Security Gateways

MVP 2026: Submissions
Are Now Open!

More details here

What's New in R82.10?
10 December @ 5pm CET / 11am ET

Announcing Quantum R82.10!

Learn More

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
Maestro Madness

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Contributor

28199

Remote Access VPN Authentication Failure

27799

Solved

inside

Participant

27798

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

27685

inside

Contributor

27678

Increasing disk space vg_splat-lv_current

27678

Solved

inside

MVP Gold

27499

AD-query failed with Microsoft Windows Server 2022

27499

inside

Participant

27199

Maximum number of routing entries checkpoint fw

27199

Solved

inside

Collaborator

27101

LOM password reset on 5600 and 12400 appliances

27101

inside

Participant

26999

what information do we need from the remote site customer when creating site to site VPN?

26999

inside

Participant

26700

UserCheck Block Page Times Out

26700

Solved

inside

Contributor

26599

First packet isn't Syn; tcp_flags: ACK

26399

inside

Collaborator

26100

Problem with VPN traffic and Nated IPs

26100

Solved

inside

Advisor

26099

Virtual Standby member cannot reach internal DNS or Internet

26099

Solved

inside

Participant

26099

Encryption Failure: according to the policy the packet should not have been decrypted

26099

inside

MVP Platinum

26045

Cipher Configuration Tool (CCT)

26045

Solved

inside

Participant

25999

ClusterXL - standby cannot reach gateway

25999

inside

Explorer

25999

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

25999

Solved

inside

Advisor

25700

TCP Packet out of state, First Packet is not syn

25599

Solved

inside

Advisor

25397

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

25397

Solved

inside

Explorer

25300

Identity Awareness using Azure AD

25300

Solved

inside

Contributor

25199

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

25199

inside

Contributor

25099

How to block traffic coming from known malicious IP addresses R81.10

25099

Solved

inside

Advisor

24999

HTTPS Certificate validation - SK159872

24999

inside

Admin

24799

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

24799

inside

Contributor

24799

Checkpoint gateway Memory Usage

24799

inside

Advisor

24699

Identity sharing - how to change modes

24699

Solved

inside

Contributor

24699

Need CLI Command to see Interfaces and Associated IP Information

24699

inside

Explorer

24603

Troubleshooting dropped packets in Checkpoint using zdebug

24400

inside

Employee Alumnus

24299

AW keeps deleting Dameware Service

24299

Solved

inside

Contributor

24299

cphaprob status showing down cause by routed

24299

inside

Participant

24099

Allow file download and block file upload with wetransfer

24099

Solved

inside

Contributor

23901

WMI Permission denied - From this months Windows Update

23901

inside

Participant

23899

Wrong peer gateway for decrypted packet (VPN Error code 01)

23699

inside

Collaborator

23598

Firewall HA status (health check)

23598

Solved

inside

Participant

23597

CPview and Top-connections in R80.20

23597

Solved

inside

Contributor

23500

Blocking malicious IP addresses (sk103154) in VSX

23500

Solved

inside

Participant

23299

IN /VAR/LOG/messages keep getting Stopping CUL mode

23299

inside

Collaborator

23200

Installing VSX on on VMware ESXi

23199

inside

Contributor

23099

Lightboard Series: High Availability Architecture with R80.10

22600

inside

Participant

22599

Displaying transceiver properties

22599

inside

Contributor

22399

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

22199

inside

Collaborator

22199

Not substituted certificate in browser Https Inspection

22199

inside

Advisor

22099

F5 BIG-IP ICAP and SandBlast (TEX)

22000

inside

Advisor

21900

Cluster XL - Failover due to Fullsync PNOTE ON

21900

Solved

inside

Participant

21899

Why CP drops RST-ACK packets from client?

21899

Solved

inside

Participant

21799

Notify when certificate expired

21799

Solved

inside

Collaborator

21799

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

21600

Solved

inside

Contributor

21300

Restricting Remote Access by IPv4 Address

21300

Solved

inside

MVP Gold

21299

Is there SNI support for inbound HTTPS inspection in R80.20?

