Threat Prevention

Detecting Threats Across the Open, Deep
and Dark Web With Infinity ERM

Four Ways to SASE

Watch Now

It's Here!
CPX 2025 Content

Get It Now

Remote Access VPN – User Experience
Help us with the Short-Term Roadmap

Take the Survey

CheckMates Go:
What is UPPAK?

LISTEN NOW

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

Solved

inside

Explorer

6599

Blocking C&C communication

6599

inside

Participant

6599

Verify that DNS tunneling is being prevented in R80.10

6599

inside

Contributor

6599

Antivirus update

6599

Solved

inside

Contributor

6599

Block the FTP PUT Protocol

6599

inside

Contributor

6500

Where does the IPS packet capture and logs store in management server on distributed environment

6500

inside

Contributor

6500

Where can I download the ips offline signature

6500

inside

Contributor

6499

MTA - mail delayed

6499

inside

Contributor

6400

block files based on hash

6400

Solved

inside

Advisor

6400

IOC feed using CSV or txt

6400

inside

Participant

6399

Microsoft Attack Simulation URLs - Anti-Virus Blade Exceptions - DNS query Prevents

6399

Solved

inside

Contributor

6399

Whitelist site blocked by URL Reputation (Anti-Bot)

6399

Solved

inside

Participant

6399

Inspection Settings Exception "install on" gateway missing

6399

inside

Explorer

6299

HTTPS Inspection with Mircosoft CA R80.10

6299

inside

Employee Alumnus

6299

IPS utilization report - Smart View

6299

Solved

inside

Contributor

6299

Inbound SSL Inspection Certificate Issues

6299

inside

Contributor

6299

Custom intelligence feed and TOR with our internal CA

6299

inside

Legend

6298

Downloading Original Document from Threat Extraction

6298

inside

Authority

6199

SPF with MTA

6199

inside

Admin

6199

White Paper - Distributed IPS Integration with Extreme Networks Network Access Control

6199

inside

Explorer

6099

Increasing Performance and Use Cases for separate IPS Profiles

6099

inside

Collaborator

6099

How to Tune the IPS

6099

inside

Contributor

6097

Problem cloning/adding IPS profile

6097

Solved

inside

Participant

6000

Best Practices Against Ultrasurf

6000

inside

Collaborator

5999

Protocol violation detected with protocol:, matched protocol sig_id:(1), violation sig_id:(9). (500)

5999

Solved

inside

Contributor

5999

Ips report of protections

5999

Solved

inside

Contributor

5999

URL shorteners tagged as spam

5999

Solved

inside

Advisor

5999

Logging and monitoring: Packet Capture retention period

5999

inside

Explorer

5900

Having issues with firewall dropping mail as spam

5900

inside

Explorer

5900

Application whitelist

5900

Solved

inside

Contributor

5899

5600 standalone performance

5899

inside

Contributor

5899

Google Maps and https inspection

5899

inside

Explorer

5899

Contract entitlement check failed - Antibot and Antivirus

5899

inside

Explorer

5800

"Release Date" and "Update Date" column of the IPS Signature Export formatting incorrectly

5800

inside

Contributor

5799

FW Samp or penalty box

5799

inside

Participant

5799

To enable or not to enable an IPS signature...

5799

inside

Employee

5799

IPS Protections in Detect (Staging) State

5799

inside

Explorer

5799

Why Checkpoint is dropping http 302 redirect?

5799

inside

Collaborator

5799

IPS license

5799

Solved

inside

Collaborator

5799

Malware DNS trap with firewall's management IP

5799

inside

Participant

5799

Anti Virus Update Status Gaia

5799

inside

Explorer

5700

Firewall IPS and Check Point protocol

5700

inside

Collaborator

5700

Top Level Domain (TLD) Blocks

5700

inside

Contributor

5699

Anti-Virus not blocking malicious .zip, .doc files.

5699

inside

Collaborator

5698

Some DNS request not block by AV blade

5698

inside

Participant

5600

IPS questions

5600

Solved

inside

Employee Alumnus

5599

The best solution for blocking malicious IP

5599

Solved

inside

Contributor

5599

Configuring checkpoint as mail relay using MTA

5599

inside

Explorer

5599

Https inspection for ips incoming traffic with thrid party CA

5599

Solved

inside

Contributor

5598

Error: Failed to fetch Threat Prevention policy

5598

Solved

inside

Participant

5499

SHA-1

5499

inside

Collaborator

5499

Threat Prevention Policy

5499

Solved

inside

Contributor

5499

Question RAD DNS Traffic

5499

inside

Collaborator

5496

IPS bypass under load - any way to exclude certain cores ?

