Security Gateways

CheckMates Fest 2026
Join the Celebration!

AI Security Masters
E1: How AI is Reshaping Our World

MVP 2026: Submissions
Are Now Open!

More details here

What's New in R82.10?

Watch Now

Overlap in Security Validation
Help us to understand your needs better

Take the Survey

CheckMates Go:
R82.10 and Rationalizing Multi Vendor Security Policies

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Contributor

28500

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

28200

Solved

inside

Advisor

28199

Remote Access VPN Authentication Failure

28199

Solved

inside

Participant

28099

Increasing disk space vg_splat-lv_current

27998

Solved

inside

MVP Gold

27900

AD-query failed with Microsoft Windows Server 2022

27900

inside

Collaborator

27500

Problem with VPN traffic and Nated IPs

27500

inside

Participant

27300

what information do we need from the remote site customer when creating site to site VPN?

27300

Solved

inside

Collaborator

27300

LOM password reset on 5600 and 12400 appliances

27300

inside

Participant

27299

Maximum number of routing entries checkpoint fw

27299

Solved

inside

Contributor

27299

UserCheck Block Page Times Out

27200

inside

Explorer

26799

First packet isn't Syn; tcp_flags: ACK

26799

Solved

inside

Advisor

26574

Virtual Standby member cannot reach internal DNS or Internet

26574

Solved

inside

Participant

26300

Encryption Failure: according to the policy the packet should not have been decrypted

26300

Solved

inside

Participant

26299

ClusterXL - standby cannot reach gateway

26299

inside

Explorer

26200

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

26200

inside

MVP Platinum

26099

Cipher Configuration Tool (CCT)

26099

Solved

inside

Advisor

25999

Checkpoint gateway Memory Usage

25901

Solved

inside

Advisor

25899

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

25899

Solved

inside

Explorer

25799

Identity Awareness using Azure AD

25799

inside

Explorer

25699

TCP Packet out of state, First Packet is not syn

25699

inside

Contributor

25699

How to block traffic coming from known malicious IP addresses R81.10

25699

Solved

inside

Contributor

25499

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

25499

Solved

inside

Participant

25499

Troubleshooting dropped packets in Checkpoint using zdebug

25499

Solved

inside

Advisor

25299

HTTPS Certificate validation - SK159872

25299

inside

Admin

25199

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

25199

inside

Explorer

25000

Need CLI Command to see Interfaces and Associated IP Information

24999

Solved

inside

Contributor

24799

Identity sharing - how to change modes

24799

inside

Employee Alumnus

24799

AW keeps deleting Dameware Service

24799

inside

Participant

24700

Allow file download and block file upload with wetransfer

24700

Solved

inside

Contributor

24400

cphaprob status showing down cause by routed

24400

Solved

inside

Collaborator

24300

WMI Permission denied - From this months Windows Update

24299

Solved

inside

Contributor

24100

Blocking malicious IP addresses (sk103154) in VSX

24100

Solved

inside

Contributor

24099

Wrong peer gateway for decrypted packet (VPN Error code 01)

23900

Solved

inside

Advisor

23899

Firewall HA status (health check)

23899

Solved

inside

Participant

23799

CPview and Top-connections in R80.20

23799

Solved

inside

Participant

23699

IN /VAR/LOG/messages keep getting Stopping CUL mode

23699

inside

Explorer

23599

Installing VSX on on VMware ESXi

23599

inside

Collaborator

23399

Displaying transceiver properties

22799

inside

Employee

22700

Lightboard Series: High Availability Architecture with R80.10

22700

inside

Contributor

22699

Not substituted certificate in browser Https Inspection

22600

inside

Admin

22499

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

22499

Solved

inside

Explorer

22498

Why CP drops RST-ACK packets from client?

