Threat Prevention

Open Garden In Action:
Find and Remediate Threats Everywhere!

Watch Now

Introducing Check Point Quantum Spark 2500:
Smarter Security, Faster Connectivity, and Simpler MSP Management!

Learn More

New Appliance Announcements
and Faster Threat Prevention

Watch Now!

Check Point Named Leader
Forrester Wave™: Zero Trust Platforms, Q3 2025

Learn More

Remote Access VPN – User Experience
Help us with the Short-Term Roadmap

Take the Survey

CheckMates Go:
AI Agents

Listen Now

Create a Post

RECENT POSTS

MOST POPULAR

FEATURED POSTS

inside

Contributor

15999

Geo Blocking

15999

inside

Explorer

15900

HTTP parsing error detected. Bypassing the request as defined in the Inspection Settings. 840.40

15900

inside

Advisor

15899

Threat Emulation blade not communicating

15899

inside

Contributor

15700

IPS Core protection - I need help to better understand

15700

inside

Explorer

15500

How do I test if IPS is Working?

15500

inside

Contributor

15299

MTA Threat Extraction / Emulation Workflow ?

15299

inside

Contributor

15099

DNS Trap

15099

Solved

inside

Explorer

14999

Can I mannually update AntiVirus and Antibot thriugh cli

14999

Solved

inside

Contributor

14891

IPS policy installation timestamp

14891

inside

Contributor

14400

IPS Geoblocking

14400

inside

Participant

14299

Threat Prevention did not prevent first time e-mail with mailware file. Bridge GW+TE100X

14299

inside

Contributor

13999

IPS, Follow Up & Staging

13999

inside

Collaborator

13999

Offline list of Check Point IPS protections

13999

inside

Participant

13899

Geo Policy Blacklist

13899

Solved

inside

Collaborator

13895

INFO - https sites not working, zdebug errors PSL Drop: MUX_PASSIVE and PSL Drop: TLS_PARSER

13895

Solved

inside

Participant

13799

HTTPS Inspection errors

13799

inside

Advisor

13700

URL Filtering - Internal system error in RAD process

13700

Solved

inside

Contributor

13299

IPS Profile & Exception - Priority - Exception not working

13299

inside

Participant

13199

IPS Exception question

13199

Solved

inside

Participant

13099

MTA is skipping email messages due to disk space?

13099

inside

Participant

13099

Exclude Windows updates from Threat Emulation

13099

inside

Employee Alumnus

13000

Critical Vulnerability in Windows OS (CVE-2019-0708) - Announcement - UPDATED

13000

inside

Participant

12999

Virus mails slipping trough the firewall

12999

inside

Contributor

12999

How can we block Nmap and other Port scanners

12999

Solved

inside

Participant

12500

Meltdown and Spectre bugs

12500

Solved

inside

Contributor

12499

How to whitelist a URL for all the threat prevention blades

12499

inside

Collaborator

12399

Anti-Bot is not working as expected

12399

Solved

inside

Participant

12202

DNS Reputation Exception

12202

Solved

inside

Contributor

12199

R81.10 Resuming IPS inspection which was bypassed due to resources shortage at MUP:0 CUP:0

12199

inside

Admin

11999

Log4j - Web Scanning Tool and Protection verification - 2 Min work.

11999

inside

Employee Alumnus

11900

An update regarding CVE-2019-0708, a Remote Code Execution vulnerability in Remote Desktop Services

11900

inside

Collaborator

11899

Antivirus Database Version

11899

Solved

inside

Contributor

11699

R81 Geo policy updatable objects with exceptions

11699

inside

Participant

11600

Content Awareness R80.10 - Blocked request

11600

Solved

inside

Participant

11499

Anti-Virus Blade - Strict hold is not possible failure - Write to other side occured

11499

inside

Ambassador

11499

Exceptions on IPS Core Protections

11499

Solved

inside

Participant

11400

HTTPS Inspection - Chain Errors

11400

Solved

inside

Contributor

11300

Suspicious Activity Monitoring (SAM) Rules

11300

inside

Participant

11100

R80.10 IPS packet capture...how does it work?