5496

Solved

inside

Contributor

5400

3rd party Phishing testing url being identified as malicious, unable to whitlist fully.

5400

inside

Champion

5399

HTTP parsing error occurred, bypass request.

5399

Solved

inside

Advisor

5399

https inspection outbound CA certificate step#1

5399

inside

Advisor

5299

Anti-spam and email security blade always bypassing all emails

5299

inside

Authority

5299

can't install ThreatPrevention policy after hardware replacement

5299

inside

Participant

5199

Cannot open packet capture files in ips log

5199

inside

Advisor

5199

Discussion SMB scan problem

5199

inside

Explorer

5199

Chrome browser causes ssl enforcment violations

5199

inside

Participant

5199

IPS Protection signatures with same name having diff. CVE number

5199

Solved

inside

Explorer

5199

CVE-2023-23397

5199

inside

Explorer

5100

Allow File Download from certain URLs

5100

Solved

inside

Authority

5100

Websites using TLS 1.3 are not categorized correctly using "Categorize HTTPS Sites" feature

5100

inside

Champion

5099

IPS Update check per domain R77.30

5099

Solved

inside

Advisor

5099

IPS not enabled but still receiving notice of expired blade

5099

Solved

inside

Contributor

5099

Zero Phishing - will it work without FQDN configured on SecGW?

5099

inside

Employee

5000

CloudGuard SaaS Identity Protection - Demo Snippet

5000

Solved

inside

Participant

5000

Importing External Custom Intelligence Feeds in SmartConsole - Custom feed settings

5000

inside

Contributor

5000

Threat Prevention Policy Layers

5000

inside

Explorer

4999

Private SMTP Commands

4999

inside

Collaborator

4999

Profiles - Deleting Off - Objects being used

4999

inside

Explorer

4999

has MTA enabled, but it is not in the scope of any of the Threat Prevention policy rules

4999

inside

Advisor

4999

Odd behaviour of profile

4999

inside

Admin

4999

NotPetya: Under the Microscope Presentation and Recording

4999

inside

Admin

4999

IPS Self Help Guide for R80.10

4999

inside

Participant

4999

Blocking old SSL/TLS Versions on GW

4999

inside

Contributor

4998

IPS: Connection accepted - But why?

4998

inside

Explorer

4996

Anti-Bot check last update

4996

inside

Participant

4900

GW 1400 - anti-spoofing issue, all traffic blocked.

4900

inside

Collaborator

4899

Optimize vs Recommended Protection

4899

inside

Explorer

4899

Preventing port scans and sweep scans

4899

inside

Contributor

4899

Geoblock Top Ten by country

4899

inside

Contributor

4898

High bandwidth consumed by blocked traffic in Smart Event Report

4898

inside

Collaborator

4800

Unable to update TE Engine

4800

inside

Explorer

4799

Anti- virus manually update

4799

inside

Contributor

4799

The large size file check Anti-Virus

4799

inside

Contributor

4700

DNS protection in R80

4700

inside

Contributor

4700

Hi Experts ,Any one can guide

4700

Solved

inside

Explorer

4699

IPS dropping legitimate traffic

4699

Solved

inside

Advisor

4699

MTA block mail from top domain

4699

Solved

inside

Collaborator

4699

IS there any tool or script to trigger IPS signature ?

4699

inside

Contributor

4699

Can we block exe download for specific networks only without using HTTPS inspection in CP R80.20?

4699

inside

Contributor

4699

HTTPS inspection in Proxy environment

4699

inside

Authority

4699

HTTPS inspection of TLS1.3 and USFW

4699

inside

Advisor

4600

IPS exception for pre R80 gateways with R80 SMS

4600

inside

Advisor

4600

Internet Explorer zero-day security hole

4600

inside

Advisor

4599

Failed to run IPS update (Schedule Update) (But IPS having latest Packages)

4599

inside

Contributor

4599

IPS Update and Policy installation

4599

inside

Explorer

4599

Whitelist application program

4599

inside

Collaborator

4599

IPS Contract Shows Expired in FWMGR After Renewal

4599

inside

Participant

4500

HTTPS inpsection: How block file type correctly

4500

Solved

inside

Contributor

4499

Update Time IPS R80.20

4499

Solved

inside

Employee

4499

'Water Torture' attack , DDoS against DNS

4499

inside

Admin

4499

All About Bashware: Overview and Demonstration

4499

Solved

inside

Explorer

4499

checkpoint IPS blade functioning.