21299

inside

MVP Platinum

21299

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

21299

inside

Contributor

21299

Terrible performance IPHTTPS - Checkpoint SG 15600

21299

Solved

inside

Contributor

21199

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

21199

inside

Collaborator

21198

VPN Check Point - Palo Alto issue

21000

Solved

inside

Participant

20999

Checkpoint device does not establish VPN tunnel

20999

inside

Contributor

20999

VSX cluster problem - are we alone?

20999

inside

Champion

20900

Policy installation failures with Error code: 0-2000183-27

20900

Solved

inside

Contributor

20900

Block WhatsApp Uploads/Downloads

20900

Solved

inside

Contributor

20800

SSL Certificate Cannot Be Trusted (vulnerability)

20800

inside

Advisor

20799

Checkpoint to Azure Route based - guide

20799

Solved

inside

Contributor

20799

Gaia r80.10 tag vlan 1 and native vlan

20799

inside

Admin

20799

How do I verify Threat Emulation is working?

20799

inside

Advisor

20600

BGP over VPN between Azure.docx

20600

Solved

inside

MVP Platinum

20599

Password hashes, sha512 and the expert password

20499

Solved

inside

Collaborator

20199

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

20199

Solved

inside

Advisor

20199

Identity Collector: ISE and AD continually over-writing each other on the PDP

20090

Solved

inside

MVP Gold

19599

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

19599

Solved

inside

Explorer

19500

Firewall rule for any tcp and udp port

19500

Solved

inside

Contributor

19500

Automatic Configuration of Appliance on boot

19500

inside

Participant

19499

Troubleshooting performance issues

19499

Solved

inside

Participant

19405

Apple services not working with HTTPS inspection

19405

inside

Participant

19400

Checkpoint Advanced OSPF Capability

19400

inside

Participant

19399

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

19300

Solved

inside

Participant

19300

Test bandwidth/speed from Gaia

19300

inside

Contributor

19300

URL Filtering Troubleshooting Help

19300

inside

MVP Platinum

19299

High cpu utilization on RAD Process

19298

Solved

inside

MVP Platinum

19200

HTTPS inspection certificate question

19200

inside

Participant

19199

'TCP packet out of state' drops

19199

inside

Collaborator

19199

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

19199

Solved

inside

Contributor

19199

SecureXL DoS Rate Limiting (samp rules)

19199

inside

Contributor

380

unable to activate license with new management ip for quantum gateways (security group)

380

inside

Collaborator

771

BGP Graceful Restart in HA cluster in Azure

771

Solved

inside

Contributor

6170

install a Certificate for IPSec VPN

6170

inside

Explorer

282

Access Control and Threat Prevention Best Practices TechTalk: Video, Slides, and Q&A

2277

Solved

inside

Collaborator

259

“Legacy GeoProtection Maximum Ranges” alert

259

Solved

inside

Explorer

554

Modifying Public Interface Topology

198

Solved

inside

MVP Gold

3726

saml redirect from portal page broke after upgrading from JHF84 to JHF89

3726

inside

MVP Gold CHKP

674

Securing Microsoft Intune using Access Control Policy

674

Solved

inside

Contributor

321

In a cluster environment, is it possible to make the snmp daemon listen on a VIP ?

321

inside

Participant

491

ISP Redundancy: LAN via ISP‑1, WLAN via ISP‑2

491

Solved

inside

Explorer

223

PPPoE is not supported with SecureXL User Space mode on 3950, R82.10?

223

inside

Participant

667

One cluster not establishing s2s tunnels - Invalid IKE SPI

622

Solved

inside

Advisor

324

Is it possible to enable SSH on Security Gateway during initial setup?"

324

Solved

inside

MVP Silver

397

VSX R80.40 - Remote access and RADIUS

4775

Solved

inside

Contributor

2765

Has anyone been able to have redundant VPN tunnels with AWS using vti's?