22399

Solved

inside

MVP Platinum

22299

F5 BIG-IP ICAP and SandBlast (TEX)

22200

Solved

inside

Participant

22199

Notify when certificate expired

22199

inside

Collaborator

22199

Cluster XL - Failover due to Fullsync PNOTE ON

22199

inside

Advisor

22000

VPN Check Point - Palo Alto issue

21899

Solved

inside

Contributor

21800

Block WhatsApp Uploads/Downloads

21800

Solved

inside

MVP Gold

21799

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

21799

inside

Advisor

21747

Terrible performance IPHTTPS - Checkpoint SG 15600

21698

Solved

inside

Contributor

21600

Restricting Remote Access by IPv4 Address

21600

Solved

inside

Contributor

21599

Is there SNI support for inbound HTTPS inspection in R80.20?

21599

Solved

inside

Contributor

21399

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

21399

inside

MVP Platinum

21399

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

21399

inside

Collaborator

21399

VSX cluster problem - are we alone?

21299

inside

Admin

21200

How do I verify Threat Emulation is working?

21200

inside

Advisor

21199

Checkpoint to Azure Route based - guide

21199

Solved

inside

Contributor

21100

Gaia r80.10 tag vlan 1 and native vlan

21100

Solved

inside

Contributor

21100

SSL Certificate Cannot Be Trusted (vulnerability)

21100

Solved

inside

Participant

21099

Checkpoint device does not establish VPN tunnel

21099

inside

Advisor

20999

BGP over VPN between Azure.docx

20999

inside

MVP Platinum

20999

Policy installation failures with Error code: 0-2000183-27

20908

inside

Participant

20799

Password hashes, sha512 and the expert password

20799

Solved

inside

Participant

20600

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

20599

inside

Advisor

20598

Identity Collector: ISE and AD continually over-writing each other on the PDP

20598

Solved

inside

Advisor

20400

Apple services not working with HTTPS inspection

20299

Solved

inside

MVP Gold

19900

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

19900

inside

Participant

19899

Troubleshooting performance issues

19899

Solved

inside

MVP Platinum

19801

HTTPS inspection certificate question

19801

inside

Contributor

19794

URL Filtering Troubleshooting Help

19794

inside

Collaborator

19701

High cpu utilization on RAD Process

19701

inside

Participant

19700

Checkpoint Advanced OSPF Capability

19700

Solved

inside

Explorer

19700

Firewall rule for any tcp and udp port

19700

Solved

inside

Contributor

19699

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

19699

Solved

inside

Contributor

19699

SecureXL DoS Rate Limiting (samp rules)

19699

Solved

inside

Contributor

19600

Automatic Configuration of Appliance on boot

19600

inside

Participant

19599

'TCP packet out of state' drops

19599

Solved

inside

Participant

19599

Test bandwidth/speed from Gaia

19599

inside

Participant

19599

configure Proxy Arp on VSX cluster firewall

14852

Solved

inside

Explorer

572

HTTPS Inspections for traffic in the VPN tunnel

572

Solved

inside

Contributor

399

REMOVE WEAK CIPHER FROM TLS1.2

399

Solved

inside

Contributor

14314

Phase 2 Site-to-site VPN error

14314

Solved

inside

MVP Platinum

5456

Performance Limitations of Virtual Switches in a VSX Environment

5456

inside

Contributor

270

IPsec tunnel use private IP to negotia

270

Solved

inside

MVP Silver

779

Not defined interface topology

779

inside

MVP Platinum

9870

Install Certificate on firewall

476

inside

Advisor

469

Constant updates on PIM on GaiaOS article

469

inside

Advisor

1886

R82 | Large File Downloads Fail with HTTPS Inspection

1886

inside

Contributor

963

Question about VSNext Requirements

963

inside

MVP Platinum CHKP

1672

Tech Tip - Dynamic Routing: Connection Persistence

1672

inside

MVP Platinum CHKP

192

Tech Tip - Dynamic Routing: Protocol Rank

192

inside

MVP Platinum CHKP

234

Tech Tip - Dynamic Routing: BFD

234

inside

MVP Platinum CHKP

327

Tech Tip - Dynamic Routing: Default Originate

327

Solved

inside

Explorer

195

ISP Redundancy (two links) and a new one independent

195

Solved

inside

MVP Silver

700

LDAPS connections from the gateway will be downgraded to the legacy certificate validation.