4499

inside

Explorer

4499

How to extract imported indicator files

4499

inside

Participant

4499

Need to know how IPS works in checkpoint

4499

inside

Explorer

4499

receiving a lots of email antimalware alert email

4499

inside

Explorer

4499

Streaming Engine: TCP SYN Modified Retransmission

4499

inside

Collaborator

4499

HTTPS BYPASS not working

4499

inside

Explorer

4498

IPS conditions to generate alert

4498

inside

Explorer

4498

Enabling SandBlast on AWS vSEC server

4498

inside

Collaborator

4400

Which R80.20 IPS default profile is equal to IPS R77.30 "Recommended" profile?

4400

inside

Employee

4400

CloudGuard SaaS Shadow IT Discovery - Demo Snippet

4400

inside

Participant

4400

fw_spii_execute_inspections Reason: spii inspection matrix drop

4400

Solved

inside

Contributor

4400

lucky13 vulnerability

4400

inside

Contributor

4400

Yara signatures usage

4400

Solved

inside

Explorer

4400

Can TX gateways in transparent block?

4400

inside

Explorer

4399

Vulnerability / scanning

4399

Solved

inside

Advisor

4399

is_whitelist_domain_enable ?

4399

inside

Participant

4301

GAIA R80.10 IPS only blocks URL-based attacks

4301

inside

Advisor

4300

filetype exception by destination possible?

4300

inside

Advisor

4300

CVE-2019-11358

4300

inside

Advisor

4300

Threat Prevention Policy - Protected Scope - Not working?

4300

Solved

inside

Participant

4300

IPS Signature for BlackMatter Ransomware

4300

inside

Contributor

4299

Formbook Anti-Bot Protection

4299

inside

Participant

4299

curious debug drop message

4299

inside

Advisor

4299

Sophos Antivirus Not Working on Checkpoint Gateway

4299

inside

Explorer

4299

Trojan.Win32.Genkryptik

4299

inside

Explorer

4299

Botnet Activity Detection

4299

inside

Advisor

4299

What Is CPU-Level Threat Prevention?

4299

inside

Collaborator

4299

Jump page listing all Check Point vulnerabilities from past years

4299

inside

Contributor

4299

IPS update failed - Error: Update failed. Gateway can not access internet

4299

inside

Contributor

4299

IPS protection

4299

inside

Collaborator

4299

Threat Extraction - click here location

4299

Solved

inside

Contributor

4200

IPS Protection Update

4200

inside

Employee Alumnus

4199

Check Point’s approach to Security Effectiveness

4199

inside

Collaborator

4199

IPS cannot detect/prevent signature

4199

inside

Explorer

4199

Threat Extraction deployment

4199

Solved

inside

Collaborator

4199

Best Practice to block traffic originating from anonymizers(R81.10)

4199

Solved

inside

Contributor

4199

Detected brute force scanning of cifs ports

4199

inside

Explorer

4199

IPS protection for custom RDP port

4199

inside

Participant

4100

Migrating from Trend Micro IPS to Checkpoint IPS

4100

Solved

inside

Participant

4100

R80.10 IPS By Protocol

4100

inside

Advisor

4100

IPS drooped traffic without without specifying a protection name

4100

inside

Participant

4100

WhatsApp Web

4100

inside

Employee

4099

Configuring R80.40 authenticating against Azure Active Directory using groups

4099

Solved

inside

Collaborator

4099

Threat Prevention policy installation time + comand

4099

inside

Participant

4099

IPS - Basics Protections

4099

Solved

inside

Contributor

4099

Antibot/Antivirus update error on R77.30 gateway

4099

inside

Employee Alumnus

4099

Using MTA on bridge mode

4099

inside

Contributor

4099

In Checkpoint R80, how can I access to "Core Protections" settins?