2765

Solved

inside

MVP Platinum

920965

470

317

R8x Ports Used for Communication by Various Check Point Modules (new version 2.1)

920965

470

317

Solved

inside

Contributor

934

Migrating R81.20 Cluster XL to new 9100 appliances

1101

inside

Participant

649

IPsec VPN with both gateways in the same subnet

649

inside

Contributor

992

IPS Management Update requires manual update

992

Solved

inside

Explorer

231

IDM integration with Check Point

221

Solved

inside

Advisor

2734

R81.20 JHF99 - Radius VPN Issues

2734

inside

Explorer

212

unable to advertise network to peer via iBGP

212

Solved

inside

Participant

672

Lightspeed accelerated connection problems after R81.20 JHF Take 111

672

Solved

inside

Authority

720

Troubleshooting 101 EMEA October 2025: Video and Slides

1447

Solved

inside

Participant

768

Adding security zone to gateway interface using Ansible

768

Solved

inside

Advisor

331

Password error while renewing SSL certificate

660

Solved

inside

Participant

604

Removing VS after deleting its domain (MDS / VSX)

604

inside

Explorer

5464

Old version HF bundles taking up disk space, best way to remove?

874

Solved

inside

Participant

625

SNMP monitoring of the IPS blade

625

Solved

inside

Contributor

915

Not able to establish BGP when ISP failover, BGP is using Configured VTI

915

Solved

inside

Contributor

1286

Delay when visiting sites hosted at Cloudflare

1286

inside

Participant

450

Disabling TLS 1.0 and TLS 1.1 on Quantum Spark 1555

450

inside

MVP Gold CHKP

428

Configuring Inbound HTTPS Inspection

428

Solved

inside

Collaborator

653

Enabling AD password expiration warning/change and SupportOldSchema impact in an MDS enviornment

653

inside

Collaborator

1177

9200 1st Time Wizard WebUI - hangs

1177

inside

Contributor

5383

R81.20 first time wizard Gui setup error

5383

inside

Explorer

626

LOM port configuration with radius

626

inside

Contributor

710

Route Based VPN (VTI) through Secondary ISP on Load Sharing Firewalls

710

Solved

inside

Participant

877

ISP Link Redundancy - Load Sharing / Gateway keeps traffic in a single ISP

877

Solved

inside

MVP Silver

374

A Thought about the DHCP server on the gateway

374

Solved

inside

Contributor

462

Inbound SSH traffic inspected by HTTPS inspection ? What changed ?

462

Solved

inside

MVP Platinum

516

Virtual Systems package License question

5217

Solved

inside

Collaborator

407

Route Based VPN Tunnel on VSX (Virtual System)

441

Solved

inside

Participant

519

The IP quantity limit of a NetworkFeed

519

Solved

inside

Advisor

5843

What System TLS Configuration do?

397

Solved

inside

Explorer

1003

HTTPSi INBOUND with more than one certificate (SG9100, R82 JHFT39)

1003

Solved

inside

Collaborator

378

Failed to read certificate from database after enabling/disabling IPSec VPN blade (centrally managed

378

Solved

inside

Advisor

371

Warning about topology when installing a policy with the Internet object

371

inside

Explorer

207

Cisco Jabber External Connectivity Issue After Migrating from ASA to Check Point (Solved)

207

inside

Leader

441

Identity Awarenes - Identity Collector and ISE group filters (regex)

441

Solved

inside

MVP Gold

1001

Routing the return Traffic Through the Same incoming interface

1084

inside

Contributor

929

Sync Redundancy in ClusterXL with MDPS

929

inside

Collaborator

229

Logging Server crashing after calling Web Smartviewer

229

Solved

inside

Participant

364

Hands-On Quantum Network Firewall as Web Proxy - Proxy Chaining (Oct'25)

303

inside

MVP Gold CHKP

237

Hands-On Unknown Threat Prevention (Oct'25)

237

inside

MVP Gold CHKP

213

Hands-on Adjusting Threat Prevention to Your Needs (Oct'25)

213

inside

MVP Gold CHKP

257

Hands-On Known Threat Prevention (Oct'25)

257

inside

Contributor

993

Published Vmware vSphere on MAB Web portal.

