CHECKPOINT <DOT> TIPS

- Architecture and Performance Tuning
[Heiko Ankenbrand 👁 1.298.764]
- Ports Used for Communication
[Heiko Ankenbrand 👁 997.543]
🗏 Communication Ports (PDF)
[Heiko Ankenbrand 👁 897.543]
🗏 SmartConsole Extensions
[Heiko Ankenbrand 👁 967.873]

🗏 Performance
🗏 Gateway
🗏 Maestro and VSX
🗏 Management

🗏 Europe Risk Level


CVE Risk Level


BSI Risk Level


Web Server Attacks


DDoS Attacks












Heiko Ankenbrand has been performing computer security work for over 28 years and has worked with Check Point products since 1996.

I am an active participant at the
Checkmates user community as well as the Check Point User Group and frequently lends his expertise to solving problems posted by Check Point administrators all over the world. I also deal with Check Point architecture and performance issues.

Here is a brief overview of my current Check Point certifications. You can find more badges from me at Credly:


- SecureXL (sk153832)
- SecureXL Mechanism (sk32578)
- SecureXL Debug (sk31404)
- SecureXL Exclude Traffic (sk104468)
- SecureXL Drop Templates (sk66402)
- SecureXL NAT Templates (sk71200)
- SecureXL Fast Accelerator (sk156672)
- SecureXL Limiting Rules for DoS (sk112454)
- CoreXL (sk98737)
- CoreXL Dynamic Balancing (sk164155)
- CoreXL Dynamic Dispatcher (sk105261)
- Best Practices - Gateway Performance (sk98348)
- Optimized Drops (sk90861)
- Optimized Drops advanced (sk90941)
- SMP IRQ Affinity (sk61962)
- Automatic SIM Affinity (sk33250)
- Best Practices - VPN Performance (sk105119)
- VPN Core (sk104760)
- MultiCore Support for IPsec VPN (sk118097)
- Speeds of algorithms for IPsec/SSL (sk73980)
- Firewall Priority Queues (sk105762)
- SMT (HyperThreading) Feature Guide (sk93000)
- HTTPS Inspection (sk108202)
- Firewall Priority Queues (sk105762)
- Management Data Plane Separation (sk138672)
- CPU Spike Detective (sk166454)
- Performance Investigation Procedure (sk167553)
- Performance Sizing Utility CPSizeMe (sk88160)
- Performance Tuning Virtual Gateway (sk169252)
- Connections Table Format (sk65133)
- Peak number of connections (sk65463)
- Top Rule Hits (sk106410)
- Connstat Utility (sk85780)
- IPS Performance Levels (sk116254)
- IPS Pattern Matcher CPU time (sk43733)
- Performance impact HTTP/HTTPS Proxy (sk92482)
- Memory leak detection (sk35496)
- Simulation of low memory (sk100766)
- Ring Buffer Size (sk42181)
- CPView Utility (sk101878)
- HealthCheck Point (HCP) (sk171436)
- Best Practices - DDoS attacks (sk112241)
- MTU and Fragmentation Issues in IPsec (sk98074)
- Fragmented Packet Source (sk65852)
- Jumbo Frames Appliances (sk111407)

Coming soon