Security Gateways

Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages

Introduction to Lakera:
Securing the AI Frontier!

Watch Now!

Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall

Learn More

HTTPS Inspection
Help us to understand your needs better

Take the Survey

CheckMates Go:
SharePoint CVEs and More!

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Participant

27085

Maximum number of routing entries checkpoint fw

27085

Solved

inside

Advisor

27016

Intermittent VOIP One Way Audio

26799

Solved

inside

MVP Gold

26600

AD-query failed with Microsoft Windows Server 2022

26600

Solved

inside

Advisor

26599

Remote Access VPN Authentication Failure

26599

Solved

inside

Collaborator

26533

LOM password reset on 5600 and 12400 appliances

26533

inside

Mentor

26399

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

26399

inside

Participant

26310

what information do we need from the remote site customer when creating site to site VPN?

26310

inside

MVP Gold

25968

Cipher Configuration Tool (CCT)

25968

inside

Explorer

25790

Site to Site VPN - Check Point R80.10 to Cisco ASA - Troubleshooting

25790

inside

Participant

25620

UserCheck Block Page Times Out

25620

Solved

inside

Participant

25617

Encryption Failure: according to the policy the packet should not have been decrypted

25617

inside

Explorer

25399

First packet isn't Syn; tcp_flags: ACK

25399

Solved

inside

Contributor

25395

TCP Packet out of state, First Packet is not syn

25127

Solved

inside

Participant

24991

ClusterXL - standby cannot reach gateway

24991

Solved

inside

Advisor

24912

Virtual Standby member cannot reach internal DNS or Internet

24912

inside

Collaborator

24617

Problem with VPN traffic and Nated IPs

24617

inside

Advisor

24499

Identity sharing - how to change modes

24499

Solved

inside

Contributor

24405

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

24405

Solved

inside

Contributor

24339

Need CLI Command to see Interfaces and Associated IP Information

24339

Solved

inside

Explorer

24099

Identity Awareness using Azure AD

24099

Solved

inside

Advisor

24099

HTTPS Certificate validation - SK159872

24099

Solved

inside

Advisor

24072

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

24072

inside

Admin

23924

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

23924

Solved

inside

Contributor

23799

cphaprob status showing down cause by routed

23799

Solved

inside

Contributor

23699

AW keeps deleting Dameware Service

23499

inside

Participant

23434

How to block traffic coming from known malicious IP addresses R81.10

23404

Solved

inside

Contributor

23311

Checkpoint gateway Memory Usage

23199

Solved

inside

Contributor

23095

Wrong peer gateway for decrypted packet (VPN Error code 01)

23095

Solved

inside

Advisor

22899

WMI Permission denied - From this months Windows Update

22899

Solved

inside

Participant

22806

CPview and Top-connections in R80.20

22806

inside

Contributor

22799

Installing VSX on on VMware ESXi

22606

inside

Employee

22418

Lightboard Series: High Availability Architecture with R80.10

22418

Solved

inside

Contributor

22400

Blocking malicious IP addresses (sk103154) in VSX

22400

Solved

inside

Participant

22399

Troubleshooting dropped packets in Checkpoint using zdebug

22399

inside

Collaborator

22399

Firewall HA status (health check)

22399

Solved

inside

Explorer

22022

IN /VAR/LOG/messages keep getting Stopping CUL mode

21929

inside

Collaborator

21918

Displaying transceiver properties

21807

inside

Participant

21800

Allow file download and block file upload with wetransfer

21800

Solved

inside

Contributor

21799

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

21300

Solved

inside

Collaborator

21299

F5 BIG-IP ICAP and SandBlast (TEX)

21299

inside

Advisor

21299

Not substituted certificate in browser Https Inspection

21206

inside

Advisor

21196

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

21043

inside

MVP Gold

21032

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

21032

Solved

inside

Participant

21000

Why CP drops RST-ACK packets from client?

