Security Gateways

Unleashing Performance & Stability
with Harmony Endpoint E88.70!

It's Here!
CPX 2025 Content

Get It Now

Zero Trust: Remote Access and Posture
Help us with the Short-Term Roadmap

Take the Survey

The Future of Browser Security:
AI, Data Leaks & How to Stay Protected!

Watch now

CheckMates Go:
Recently on CheckMates

LISTEN NOW

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Collaborator

24399

AD-query failed with Microsoft Windows Server 2022

24399

Solved

inside

Collaborator

24000

Get SKU, MAC, and Serial Number of Appliance thru CLI

24000

inside

Advisor

24000

Identity sharing - how to change modes

24000

Solved

inside

Advisor

23999

Remote Access VPN Authentication Failure

23999

inside

Mentor

23800

R80.10 GAiA Portal - Problems Importing already issued WILDCARD 2048 Certificate

23800

inside

Explorer

23700

TCP Packet out of state, First Packet is not syn

23700

Solved

inside

Advisor

23499

UserCheck Block Page Times Out

23299

Solved

inside

Contributor

23099

First packet isn't Syn; tcp_flags: ACK

23099

Solved

inside

Advisor

23000

Intermittent VOIP One Way Audio

22999

Solved

inside

Contributor

22800

Need CLI Command to see Interfaces and Associated IP Information

22800

Solved

inside

Contributor

22499

License about to expire but Expiration Date in the past

22499

inside

Participant

22400

ClusterXL - standby cannot reach gateway

22399

Solved

inside

Contributor

22399

cphaprob status showing down cause by routed

22399

inside

Contributor

22099

Virtual Standby member cannot reach internal DNS or Internet

21899

inside

Contributor

21898

How to measure bandwidth on CP Gateway?

21898

inside

Admin

21799

HTTPS Inspection Best Practices TechTalk: Video, Slides, and Q&A

21799

inside

Employee

21799

Lightboard Series: High Availability Architecture with R80.10

21799

inside

Explorer

21799

HTTPS Certificate validation - SK159872

21699

Solved

inside

Contributor

21600

Informational Exchange Received Delete IKE-SA from Peer: xx.xx.xx.xx

21600

Solved

inside

Contributor

21599

Wrong peer gateway for decrypted packet (VPN Error code 01)

21399

Solved

inside

Explorer

21199

Identity Awareness using Azure AD

21199

inside

Explorer

21199

Installing VSX on on VMware ESXi

21199

inside

Employee Alumnus

20899

AW keeps deleting Dameware Service

20899

Solved

inside

Advisor

20899

Bandwidth Utilization Report for interface (smartview monitor or diagnosticsview)

20899

inside

Collaborator

20800

CPview and Top-connections in R80.20

20799

Solved

inside

Contributor

20699

Performance issue: High pdpd load after R80.20 upgrade - identity agents can't connect

20399

Solved

inside

Contributor

20199

WMI Permission denied - From this months Windows Update

20199

Solved

inside

Collaborator

20099

Policy installation failures with Error code: 0-2000183-27

20099

Solved

inside

Participant

19999

Checkpoint device does not establish VPN tunnel

19999

inside

Contributor

19999

Displaying transceiver properties

19799

Solved

inside

Contributor

19700

Top connections fw tab -u -t connections | awk '{ print $2 }' | sort -n | uniq -c | sort -nr | head

19700

inside

Contributor

19600

F5 BIG-IP ICAP and SandBlast (TEX)

19600

inside

Contributor

19499

How to block traffic coming from known malicious IP addresses R81.10

19499

Solved

inside

Contributor

19300

R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon

19299

inside

Explorer

19299

Firewall HA status (health check)

19200

Solved

inside

Contributor

19101

Blocking malicious IP addresses (sk103154) in VSX

19101

inside

Collaborator

19100

Problem with VPN traffic and Nated IPs

19100

inside

Collaborator

18999

Many TCP First-Packet-isn't-SYN drops after upgrade to R81.10

18999

Solved

inside

Participant

18900

IN /VAR/LOG/messages keep getting Stopping CUL mode

18900

Solved

inside

Contributor

18899

Not substituted certificate in browser Https Inspection

18899

inside

Contributor

18800

VSX cluster problem - are we alone?

18800

Solved

inside

Contributor

18699

Is there SNI support for inbound HTTPS inspection in R80.20?

18699

Solved

inside

Participant

18600

Why CP drops RST-ACK packets from client?