4099

Solved

inside

Contributor

4099

Upgrade of Mgmt Server to 81.10 broke Threat Prevention

4099

Solved

inside

Collaborator

4099

Preventing "hammering" to our Exchange server's Public IP

4099

inside

Participant

4099

Firewall as Proxy and Error Pages

4099

inside

Explorer

4099

IPS Staging - Clear Filtered Protections

4099

Solved

inside

Participant

4098

Block email with specific " text"

4098

inside

Contributor

4000

IPS Sweep Scan issue : a LOT of scans are not being detected

4000

inside

Explorer

4000

Blocking parts of the internet / Performance considerations

4000

inside

Employee Alumnus

4000

IPS Protection available for critical Windows vulnerability (CVE-2019-0708)- Protect Yourself NOW

4000

inside

Advisor

4000

Security Servers

4000

inside

Advisor

3999

Anti-Virus deep scanning reccomendation

3999

inside

Advisor

3999

Indicator Files

3999

inside

Participant

3999

Connection was allowed because background classification mode was set - Anti-Bot

3999

Solved

inside

Advisor

3999

Autonomous Threat Prevention service is down

3999

inside

Contributor

3999

IPS - Failed to update IPS database

3999

inside

Explorer

3999

IOC Feeds

3999

inside

Participant

3900

Microsoft Exchange Online Protection and TCP segment out of maximum allowed sequence. Packet dropped.

3900

inside

Advisor

3900

Is there a way to create a byass/exception for DNS Sinkhole?

3900

inside

Contributor

3899

MTA with TLS inspection

3899

inside

Contributor

3899

Smartevent not showing any allowed traffic. Only dropped and detected

3899

inside

Explorer

3899

Sandblast on-premise emulation, file size

3899

inside

Employee

3899

WorkingWithCustomerIoC_Feeds.pdf

3899

inside

Collaborator

3899

IPS Internal hosts only in R80.10

3899

Solved

inside

Advisor

3899

Threat Prevent Policy installation failed with weird code

3899

inside

Explorer

3899

Checkpoint MTA no reciving emails

3899

inside

Explorer

3899

While enabling Threat emulation gives Unknown error

3899

inside

Explorer

3899

Logic for RDP Brute Force detection?

3899

inside

Participant

3899

IPS - Global domain IPS version is an earlier version than the local domain IPS version

3899

inside

Participant

3899

R80.40 Threat Prevention IPS Protected Scope or Source / Destination

3899

inside

Contributor

3800

R80.20 IPS Signature For OWASP

3800

inside

Contributor

3799

Prevent Brute-Force and MITM attack on Externally hosted FTP Server

3799

inside

Explorer

3799

SNMP MIBS for IPS Blade

3799

Solved

inside

Contributor

3799

Checkpoint R80.20 API for IPS Profiles/Protections

3799

inside

Employee Alumnus

3799

R80 Technical Tutorial - Configuring IPS Settings

3799

inside

Collaborator

3799

Website is not loading

3799

inside

Participant

3799

Log4J IPS block clarification

3799

inside

Contributor

3799

APP-Control - Zenmate

3799

inside

Advisor

3700

AB/AV updates by Active/Standby with difference database version

3700

Solved

inside

Participant

3699

IPS Core Protections and HTTPS Inspection

3699

inside

Participant

694

TE/TX User Check Message

694

inside

Contributor

18498

Inspection Settings

18498

inside

Employee Alumnus

629

How AI prevents Brand Spoofing Attacks -WEBINAR

629

inside

Explorer

1374

How to create a trigger for the IPS critical alert?

1374

inside

Advisor

1279

Structural failure on anti-bot?

1279

inside

Contributor

1545

IPS Protection for MOVEit Transfer SQL Injection (CVE-2023-34362)

1545

inside

Contributor

2560

Is there any tool or script to trigger IPS signature directly from Checkpoint gateway to test IPS

2560

Solved

inside

Participant

2429

Custom Intelligence Feed Entry/Size Limit

2429

inside

Contributor

10683

How to block Hashes of malware by IPS signature

10683

Solved

inside

Contributor

5640

Error: Failed to fetch Threat Prevention policy

5640

inside

Advisor

1468

Traffic blocked by AV and Anti-Bot blades

1468

Solved

inside

Employee

4509

'Water Torture' attack , DDoS against DNS

4509

inside

Participant

909

TA SandBlast MTA Blade - False Positive!?

909

inside

Contributor

783

Elastic integration R81.10 collection lamina IPS

783

inside

Participant

707

IPS Signature for AntiBOT

707

inside

Contributor

5738

Anti-Virus not blocking malicious .zip, .doc files.

5738

Solved

inside

Explorer

1355

CDR How to bypass a domain

1355

Solved

inside

Advisor

4400

is_whitelist_domain_enable ?