21000

Solved

inside

Participant

20899

Notify when certificate expired

20899

inside

Collaborator

20899

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

20800

inside

Collaborator

20799

Cluster XL - Failover due to Fullsync PNOTE ON

20799

Solved

inside

Participant

20722

Checkpoint device does not establish VPN tunnel

20722

inside

Champion

20636

Policy installation failures with Error code: 0-2000183-27

20636

Solved

inside

Contributor

20599

Is there SNI support for inbound HTTPS inspection in R80.20?

20599

Solved

inside

Contributor

20530

Restricting Remote Access by IPv4 Address

20530

inside

Contributor

20332

VSX cluster problem - are we alone?

20332

Solved

inside

Contributor

20126

SSL Certificate Cannot Be Trusted (vulnerability)

20126

Solved

inside

Contributor

20099

Gaia r80.10 tag vlan 1 and native vlan

20099

inside

Advisor

19981

Checkpoint to Azure Route based - guide

19981

inside

Admin

19899

How do I verify Threat Emulation is working?

19899

Solved

inside

Advisor

19720

Terrible performance IPHTTPS - Checkpoint SG 15600

19694

inside

Advisor

19650

BGP over VPN between Azure.docx

19650

inside

Participant

19642

Password hashes, sha512 and the expert password

19642

Solved

inside

MVP Gold

19499

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

19399

inside

Participant

19099

Troubleshooting performance issues

19099

inside

Participant

19020

Automatic Configuration of Appliance on boot

18999

Solved

inside

MVP Gold

18936

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

18936

inside

Advisor

18915

Identity Collector: ISE and AD continually over-writing each other on the PDP

18915

Solved

inside

Explorer

18899

Firewall rule for any tcp and udp port

18899

inside

Participant

18840

Checkpoint Advanced OSPF Capability

18700

inside

Collaborator

18699

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

18699

inside

Employee Alumnus

18658

Understanding Threat Emulation logs

18658

Solved

inside

Participant

18556

Snapshot vs Backup - what's the difference?

18556

inside

Admin

18519

Check Point Threat Prevention Packet Flow and Architecture

18519

Solved

inside

MVP Gold

18502

VPN Check Point - Palo Alto issue

18502

Solved

inside

Contributor

18499

Block WhatsApp Uploads/Downloads

18499

inside

Collaborator

18499

High cpu utilization on RAD Process

18499

Solved

inside

Contributor

18482

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

18482

Solved

inside

Participant

18423

Uploading file works on cloud but not local gateway

18423

Solved

inside

Participant

18410

Test bandwidth/speed from Gaia

18410

inside

Contributor

18341

URL Filtering Troubleshooting Help

18341

inside

Participant

339

TIL: no impact when changing physical port in Virtual Switch in a VSX Environment

339

Solved

inside

Participant

528

Not able to install latest Take

528

Solved

inside

MVP Gold

367

Any idea when it will be possible to configure routemaps via web UI?

367

Solved

inside

Advisor

371

R82 Gateway - Public Interface - Extender.html

371

inside

Participant

618

IPSec VPN redundancy is not working using MEP

618

inside

Explorer

320

Question about Sync Interface Routing in Check Point Cluster

320

Solved

inside

Contributor

335

VPN SITE TO SITE CHECKPOINT VSX ROUTE BASED

2852

Solved

inside

Participant

3541

ISP redundancy and DNS records for Web Servers in DMZ

3541

Solved

inside

Advisor

6081

BGP peer Throught IPSEC tunnel

6081

inside

MVP Gold

203

Tip for case where adding so many wildcards/fqdns does not work in the policy

203

Solved

inside

MVP Gold

385

VSX as Web proxy using IP different from the interface

912

inside

MVP Silver

779

Debugging IKE/Tunnel establishment on VSX R81.20.