11100

Solved

inside

Participant

10999

Block torrent applications

10999

inside

Contributor

10800

How to block Hashes of malware by IPS signature

10800

inside

Explorer

10799

CP SmartDefense Distributed Attack

10799

Solved

inside

Participant

10799

Anti-Bot protection "Trojan.Win32.Password-Unencrypted.A"

10799

inside

Explorer

10793

IPS Protection - TCP Windows Size Enforcement

10793

inside

Advisor

10600

FTP Anti Virus

10600

inside

Participant

10501

GeoProtection daily update problem today

10501

Solved

inside

Advisor

10500

IPS confusion

10500

inside

Collaborator

10340

IPS/Content Awareness Presentation Slide

10340

inside

Contributor

10199

r80.20 - Application Control - HTTP parsing error occurred (2)

10199

inside

Employee

10099

IPS Best Practices in R80.30

10099

Solved

inside

Contributor

10099

Global Policy Exceptions

10099

Solved

inside

Participant

9899

Automating IPS

9899

inside

Employee

9899

R80.30 Packet Processing - Achieving Infinity

9899

inside

Participant

9599

IP Block file - Unable to connect to Interal Web Server

9599

Solved

inside

Explorer

9500

SNORT Rules and Checkpoint R77.30 IPS

9500

inside

Collaborator

9500

IPS Non Compliant HTTP

9500

Solved

inside

Collaborator

9500

URLF and APCL are not responding

9500

inside

Contributor

9499

CVE-2017-9841 not found on IPS Signature list on Checkpoint

9499

inside

Participant

9499

HTTPS inspection bypass R80.10

9499

inside

Explorer

9499

How to search URL risk level by website URL

9499

inside

Advisor

3661

Optimizing Threat Prevention best practice on Inspection Setting

3661

inside

Explorer

1197

Iphone emails sent over LTE get bounced by MTA

1197

inside

Explorer

652

IPS exception based on Proxied Source IP?

652

inside

Participant

1183

drop tcp bad checkum packets

1183

Solved

inside

Explorer

9484

Difference between "Protected Scope" and "Destination"

9484

Solved

inside

Contributor

1596

IPS update status: Update failed. Failed to load database.

1596

Solved

inside

Contributor

17945

Failed to update ips database

17945

inside

Advisor

1239

Verifying Threat Intelligence Import using Custom Feed

1239

Solved

inside

Participant

3013

Error message in /var/log/messages after upgrade to R81.20

3013

Solved

inside

Participant

12327

DNS Reputation Exception

12327

Solved

inside

Legend

1794

Anti-bot block page does not show up

1794

Solved

inside

Collaborator

3376

Weird IP (0.0.127.x) in IPS Logs

3376

inside

Participant

2364

Missing IPS protection?

2364

inside

Advisor

1483

login.gov

1483

Solved

inside

Advisor

1630

TE2000 private cloud

1630

inside

Participant

3737

Error on emulating HTTP/HTTPS links on local R81 Threat Emulation

3737

inside

Mentor

829

SandBlast TE100X does not download Win10 image

829

inside

Explorer

1498

DNS Data Overflow causing high CPU and IPS Bypass

1498

Solved

inside

Collaborator

949

E-Mail notification when automatic IPS policy install fails

949

Solved

inside

Leader

896

Customized activation Criteria

896

inside

Explorer

15968

HTTP parsing error detected. Bypassing the request as defined in the Inspection Settings. 840.40

15968

inside

Advisor

490

Threat indicators - The feed resource ... is not available

490

inside

Explorer

2254

Threat Emulation update error

2254

inside

Advisor

1257

R81.20 and STIX File Imports (CISA)

1257

Solved

inside

Contributor

1762

Zero Phising Implementation

1762

inside

Advisor

968

Is there a way to change the way severity level looks in the sent logs?

968

Solved

inside

Contributor

1458

Threat Prevention logs

1458

inside

Admin

643

Tips and Tricks 2024 #5 - IPS Optimization and Investigation

643

inside

Admin

414

Tips and Tricks 2024 #14 - Why You Need a Best Practices Workshop

414

inside

Admin

463

Tips and Tricks 2024 #13 - Threat Prevention Hardcore Mode

463

Solved

inside

Mentor

655

IPS events grouping in SmartLog

655

inside

Participant

35637

DNS trap bogus IP

35637

inside

Champion

18536

Default DNS Trap and malware detection?

18536

inside

Contributor

669

IPS Update failed - Failed to extract offline IPS package

669

Solved

inside

Collaborator

1792

Create Allow rule for specific IP address

1792

Solved

inside

Explorer

15141

Can I mannually update AntiVirus and Antibot thriugh cli

15141

inside

Contributor

4862

IPS Update and Policy installation

4862

inside

Contributor

699

Check the correctness of Threat Prevention

699

Solved

inside

Advisor

1169

Exceptions and N/A under Protection/Site/File/Blade

1169

inside

Explorer

873

threat prevention and some Office Files dont work

873

inside

Contributor

5470

Geoblock Top Ten by country

5470

inside

Explorer

901

Utilization of IPS protection HTTP Header Patterns

901

Solved

inside

Explorer

9082

Do I need https inspection to truly benefit from IPS?