993

inside

MVP Gold CHKP

261

Hands-on Access and Application Control

261

inside

MVP Gold CHKP

378

Hands-on HTTPS Inspection (Oct'25)

378

inside

Collaborator

10293

Using Clusterxl_admin down/up on members with differnet versions

10293

Solved

inside

Advisor

655

Small 25 person branch office - Do I need a seperate ISP router?

655

Solved

inside

Collaborator

3997

implied rules getting hit and dropping traffic

3997

Solved

inside

Collaborator

655

Pushing configuration to VSX fails by Blade activation

655

Solved

inside

Explorer

473

First Packet application detection mechanism

473

Solved

inside

Explorer

435

Firewall Decom: Investigating Interface Traffic

435

Solved

inside

MVP Platinum

1994

Converting Tool - ClusterXL to ElasticXL

1994

Solved

inside

Contributor

390

BGP Route imports, Route filter vs Route maps?

390

inside

Participant

349

Web Filtering Best Practices October 2025: Video and Slides

419

inside

Advisor

12226

Show bgp peers across VSX in CLI

12226

Solved

inside

Advisor

3156

VPN drops - decrypt mspi is not valid

3156

Solved

inside

Contributor

375

Threat Emulation failure "Gzip exceeded maximum decompression ratio"

375

Solved

inside

Advisor

1233

replacing the SSH connection port

259

Solved

inside

Contributor

3093

What happens if licences expire on gateway

3093

Solved

inside

Participant

871

Replacing R81.20 cluster with new R82 cluster

871

Solved

inside

Collaborator

37032

IPSec VPN - Multiple level chain of trust certificate

266

Solved

inside

Explorer

10739

S1C managed SG9100-Cluster Upgrade R81.20 JHFT105 > R82JHFT39 / best practise, hints recommendations

194

Solved

inside

MVP Platinum

20689

TACACS+ with Check Point Gaia & Cisco ISE — AuthZ Profile Created but Still Getting Denied

3097

inside

Participant

2588

OSPF stops annoucing connected routes

2588

inside

Contributor

1063

Alert message on Policy install after R81 upgrade

13285

inside

Contributor

191

Troubleshooting 101 Americas September 2025 Video and Slides

1303

inside

Participant

1539

Internet access rules for proxy and transparent

1539

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 09 Dec 2025 @ 09:00 AM (CET)

Paris, FR: Hands-On CloudGuard Workshops

Virtual

Wed 10 Dec 2025 @ 11:00 AM (EST)

TechTalk: What's New in R82.10

Virtual

Thu 11 Dec 2025 @ 11:00 AM (EST)

Tips and Tricks 2025 #17: MCP Servers

Virtual

Thu 11 Dec 2025 @ 03:00 PM (EST)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Fri 12 Dec 2025 @ 10:00 AM (CET)

Check Mates Live Netherlands: #41 AI & Multi Context Protocol

Virtual

Tue 16 Dec 2025 @ 05:00 PM (CET)

Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!

Virtual

Wed 10 Dec 2025 @ 11:00 AM (EST)

TechTalk: What's New in R82.10

Virtual

Thu 11 Dec 2025 @ 11:00 AM (EST)

Tips and Tricks 2025 #17: MCP Servers

Virtual

Thu 11 Dec 2025 @ 03:00 PM (EST)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Fri 12 Dec 2025 @ 10:00 AM (CET)

Check Mates Live Netherlands: #41 AI & Multi Context Protocol

Virtual

Tue 16 Dec 2025 @ 05:00 PM (CET)

Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!

Virtual

Tue 16 Dec 2025 @ 03:00 PM (EST)

Americas Deep Dive: HTTPS Inspection Best Practices

In-Person

Tue 09 Dec 2025 @ 09:00 AM (CET)

Paris, FR: Hands-On CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?