4400

inside

Collaborator

4719

IPS Contract Shows Expired in FWMGR After Renewal

4719

Solved

inside

Participant

2478

IOC Feeds does not work properly

2478

inside

Collaborator

7394

Bypass Windows & Office update from TP (AV & Sandboxing)

7394

inside

Explorer

1833

Autonomous Policy Statistics Disabled

1833

inside

Explorer

973

Malicious Zipped Archives allowed to be downloaded

973

Solved

inside

Explorer

1477

Autonomous Threat Prevention Service Isnt Working

1477

Solved

inside

Contributor

1699

Block password protected archive - MTA

1699

inside

Legend

16590

URLF / APCL Whitelisting

16590

Solved

inside

Participant

1534

IPS package update notifications

1534

inside

Advisor

1776

Doubt about Threat Prevention

1776

Solved

inside

Advisor

1959

TE support Windows 11 OS for Threat Emulation appliances - when?

1959

Solved

inside

Participant

5006

Importing External Custom Intelligence Feeds in SmartConsole - Custom feed settings

5006

inside

Participant

2496

Log just detected not prevented

2496

inside

Advisor

4167

IPS drooped traffic without without specifying a protection name

4167

inside

Employee

1285

Autonomous Threat Prevention Profiles, R81.10, Reporting

1285

inside

Advisor

1194

explain TP Log

1194

Solved

inside

Legend

1557

Threat prevention (IPS) query

1557

inside

Contributor

1652

How do I know if a file is dropped? 'Threat Emulation'

1652

Solved

inside

Contributor

6450

Whitelist site blocked by URL Reputation (Anti-Bot)

6450

Solved

inside

Mentor

16164

IPS issue (R80.20) - cannot remove IPS blade from GW object

16164

inside

Participant

3356

Performance Improvement When "Core Protections" Use A Separate Threat Prevention Profile

3356

inside

Legend

1422

IPS Performance Impact Ratings only apply to R80.30?

1422

Solved

inside

Collaborator

4252

Best Practice to block traffic originating from anonymizers(R81.10)

4252

inside

Contributor

2489

Threat Emulation Blade , "Failed to process file"

2489

inside

Explorer

3836

SNMP MIBS for IPS Blade

3836

inside

Advisor

3767

Anti-Bot Correlated Logs

3767

inside

Contributor

6961

Exclude Vulnerability Scanners from IPS Inspection

6961

inside

Collaborator

1738

IPS exclusions still show alert in logs

1738

inside

Advisor

16389

Anti-Virus log prompt: "background classification mode was set"

16389

inside

Advisor

1886

Gaia R81.20 Titan Zero-Phishing is breaking Apple iCloud Private Relay, how to whitelist and debug

1886

Solved

inside

Mentor

22416

IPS Analyzer Tool - are you running it?

22416

inside

Participant

3677

Threat Prevention logs

3677

Solved

inside

Explorer

5296

CVE-2023-23397

5296

inside

Contributor

15640

Geo Blocking

15640

inside

Participant

5196

Blocking old SSL/TLS Versions on GW

5196

inside

Contributor

4346

IPS update failed - Error: Update failed. Gateway can not access internet

4346

Solved

inside

Explorer

2140

CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability

2140

inside

Participant

3122

Troubleshoot Geo policy after sk126172

3122

inside

Explorer

2080

Stop Logging DNS Reputation traffic

2080

Solved

inside

Participant

2594

IPS Offline Update feature disabled on SmartConsole

2594

Solved

inside

Contributor

1243

Regarding IPS Update

1243

inside

Advisor

913

Backup procedure PTC

913

inside

Participant

1556

Threat Emulation Mail exception for sender/recipient pair

1556

inside

Contributor

4473

Yara signatures usage

4473

inside

Participant

2242

Determining Which Anti-Bot, Anti-Virus, Threat Emulation Overrides Are Active

2242

Solved

inside

Explorer

1277

Running Profile Cleanup on Threat Prevention profiles cloned from Optimized

1277

inside

Advisor

1640

Threat Prevention as shared layer

1640

Solved

inside

Participant

6057

Best Practices Against Ultrasurf

6057

inside

Participant

4405

fw_spii_execute_inspections Reason: spii inspection matrix drop

4405

inside

Collaborator

5580

Threat Prevention Policy

5580

inside

Advisor

7242

Autonomous Threat Prevention; How to disable Threat Emulation and Threat Extraction for NGTP Gateway

7242

inside

Participant

2128

Concerning on blades policy

2128

inside

Collaborator

1394

IPS Blade

1394

inside

Participant

2271

No details in Threat Prevention Logs

2271

inside

Authority

5326

can't install ThreatPrevention policy after hardware replacement

5326

Solved

inside

Collaborator

3649

Anti Bot - Update failed. Gateway can not access internet

3649

inside

Advisor

2475

Where do I get Packet capture file on R81.10?