3701

Solved

inside

MVP Gold

773

ClusterXL - moving to newer appliances

529

inside

Employee

479

NIAP Common Criteria cPP for R81.20 on the Product Compliant List

479

inside

Collaborator

150

Change cluster interface to private and required interfaces count didn't change

150

inside

Explorer

318

BGP sessions under the same VLAN

318

inside

MVP Silver

607

DNS traffic in DETECT mode in VSX

607

inside

Admin

692

Identity Awareness Deep Dive August 2025: Video and Slides

692

Solved

inside

Contributor

1569

AD Quary to Identity collector

1569

Solved

inside

Contributor

1446

Packet timeout with unknown reason in Quantum Force 9100 only

1446

inside

MVP Silver

230

Possible attacks in a VSX environment

230

Solved

inside

Explorer

269

UserCheck not using provided certificate - MultiPortal configuration?

416

inside

Contributor

4509

R81.20 first time wizard Gui setup error

4509

Solved

inside

Collaborator

372

Management Server Traffic Hits the Implied Rules

372

Solved

inside

Collaborator

358

ClusterXL – Changing MGMT and eth2 from 1Gb to 10Gb

358

Solved

inside

Explorer

629

Upgrade R81.10 Cluster to R82 issues

629

Solved

inside

Participant

15988

Default State table Timers on Checkpoint?

15988

Solved

inside

Participant

356

CPNotEnoughDataForRuleMatch first possible match is Cleanup Rule and is allowing traffic the Cleanup

356

Solved

inside

Explorer

261

Connect single quantum gateway to redundant core switches

196

inside

MVP Silver

896

Load Balancing on Quantum Spark 1800 SMB

2616

Solved

inside

Participant

179

enabling MDPS on 3600 or 3900 devices works as expected ?

179

Solved

inside

Contributor

856

Traffic logs show drop message "IP routing failed (ipin routing failure)"

10961

inside

Contributor

215

Anti-Spoofing on VTI interfaces

215

Solved

inside

MVP Silver

266

Alert in VS from the SmartConsole

266

Solved

inside

Advisor

283

FTW using ElasticXL cause a fatal error

283

inside

Collaborator

544

VSNext and Mobile Access issue

544

inside

MVP Gold

585

changing platform portal port on VSNext

585

Solved

inside

Explorer

466

Cluster active member lost R81.20 Take 98

466

inside

Contributor

3929

Child SA exchange: Sending notification to peer: Traffic selectors unacceptable

3929

inside

Contributor

222

Port TCP 264 displays hostname and domain name in the port scan.

222

inside

MVP Silver

678

Unusual higher that average CPU

3160

inside

Advisor

1007

Installing Hotfix on R82 ElasticXL

712

Solved

inside

Advisor

660

What are the 2550, 2570, 2590 and 2680 appliances

660

inside

Advisor

311

Block WhatsApp Uploads/Downloads

18527

inside

Contributor

152

MAB portal File Share App web-interface customization

152

inside

Advisor

171

SSL Inbound Inspection on IMAPS

171

inside

MVP Silver CHKP

3143

R81.20 JHF41 TCP Handshake counter fills up

3143

inside

Participant

477

Auditing File Uploads (with view to block using Application Rule)

477

Solved

inside

Advisor

526

Log viewer Resolve (IP) is always checked/enabled by default.

559

inside

Contributor

612

AppControl/URLF - Rules and classification

612

Solved

inside

MVP Gold

6438

How to view cpview history file on other machine

6438

inside

MVP Gold

15615

Assistance Required: Issue with UDP Port 5060 Packet Drop

966

Solved

inside

Explorer

236

How to change path in a Scheduled system backup?

236

inside

MVP Silver

521

Checkpoint Identity collector - gateway certificate untrusted

2384

inside

Contributor

596

Anti-Spoofing on Internet (External) Interface?