18600

Solved

inside

Contributor

18499

Restricting Remote Access by IPv4 Address

18499

inside

Advisor

18300

SSL Certificate Cannot Be Trusted (vulnerability)

18299

inside

Participant

18299

Checkpoint gateway Memory Usage

18200

inside

Admin

18098

How do I verify Threat Emulation is working?

18098

Solved

inside

Contributor

17999

Gaia r80.10 tag vlan 1 and native vlan

17999

inside

Participant

17999

Cluster XL - Failover due to Fullsync PNOTE ON

17999

Solved

inside

Participant

17799

Notify when certificate expired

17799

Solved

inside

Advisor

17799

Automatic Configuration of Appliance on boot

17798

inside

Participant

17797

Troubleshooting performance issues

17797

Solved

inside

Collaborator

17700

When will checkpoint support the Load Sharing mode in either R80.20 and R80.30?

17700

Solved

inside

Participant

17700

Snapshot vs Backup - what's the difference?

17700

inside

Advisor

17699

Checkpoint to Azure Route based - guide

17699

inside

Admin

17600

Check Point Threat Prevention Packet Flow and Architecture

17600

inside

Participant

17500

Checkpoint Advanced OSPF Capability

17500

inside

Collaborator

17399

How to disable TLS1.0&TLS1.1 on Gaia Portal in R80.20

17399

Solved

inside

Advisor

17399

Connectivity issues from standby gateway after R80.10 -> R80.30 upgrade

17399

inside

Employee Alumnus

17399

Understanding Threat Emulation logs

17399

inside

Advisor

17299

BGP over VPN between Azure.docx

17299

Solved

inside

Collaborator

17299

VSX: show configuration For All Virtual Systems

17299

Solved

inside

Participant

17299

Troubleshooting dropped packets in Checkpoint using zdebug

17299

inside

Employee Alumnus

17200

Using SNMP with SandBlast Network

17200

inside

Advisor

17200

Uploading file works on cloud but not local gateway

17199

inside

Participant

17196

Password hashes, sha512 and the expert password

17196

Solved

inside

Explorer

17099

Firewall rule for any tcp and udp port

17099

Solved

inside

Participant

16999

R80.20 - R80.40 Performance Issues due to incorrect Selective Acknowledgements (SACKs)

16800

inside

Participant

16800

Allow file download and block file upload with wetransfer

16800

Solved

inside

Participant

16799

R82 – Install ElasticXL Cluster

16799

Solved

inside

Advisor

16700

'No valid licens found on server' even though I've attached licens and contracts

16600

Solved

inside

Participant

16500

Disable TLS/SSL support for static key cipher suites

16500

Solved

inside

Participant

16199

Migrating cluster from old to new hardware

16199

inside

Collaborator

16199

High cpu utilization on RAD Process

16199

Solved

inside

Collaborator

492

Something to keep in mind when VPN tunnel is down

311

inside

Contributor

630

Problem with VPN & PPPoE: R81.20 - Build 039

630

inside

Explorer

387

Usage of XFF with Identity Awareness and Identity Agent

1483

Solved

inside

Legend

188

Question about 6600 fw replacement

302

inside

Legend

184

Site-to-Site AWS VPN not working with Central Managed SMB.

282

Solved

inside

Explorer

641

IDC events not coming on Firewall

641

inside

Contributor

334

Zoom and Custom Application/Site

395

inside

Collaborator

1203

About "CPNotEnoughDataForRuleMatch" and connection reset

1203

Solved

inside

Employee

57825

How to manually delete an entry from the Connections Table

57825

Solved

inside

Contributor

160

access to azure web server via office CP and s2s VPN

160

inside

Explorer

735

IPS Updates & Threat Emulation Not Working

735

inside

Contributor

7518

Identity awareness and ADS machine identity propagation

7518

Solved

inside

Legend

200

Ikeview/infoview utilities issue

200

inside

Legend

6393

Checkpoint connectivity between management & gateway over vpn

238

inside

Explorer

160

Loss of access to hardware after enabling p2p ospf

160

inside

Participant

176

VPN Login Failure with Azure MFA

220

inside

Explorer

182

VSX Incorrect configuration - Local cluster member has fewer cluster interfaces configured

182

Solved

inside

Explorer

4763

Check Point RA VPN : force the use of a specific user certificate in Windows Store