676

inside

Admin

823

Identity Awareness Best Practices October 2025: Video and Slides

823

Solved

inside

Collaborator

988

Questions about Post-Quantum Cryptography (PQC) for IPsec VPN

988

inside

MVP Silver

5492

ElasticXL and VSNext CoreXL question

732

inside

Collaborator

1080

Nat inside VPN tunnel to Fortigate

1080

Solved

inside

Contributor

354

"Multiple obects have the same IP address" with no duplicate objects

354

Solved

inside

Contributor

539

S2S VPN State & Statistics per tunnel/peer?

2955

Solved

inside

Explorer

962

VM Lab R82 ElasticXL - Lightshot Partition is out of space

962

inside

Collaborator

956

migrating from ClusterXL to ElasticXL new cluster

956

Solved

inside

Contributor

9267

R81.20 - iked running while IPSec VPN blade not enabled

9267

Solved

inside

Collaborator

326

Certificate based S2S with Palo Alto

326

Solved

inside

Advisor

398

What does the priority field in Signature Tool (ACST) do?

398

inside

Contributor

156

Need a bit of clarification/sanity check for my hardware migration plan

934

inside

Contributor

1488

Gaia portal 404 after expanding logs volume

1488

inside

Collaborator

396

License Sync issue with MGMT Box

396

inside

Contributor

494

unable to activate license with new management ip for quantum gateways (security group)

494

inside

Collaborator

899

BGP Graceful Restart in HA cluster in Azure

899

Solved

inside

Contributor

6452

install a Certificate for IPSec VPN

6452

inside

Explorer

359

Access Control and Threat Prevention Best Practices TechTalk: Video, Slides, and Q&A

2543

Solved

inside

Collaborator

349

“Legacy GeoProtection Maximum Ranges” alert

349

Solved

inside

Explorer

724

Modifying Public Interface Topology

251

Solved

inside

MVP Gold

4076

saml redirect from portal page broke after upgrading from JHF84 to JHF89

4076

inside

MVP Gold CHKP

771

Securing Microsoft Intune using Access Control Policy

771

Solved

inside

Contributor

421

In a cluster environment, is it possible to make the snmp daemon listen on a VIP ?

421

inside

Participant

556

ISP Redundancy: LAN via ISP‑1, WLAN via ISP‑2

556

Solved

inside

Explorer

269

PPPoE is not supported with SecureXL User Space mode on 3950, R82.10?

269

inside

MVP Silver

857

One cluster not establishing s2s tunnels - Invalid IKE SPI

750

Solved

inside

Advisor

408

Is it possible to enable SSH on Security Gateway during initial setup?"

408

Solved

inside

MVP Silver

557

VSX R80.40 - Remote access and RADIUS

4858

Solved

inside

Contributor

3226

Has anyone been able to have redundant VPN tunnels with AWS using vti's?

3226

Solved

inside

MVP Platinum

925466

470

317

R8x Ports Used for Communication by Various Check Point Modules (new version 2.1)

925466

470

317

Solved

inside

Contributor

1209

Migrating R81.20 Cluster XL to new 9100 appliances

1344

inside

Participant

752

IPsec VPN with both gateways in the same subnet

752

inside

Contributor

1181

IPS Management Update requires manual update

1181

Solved

inside

Explorer

310

R81.20 "HTTP parsing error occurred" / body filter failed in response

14442

inside

MVP Silver

284

IDM integration with Check Point

284

Solved

inside

Advisor

3000

R81.20 JHF99 - Radius VPN Issues

3000

inside

Explorer

245

unable to advertise network to peer via iBGP

245

Solved

inside

Participant

793

Lightspeed accelerated connection problems after R81.20 JHF Take 111

793

Solved

inside

Authority

856

Troubleshooting 101 EMEA October 2025: Video and Slides

1607

Solved

inside

Participant

930

Adding security zone to gateway interface using Ansible

930

Solved

inside

Advisor

374

Password error while renewing SSL certificate

892

Solved

inside

Participant

768

Removing VS after deleting its domain (MDS / VSX)

768

inside

Explorer

5585

VPN community routing not working

10005

Solved

inside

Participant

1033

Old version HF bundles taking up disk space, best way to remove?