2475

inside

Explorer

1119

confused about anti-bot's log ?

1119

inside

Advisor

1526

When are URL's/domains categorized by Anti-Virus?

1526

Solved

inside

Contributor

4477

lucky13 vulnerability

4477

inside

Authority

1200

Autonomous Threat Prevention without license for TE / TEX

1200

Solved

inside

Contributor

1337

Can we duplicate individual IPS protections ?

1337

inside

Participant

2105

Threat Emulation always emulate same files

2105

Solved

inside

Contributor

11717

R81.10 Resuming IPS inspection which was bypassed due to resources shortage at MUP:0 CUP:0

11717

inside

Participant

7403

Automatic Adding of FBI/etc. Thread Indicators

7403

inside

Advisor

984

Anti-Virus and Anti-Bot: time to discuss some strange behavoir

984

inside

Champion

8653

Cannot create exception for "Phishing_website.mzle" protection

8653

inside

Explorer

1237

Checkpoint IPS

1237

inside

Employee

10018

IPS Best Practices in R80.30

10018

Solved

inside

Collaborator

7413

Error: kfunc_cmik_loader_execute_dyn_ctx

7413

inside

Participant

36495

Blocking IP using custom IOC feeds

36495

inside

Admin

24879

White Paper - Integrating Custom IOC Feeds

24879

inside

Contributor

1216

I want to know the known Reputation information of Anti-Virus and how to handle exceptions

1216

Solved

inside

Participant

1343

Untrusted certificate block with user check

1343

Solved

inside

Authority

2384

IPS protection for CVE-2022-41082, CVE-2022-41080, CVE-2022-41040 (Microsoft Exchange/OWA problem) ?

2384

inside

Explorer

2215

IPS signature fine tune

2215

inside

Advisor

2262

Switching to Autonomous Policy from Custom

2262

inside

Contributor

3381

Blocking custom IP and domain threat feeds R81.10

3381

Solved

inside

Contributor

5163

Zero Phishing - will it work without FQDN configured on SecGW?

5163

inside

Participant

2121

Threat-Emulation false-positives after detection rule update

2121

inside

Participant

7816

Checkpoint Detects "clientservices.googleapis.com" as virus

7816

Solved

inside

Explorer

3288

Anti-Bot Resource classification mode set hold mode but still pass

3288

inside

Explorer

2050

Packets get drop

2050

Solved

inside

Explorer

1576

Infinity / autonomous policy- How do i see what has been downloaded

1576

Solved

inside

Contributor

2169

IPS detect logs only after enabling anti bot blade

2169

Solved

inside

Explorer

2894

Listing of Countries which are allowed in Geo Policy/Location using API

2894

inside

Ambassador

11402

Exceptions on IPS Core Protections

11402

Solved

inside

Collaborator

2829

setting threshold limits for SYN Attack defence

2829

inside

Explorer

1181

Gateway does not change default route when link is switched on ISP Redundancy

1181

Solved

inside

Explorer

967

Alerts for Dropbox/ One Drive

967

inside

Explorer

1211

Monitor action

1211

Solved

inside

Advisor

1502

defense shield

1502

Solved

inside

Advisor

1680

Migration to Autonomous Threat Prevention

1680

inside

Collaborator

2202

Original File Recovery Threat Extraction R8x

2202

Solved

inside

Collaborator

1469

Threat Emulation problem

1469

inside

Participant

1749

Threat Prevention Multiple Packet Captures

1749

inside

Collaborator

6350

Protocol violation detected with protocol:, matched protocol sig_id:(1), violation sig_id:(9). (500)

6350

Solved

inside

Participant

1964

DB on IPS

1964

inside

Participant

2859

TCP Reflected Amplification

2859

Solved

inside

Participant

3395

Should we be expecting an IPS Blade update for CVE-2022-41040 and/or CVE-2022-41082 (Exchange 0-Day)

3395

inside

Contributor

1400

How to enable ATP and prerequisite to enable it for r81

1400

Solved

inside

Contributor

2250

Anti bot CPU increase

2250

inside

Contributor

930

to test my sandblast te250x environment

930

inside

Advisor

1830

IPS Blade fails to update on the Standby member

1830

inside

Participant

1403

High Availability

1403

Solved

inside

Advisor

2463

Custom Indicators, Observables not visible?

