in Spark periodic-backup?

312

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 25 Mar 2025 @ 09:00 AM (CET)

CheckMates Live Paris: Harmony – Protection avancée de l’espace utilisateur

In-Person

Tue 25 Mar 2025 @ 09:00 AM (EDT)

Canada In-Person Cloud Security with Hands-On CloudGuard Workshops!

Virtual

Wed 26 Mar 2025 @ 04:00 PM (IST)

Validating Cyber Exposures: How To Continuously Test Exposures For Exploitability

Virtual

Thu 27 Mar 2025 @ 03:00 PM (CET)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - EMEA

Virtual

Thu 27 Mar 2025 @ 02:00 PM (EDT)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - Americas

Virtual

Tue 01 Apr 2025 @ 11:00 AM (IDT)

Simplifying Zero Trust with Infinity Identity: Centralized, Scalable, Secure - EMEA

Virtual

Wed 26 Mar 2025 @ 04:00 PM (IST)

Validating Cyber Exposures: How To Continuously Test Exposures For Exploitability

Virtual

Thu 27 Mar 2025 @ 03:00 PM (CET)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - EMEA

Virtual

Thu 27 Mar 2025 @ 02:00 PM (EDT)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - Americas

Virtual

Tue 01 Apr 2025 @ 11:00 AM (IDT)

Simplifying Zero Trust with Infinity Identity: Centralized, Scalable, Secure - EMEA

Virtual

Tue 01 Apr 2025 @ 06:00 PM (IDT)

Simplifying Zero Trust with Infinity Identity: Centralized, Scalable, Secure - Americas

Virtual

Wed 02 Apr 2025 @ 03:00 PM (CEST)

The Power of SASE: Smarter Security, Stronger Network - EMEA

In-Person

Tue 25 Mar 2025 @ 09:00 AM (CET)

CheckMates Live Paris: Harmony – Protection avancée de l’espace utilisateur

In-Person

Tue 25 Mar 2025 @ 09:00 AM (EDT)

Canada In-Person Cloud Security with Hands-On CloudGuard Workshops!

In-Person

Tue 08 Apr 2025 @ 12:00 PM (MDT)

Denver: CPX 2025 Recap

In-Person

Thu 10 Apr 2025 @ 10:00 AM (EEST)

CheckMates Live Sofia - Maintenance and Upgrade Best Practices

In-Person

Thu 10 Apr 2025 @ 12:00 PM (PDT)

Renton, WA: Golf and Learn!

In-Person

Wed 16 Apr 2025 @ 12:00 PM (PDT)

Hillsboro, OR: Golf and Learn!

CheckMates Events

Are you a member of CheckMates?