596

inside

MVP Gold

6714

Sharing Threat Emulation Appliance Between Two Security Gateways

470

Solved

inside

Contributor

1340

Ordered Layers vs In-Line Layers

1340

inside

Contributor

436

Replace a cluster of 15400 appliance by a cluster of 9700 appliance

290

Solved

inside

Explorer

213

AAAA (IPv6) DNS requests control

213

Solved

inside

Explorer

6023

Nat rule over tunnel/community

6023

inside

Participant

141

MEP VPN Gateway: force specific client to connect to backup gateway

141

inside

Contributor

12800

Phase 2 Site-to-site VPN error

12800

inside

MVP Silver CHKP

714

New MCP Signature Now Available in Application Control

714

Solved

inside

Explorer

182

R81.20 snapshot size more than doubled as compared to R80.40

182

inside

MVP Silver

4016

First time wizard stucks at 90% R80.40

4016

Solved

inside

Advisor

1335

ElasticXL Traffic Distribution question

1335

Solved

inside

Explorer

863

Different DNS server per Domain R81.20

863

inside

Collaborator

338

BGP Graceful Restart in HA cluster in Azure

338

Solved

inside

Explorer

2500

Loopback interface on VSX virtual system

2500

Solved

inside

Explorer

4002

Loopback interface is going out of routing table

4002

Solved

inside

Advisor

787

Brand new appliance with non-default IP on Mgmt interface

787

inside

Collaborator

1339

Application Control and URL filtering Matching Multiple Categories/Objects

1339

inside

Explorer

323

Check Point allows HTTP/HTTPS without rule

311

inside

MVP Silver

318

Routing the return Traffic Through the Same incoming interface

402

inside

Contributor

2729

Identity Collector support for Cisco ISE 3.2

2729

inside

Explorer

376

Identity Agent Connection Issue

376

Solved

inside

Advisor

11025

Gateway Firewall running above 90% Memory usage

15851

inside

Admin

665

Web Filtering Best Practices June 2025: Video and Slides

665

inside

Explorer

768

Issues Replacing/Upgrading Appliances in H/A Cluster

768

Solved

inside

Participant

578

Gaia Radius auth with encryption

578

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

Tue 07 Oct 2025 @ 10:00 AM (CEST)

Cloud Architect Series: AI-Powered API Security with CloudGuard WAF

In-Person

Wed 08 Oct 2025 @ 09:00 AM (EDT)

Washington DC: Hands-On CloudGuard Workshops

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

In-Person

Mon 13 Oct 2025 @ 08:00 AM (CEST)

Madrid: Hands-On CloudGuard Workshops

Virtual

Thu 09 Oct 2025 @ 10:00 AM (CEST)

CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!

Virtual

Thu 09 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Identity Awareness Best Practices

Virtual

Wed 22 Oct 2025 @ 11:00 AM (EDT)

Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents Outages

Virtual

Thu 23 Oct 2025 @ 03:00 PM (CEST)

EMEA Deep Dive: Troubleshooting 101

Virtual

Wed 29 Oct 2025 @ 03:00 PM (CET)

EMEA Deep Dive: Maestro Best Practices

Virtual

Wed 29 Oct 2025 @ 03:00 PM (EDT)

Americas Deep Dive: Maestro Best Practices

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

In-Person

Wed 08 Oct 2025 @ 09:00 AM (EDT)

Washington DC: Hands-On CloudGuard Workshops

In-Person

Mon 13 Oct 2025 @ 08:00 AM (CEST)

Madrid: Hands-On CloudGuard Workshops

In-Person

Tue 14 Oct 2025 @ 10:00 AM (CEST)

CheckMates Austria Road Show - CheckMates Live Graz

In-Person

Wed 15 Oct 2025 @ 09:00 AM (EDT)

Atlanta, GA: Hands-on CloudGuard Workshops

In-Person

Wed 22 Oct 2025 @ 09:00 AM (EDT)

Tampa, FL: Hands-on CloudGuard Workshops

CheckMates Events

Are you a member of CheckMates?