2463

inside

Contributor

2027

IPS Signature showing False Positive result

2027

inside

Collaborator

2201

SIP Protocol - IPS Inspection

2201

Solved

inside

Collaborator

4154

Threat Prevention policy installation time + comand

4154

inside

Advisor

2901

atp command and more on Autonomous Threat Prevention commands

2901

inside

Collaborator

3270

Content Awareness and Threat Extraction/Emulation

3270

inside

Contributor

1700

Inspect Chain Modules

1700

inside

Contributor

25832

How can I avoid "Host Port" scan?

25832

inside

Contributor

1435

Signature related query

1435

Solved

inside

Contributor

7213

IPS blocks traffic even if the traffic is blocked by Access Policy

7213

inside

Participant

1648

SandBlast Appliance Integration with Third-Party IPS

1648

Solved

inside

Collaborator

9310

URLF and APCL are not responding

9310

inside

Explorer

2041

IPS not working - "Threat prevention requires topology to be defined"

2041

inside

Participant

1768

IPS Global Policy protections are assigned to local GW cluster but the local protections don’t sync

1768

Solved

inside

Contributor

3314

Checkpoint || IPS Package version

3314

inside

Contributor

1078

Checkpoint connect to database cloud

1078

inside

Admin

2600

CheckMates Tips and Tricks - IOCs, TAXII feeds and API automation

2600

inside

Participant

2507

External IOC Feed limitation

2507

inside

Contributor

1970

IOC feed detect not effective

1970

inside

Contributor

26938

Halting RAD requests handling / RAD reached maximum allowed concurrent request

26938

inside

Participant

2508

Ant-Virus on MTA: Medium Confidence always "Detect" instead of "Prevent"

2508

inside

Contributor

1920

BMC software/firmware and access to internet

1920

inside

Participant

2550

ips and threat prevention profile activation

2550

inside

Explorer

1724

CVE-2022-27255 - when do we get a signature ?

1724

inside

Collaborator

4552

HTTPS BYPASS not working

4552

inside

Advisor

18207

Some Signature show Detect even profile is set to prevent

18207

inside

Participant

2008

Blade Threat Extraction does not work correctly

2008

inside

Contributor

1658

TE appliance - Source username missing

1658

inside

Participant

1781

Blade HTTPS Inspection Behavior

1781

inside

Explorer

1780

Protecting against Terrorism Websites using the UK Home Office CTIRU list

1780

inside

Participant

1433

Inspection of outgoing SMTP traffic

1433

inside

Explorer

1390

is it possible to add a mailing address to sanblast exclusions?

1390

inside

Advisor

3304

MTA SPAM Alternating drop and accept

3304

inside

Contributor

3421

R81.10 Removing IPS

3421

inside

Contributor

3018

Dynamic Ports inspection setting meaning

3018

inside

Admin

2744

Malware 2021 to Present Day Building a Preventative Cyber Program TechTalk: Video & Slides

2744

inside

Contributor

1517

Export cvs files from Threat Prevention Indicators

1517

Solved

inside

Advisor

22521

SandBlast and links inside email

22521

inside

Legend

2411

IPS Update Failure due to ISP Enforcement - Workarounds?

2411

Solved

inside

Collaborator

8358

Why does IPS protections set to Prevent show Detect in log?

8358

inside

Contributor

1558

Threat Prevention Protections

1558

inside

Employee Alumnus

1965

IPS bypass and Dynamic Balance

1965

inside

Admin

11544

Log4j - Web Scanning Tool and Protection verification - 2 Min work.

11544

inside

Contributor

1388

Another Threat Prevention problem

1388

inside

Advisor

1275

Terrorism Category?

1275

inside

Authority

1833

inspect FTPS ?

1833

Solved

inside

Collaborator

40178

Failed to parse CP site response

40178

inside

Legend

2035

Autonomous Threat Prevention Customer Feedback?

2035

Solved

inside

Participant

3117

Do we have checkpoint IPS signature for CVE-2022-30190. if not, when will it be released?