1033

Solved

inside

Participant

744

SNMP monitoring of the IPS blade

744

Solved

inside

Contributor

1137

Not able to establish BGP when ISP failover, BGP is using Configured VTI

1137

Solved

inside

Contributor

1534

Delay when visiting sites hosted at Cloudflare

1534

inside

Participant

582

Disabling TLS 1.0 and TLS 1.1 on Quantum Spark 1555

582

inside

MVP Gold CHKP

472

Configuring Inbound HTTPS Inspection

472

Solved

inside

Collaborator

803

Enabling AD password expiration warning/change and SupportOldSchema impact in an MDS enviornment

803

inside

Collaborator

1483

9200 1st Time Wizard WebUI - hangs

1483

inside

Contributor

5714

R81.20 first time wizard Gui setup error

5714

inside

Explorer

750

LOM port configuration with radius

750

inside

Contributor

820

Route Based VPN (VTI) through Secondary ISP on Load Sharing Firewalls

820

Solved

inside

Participant

1025

ISP Link Redundancy - Load Sharing / Gateway keeps traffic in a single ISP

1025

Solved

inside

MVP Silver

467

A Thought about the DHCP server on the gateway

467

Solved

inside

Contributor

586

Inbound SSH traffic inspected by HTTPS inspection ? What changed ?

586

Solved

inside

MVP Platinum

595

Virtual Systems package License question

5462

Solved

inside

Collaborator

494

Route Based VPN Tunnel on VSX (Virtual System)

532

Solved

inside

Participant

614

The IP quantity limit of a NetworkFeed

614

Solved

inside

Advisor

6023

What System TLS Configuration do?

483

Solved

inside

Explorer

1088

HTTPSi INBOUND with more than one certificate (SG9100, R82 JHFT39)

1088

Solved

inside

Collaborator

438

Failed to read certificate from database after enabling/disabling IPSec VPN blade (centrally managed

438

Solved

inside

Advisor

456

Warning about topology when installing a policy with the Internet object

456

inside

Explorer

242

Cisco Jabber External Connectivity Issue After Migrating from ASA to Check Point (Solved)

242

inside

Leader

477

Identity Awarenes - Identity Collector and ISE group filters (regex)

477

Solved

inside

MVP Gold

1103

Routing the return Traffic Through the Same incoming interface

1237

inside

Contributor

994

Sync Redundancy in ClusterXL with MDPS

994

inside

Collaborator

263

Logging Server crashing after calling Web Smartviewer

263

Solved

inside

Participant

419

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Thu 08 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 1: How AI is Reshaping Our World

Virtual

Fri 09 Jan 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 42: Looking back & forward

Wed 14 Jan 2026 @ 05:00 PM (CET)

CheckMates Fest 2026

Virtual

Wed 21 Jan 2026 @ 11:00 AM (EST)

TechTalk: Quantum SD-WAN Monitoring

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Thu 12 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 3: Exposing AI Vulnerabilities: CP<R> Latest Security Findings

Virtual

Thu 08 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 1: How AI is Reshaping Our World

Virtual

Fri 09 Jan 2026 @ 10:00 AM (CET)

CheckMates Live Netherlands - Sessie 42: Looking back & forward

Virtual

Wed 21 Jan 2026 @ 11:00 AM (EST)

TechTalk: Quantum SD-WAN Monitoring

Virtual

Thu 22 Jan 2026 @ 05:00 PM (CET)

AI Security Masters Session 2: Hacking with AI: The Dark Side of Innovation

Virtual

Thu 26 Feb 2026 @ 05:00 PM (CET)

AI Security Masters Session 4: Powering Prevention: The AI Driving Check Point’s ThreatCloud

CheckMates Events

Are you a member of CheckMates?