9082

inside

Contributor

2515

polyfill.io - malicious script embedded in websites. How to handle DNS queries to it?

2515

inside

Advisor

1606

IPS Core Protection

1606

Solved

inside

Explorer

1813

A mistake while Adding domain server on MDS

1813

inside

Participant

904

Threat Extraction subscription expires in 360 days

904

inside

Advisor

996

IPS - Block HTTP Non Compliant

996

inside

Admin

3200

Threat Prevention & Vulnerability Management Survey

3200

Solved

inside

Collaborator

1616

Threat Prevention Exception - Performance tuning R81.20

1616

inside

Participant

1706

Anti-Bot

1706

inside

Participant

1112

Threat Prevention - decoding QR Codes

1112

Solved

inside

Participant

863

Custom Intelligence Feeds - Traffic is blocked but not seen in logs

863

inside

Participant

515

How to enable URL blocked by IPS blade

515

inside

Admin

520

CVE-2024-20353

520

inside

Participant

4325

Connection was allowed because background classification mode was set - Anti-Bot

4325

inside

Collaborator

949

Feature comparison - Newly Observed domain

949

Solved

inside

Advisor

3209

opswat and check point

3209

inside

Explorer

7588

ICMP covert channel detection

7588

Solved

inside

Contributor

6340

3rd party Phishing testing url being identified as malicious, unable to whitlist fully.

6340

No messages.

Threat Prevention

Your place to discuss Check Point's Advanced Network Threat Prevention products, including Threat Emulation (Sandboxing, Threat Extraction (a.k.a. Content Disarm and Reconstruction (CDR), Intrusion Prevention System, Anti-Bot, Antivirus, and Anti-Spam solutions.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

User

Count

Upcoming Events

Sort by:

Virtual

Tue 22 Jul 2025 @ 10:00 AM (CEST)

Cyber Security Training in the Era of AI Threats: Managed SmartAwareness Explained - EMEA

Virtual

Tue 22 Jul 2025 @ 05:00 PM (CEST)

Cyber Security Training in the Era of AI Threats: Managed SmartAwareness Explained - AMER

Virtual

Thu 24 Jul 2025 @ 11:00 AM (EDT)

Tips and Tricks 2025 #10: SD-WAN + Security: The Ultimate Defense for Your Business

Virtual

Thu 31 Jul 2025 @ 10:00 AM (CEST)

CloudGuard Network Security for Nutanix - Full Deployment with Tenant & Transit VPC - EMEA/APAC

Virtual

Thu 31 Jul 2025 @ 05:00 PM (CEST)

CloudGuard Network Security for Nutanix - Full Deployment with Tenant & Transit VPC - AMER/EMEA

Virtual

Wed 13 Aug 2025 @ 04:00 PM (CEST)

Operationalizing Threat Intelligence, Part III: Threat Modeling & Security Preparedness

Virtual

Tue 22 Jul 2025 @ 10:00 AM (CEST)

Cyber Security Training in the Era of AI Threats: Managed SmartAwareness Explained - EMEA

Virtual

Tue 22 Jul 2025 @ 05:00 PM (CEST)

Cyber Security Training in the Era of AI Threats: Managed SmartAwareness Explained - AMER

Virtual

Thu 24 Jul 2025 @ 11:00 AM (EDT)

Tips and Tricks 2025 #10: SD-WAN + Security: The Ultimate Defense for Your Business

Virtual

Thu 31 Jul 2025 @ 10:00 AM (CEST)

CloudGuard Network Security for Nutanix - Full Deployment with Tenant & Transit VPC - EMEA/APAC

Virtual

Thu 31 Jul 2025 @ 05:00 PM (CEST)

CloudGuard Network Security for Nutanix - Full Deployment with Tenant & Transit VPC - AMER/EMEA

Virtual

Wed 13 Aug 2025 @ 04:00 PM (CEST)

Operationalizing Threat Intelligence, Part III: Threat Modeling & Security Preparedness

In-Person

Tue 07 Oct 2025 @ 09:30 AM (CEST)

CheckMates Live Denmark!

CheckMates Events

Are you a member of CheckMates?