3117

inside

Explorer

996

anti-spam: phishing emails after adding load balancing on the exchange

996

inside

Collaborator

4070

Website is not loading

4070

Solved

inside

Advisor

3991

Threat Prevent Policy installation failed with weird code

3991

inside

Participant

1973

Malware DNS Trap blocking Twitter Links https://t.co

1973

inside

Mentor

1801

Purple Vallhund attack

1801

Solved

inside

Contributor

1575

Threat Prevention - IPS policy

1575

inside

Employee Alumnus

1055

"Raspberry Robin" malware and Endpoint...

1055

Solved

inside

Participant

1168

Submitting sample files (false negatives)

1168

Solved

inside

Contributor

1596

Custom Application

1596

inside

Participant

973

After Upgrade all UserCheck pages from ThreatExtraction Blade expired

973

inside

Participant

2061

Threat Prevention Proxied Source IP parsing

2061

inside

Advisor

1529

Uninstalling SandBlast

1529

inside

Contributor

2169

Import/Export e-mails white list

2169

inside

Explorer

974

Threat Prevention Indicators cause the threat URLs to not be searchable of threat intell sites.

974

inside

Collaborator

1736

Threat Emulation stalling file uploads over 10 MB

1736

inside

Explorer

3941

While enabling Threat emulation gives Unknown error

3941

inside

Participant

1304

IPS Activation as Detect cause an outage

1304

inside

Participant

4109

WhatsApp Web

4109

inside

Contributor

989

Redirect users with malware to a specific website

989

inside

Advisor

3013

CVE-2021-31805

3013

No messages.

Threat Prevention

Your place to discuss Check Point's Advanced Network Threat Prevention products, including Threat Emulation (Sandboxing, Threat Extraction (a.k.a. Content Disarm and Reconstruction (CDR), Intrusion Prevention System, Anti-Bot, Antivirus, and Anti-Spam solutions.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

In-Person

Tue 20 May 2025 @ 11:30 AM (PDT)

Las Vegas: Check Point Hybrid Mesh

Wed 21 May 2025 @ 05:00 PM (CEST)

TechTalk: Detecting Threats Across the Open, Deep and Dark Web With Infinity ERM

In-Person

Wed 21 May 2025 @ 11:30 AM (MST)

Tempe, AZ: Check Point Hybrid Mesh

Virtual

Wed 21 May 2025 @ 05:00 PM (CDT)

TechTalk: Detecting Threats Across the Open, Deep and Dark Web With Infinity ERM

Virtual

Thu 22 May 2025 @ 03:00 PM (CEST)

Speed, Scale, and SASE: Reimagining Network Security - EMEA

Virtual

Thu 22 May 2025 @ 02:00 PM (EDT)

Speed, Scale, and SASE: Reimagining Network Security - Americas

Virtual

Wed 21 May 2025 @ 05:00 PM (CDT)

TechTalk: Detecting Threats Across the Open, Deep and Dark Web With Infinity ERM

Virtual

Thu 22 May 2025 @ 03:00 PM (CEST)

Speed, Scale, and SASE: Reimagining Network Security - EMEA

Virtual

Thu 22 May 2025 @ 02:00 PM (EDT)

Speed, Scale, and SASE: Reimagining Network Security - Americas

Virtual

Wed 28 May 2025 @ 03:00 PM (CEST)

Harnessing AI to Prevent Cyber Attacks and Enhance Defense - EMEA

Virtual

Wed 28 May 2025 @ 02:00 PM (EDT)

Harnessing AI to Prevent Cyber Attacks and Enhance Defense - Americas

Virtual

Thu 29 May 2025 @ 03:00 PM (CEST)

The Hybrid Security Revolution: The SASE Advantage - EMEA

In-Person

Tue 20 May 2025 @ 11:30 AM (PDT)

Las Vegas: Check Point Hybrid Mesh

In-Person

Wed 21 May 2025 @ 11:30 AM (MST)

Tempe, AZ: Check Point Hybrid Mesh

In-Person

Tue 03 Jun 2025 @ 09:00 AM (CEST)

CheckMates LIve France - Workshop Check Point Quantum

In-Person

Tue 03 Jun 2025 @ 06:00 PM (EDT)

Montreal: CPX Recap

In-Person

Tue 10 Jun 2025 @ 06:00 PM (EDT)

Quebec City: CPX Recap

CheckMates Events

Are you a member of CheckMates?