4763

inside

Contributor

1425

Identity Awareness "domain name not configured" -> nt-autoritÄt

1425

inside

Advisor

228

Suspicious traffic passed through Implied Rule - accept_outgoing

228

inside

Explorer

298

Do not understand how does Aggressive Aging work with default settings

653

inside

Contributor

179

Cross-site communication problem

179

Solved

inside

Collaborator

1704

Help Needed: Site-to-Site VPN Setup (Checkpoint 3600 & Fritzbox Home Router)

1704

inside

Contributor

1314

High CPU spike in GW during access policy installation

294

inside

Advisor

556

Unexpected Error in Box 9700 CP

556

Solved

inside

Contributor

450

active cluster member full partition

450

inside

Explorer

287

Remote gateways connecting to SMS over internet

287

Solved

inside

Explorer

562

Objects based on AD domain info

148

Solved

inside

Participant

3005

FTP service accepting unencrypted credentials

3005

Solved

inside

Advisor

345

Enabling Check Point FW in Transparent Mode

345

Solved

inside

Collaborator

296

VRRP not enabled: R81.20 ClusterXL with VRRP

296

Solved

inside

Participant

503

Check Point Online Web Service Response Time

503

Solved

inside

Contributor

3376

VSX + VSLS Patching: Disaster Recovery when things go wrong?

464

inside

Explorer

284

R82 Upgrade HA Configuration Error

284

Solved

inside

Explorer

1167

VALIDATION ERROR AFTER R82 UPGRADATION

1167

inside

Explorer

184

Check Point Route Based VPN configuration step by step between Checkpoint to Check Point firewall.

184

inside

Explorer

296

SMS and VSX gateway communication over ipsec tunnel

296

inside

Contributor

192

Application Server Message Block v1 (SMBv1) experience

192

inside

Contributor

403

Replacement for the Quantum 3000 Series (3600/3800)?

403

Solved

inside

Explorer

452

No ICMP traffic trough VPN after migration

452

Solved

inside

Contributor

235

Linux traceroute packets blocked, but not window packets

235

Solved

inside

Collaborator

1669

BGP Community on Inbound Routemaps

1669

Solved

inside

Participant

2473

Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

2473

inside

Legend

9996

How to add a second Sync interface in VSX

319

inside

Explorer

30877

How to Monitor Concurrent VPN users connected to a Gateway (OID)

30877

Solved

inside

Explorer

414

IA MUH agent does not pick up identities for all applications on AVD

313

inside

Employee

2042

R81.20 JHF41 TCP Handshake counter fills up

2042

inside

Contributor

318

Hide Internal Network - Interface Specific?

318

inside

Participant

346

Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

346

inside

Contributor

433

bringing new appliances into a cluster

335

Solved

inside

Contributor

352

Can we use Dell R760 as Open Server?

543

inside

Explorer

245

Can Virtual switch with no uplinks can be used to propogate routes between two virtual-systems

245

Solved

inside

Explorer

268

Cluster Node Failover/Switching Issue in Check Point Environment

268

inside

Participant

235

See diff of policy changes on specific gateway not updated in months prior to installing?

235

inside

Advisor

650

Identity Awareness Portal with iDP Auth - LoginSequenceView css not "found"

650

inside

Contributor

419

Configuration of MTA SMTP/TLS Connection | Which Certificate Format

625

Solved

inside

Collaborator

580

how to check what was going on during upgrading in clish

580

inside

Advisor

183

LDAP connections are not closed and accumulating on the gateway

183

Solved

inside

Advisor

4209

SAML authentication stops working after FW Upgrade / Fresh Install

4209

inside

Explorer

351

How do I enter SFTP path in Spark periodic-backup?

307

inside

Collaborator

138

domain object and updatable object behavior

138

inside

Explorer

298

i want to remote VPN on one link and site to site IPSEC on separate link

298

Solved

inside

Advisor

3727

Is it possible to connect to my switch using ssh from the checkpoint cli ?

3727

Solved

inside

Contributor

486

Two ClustersVSX withing same mgmt and VSs having Same IP Address

486

inside

Collaborator

208

Cloning Group Nessus and SSLv3

208

Solved

inside

Explorer

296

Is mac magic relevant on R81.20?

296

inside

Advisor

5950

VSX error on /var/log/messages

5950

Solved

inside

Contributor

256

Fast_Accel on Virtualized Firewalls

256

Solved

inside

Contributor

1325

migrate existing Checkpoint Gateway R80.40(5400) to New Checkpoint Gateway R81.10(6400)

1325

inside

Legend

1171

R82 VSXNext Capacity Optimization - Automatically?

1171

inside

Collaborator

696

CheckPoint Quantum 1600 Cluster stronger authentication required

696

inside

Explorer

384

Cannot ping next hop from vsx gateway

384

inside

Advisor

253

sk170857 - Clarification about notes

253

inside

Advisor

154

How to track/log GAIA portal access

304

inside

Explorer

204

vpn client connection error ISP version 6

204

inside

Authority

521

speed up for single connection

521

Solved

inside

Legend

5355

NAT policy rules hit count not visible in .csv export file

5355

inside

Participant

385

VPN established, but failed to forward traffic via VPN with source and destination NAT.

385

inside

Contributor

1207

Reduction in throughput (MB) when traffic passes through the firewall

1207

inside

Participant

346

MDPS Separation breaks existing management communication

346

Solved

inside

Explorer

400

Is it possible to change the temp directory cpinfo uses for generation?

400

inside

Legend

2691

VSX, anti spoofing and dynamic routing

651

inside

Legend

2640

Need to know Upgrade process if we go for fresh install of 81.20 version on chassis 44000

255

Solved

inside

Contributor

581

Static route redistribution into OSPF

581

Solved

inside

Collaborator

686

Boot loop known issue in R81.20 JHF T89

686

Solved

inside

Explorer

1231

Cloning Group with MVC Cluster

1231

No messages.

Security Gateways

Have questions about Security Gateway Appliances, Gaia OS, CoreXL, SecureXL, ClusterXL, VSX, and Next Generation Firewall features? This is where to ask them! This also includes legacy operating systems like SecurePlatform, IPSO, or XOS.

For Small Business Security appliances (600/700/1200R/1400/1500/1600/1800), see the SMB Appliances and SMP space.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 25 Mar 2025 @ 09:00 AM (CET)

CheckMates Live Paris: Harmony – Protection avancée de l’espace utilisateur

In-Person

Tue 25 Mar 2025 @ 09:00 AM (EDT)

Canada In-Person Cloud Security with Hands-On CloudGuard Workshops!

Virtual

Tue 25 Mar 2025 @ 03:00 PM (CET)

Boosting Network Performance with New R82 Software and AI-Powered Gateways - EMEA

Virtual

Tue 25 Mar 2025 @ 02:00 PM (EDT)

Boosting Network Performance with New R82 Software and AI-Powered Gateways - Americas

In-Person

Tue 25 Mar 2025 @ 12:00 PM (MDT)

Salt Lake City: CPX 2025 Recap

Virtual

Tue 25 Mar 2025 @ 02:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Tue 25 Mar 2025 @ 03:00 PM (CET)

Boosting Network Performance with New R82 Software and AI-Powered Gateways - EMEA

Virtual

Tue 25 Mar 2025 @ 02:00 PM (EDT)

Boosting Network Performance with New R82 Software and AI-Powered Gateways - Americas

Virtual

Tue 25 Mar 2025 @ 02:00 PM (EDT)

Americas Deep Dive: Web Filtering Best Practices

Virtual

Wed 26 Mar 2025 @ 04:00 PM (IST)

Validating Cyber Exposures: How To Continuously Test Exposures For Exploitability

Virtual

Thu 27 Mar 2025 @ 03:00 PM (CET)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - EMEA

Virtual

Thu 27 Mar 2025 @ 02:00 PM (EDT)

Be Your Own TAC Part Deux: Advanced Gateway Troubleshooting Commands - Americas

In-Person

Tue 25 Mar 2025 @ 09:00 AM (CET)

CheckMates Live Paris: Harmony – Protection avancée de l’espace utilisateur

In-Person

Tue 25 Mar 2025 @ 09:00 AM (EDT)

Canada In-Person Cloud Security with Hands-On CloudGuard Workshops!

In-Person

Tue 25 Mar 2025 @ 12:00 PM (MDT)

Salt Lake City: CPX 2025 Recap

In-Person

Tue 08 Apr 2025 @ 12:00 PM (MDT)

Denver: CPX 2025 Recap

In-Person

Thu 10 Apr 2025 @ 10:00 AM (EEST)

CheckMates Live Sofia - Maintenance and Upgrade Best Practices

In-Person

Thu 10 Apr 2025 @ 12:00 PM (PDT)

Renton, WA: Golf and Learn!

CheckMates Events

Are you a member of CheckMates?