On this episode of CheckMates Go, we’ll answer some questions about the community itself from our recent Learn About CheckMates session, the announcement of Public Early Availability of R82.10, and an errata about the Dynamic URL List feature mentioned in the last episode.

See also our Events calendar and the upcoming Deep Dive on Troubleshooting 101 for EMEA.

In this episode, we talk about the Spark Management Portal, Cloud Workshops, troubleshooting legacy geo policy, Network Groups and Updatable Objects,  Dynamic URL Lists for Application Control and URL Filtering, and the best way to upgrade a NIC to a higher speed while minimizing the work.

• Quantum Spark Management Unleashed TechTalk September 2025: Video, Slides, and Q&A
• Global Cloud Workshop Roadshow
• Troubleshooting Legacy Geo Policy
• Target version does not support Network Group objects that contain inner groups with Data Center objects
• Creating Application Control and URL Filtering Rules
• ClusterXL – Changing MGMT and eth2 from 1Gb to 10Gb
• Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents Outages

Wel talk about our latest integration with Wiz, more management features you may not be using, various tips and tricks related to VPNs, and an invitation to Check Point’s Usability Lab.

• Video: Wiz + Check Point: Cloud Security Integration | Visibility + Prevention in Action
• Unifying Cloud Risk and Network Defense: Wiz and Check Point
• This Month’s Spotlight - 3 Features You Should Start Using Today - September 2025
• PSA: Check Point and Palo Alto - GCM Phase 1
• HowTo: Configure a VPN between FortiGate & Check Point
• sk108600: VPN Site-to-Site with 3rd party
• Block VPN Traffic by Country
• Issue with DNS resolution in browser when connected via Check Point Mobile client
• Check Point Usability Lab

We have an excerpt from our recent Future of SD-WAN session and how Check Point products protect against BRICKSTORM.

This week, we’ve got some Maestro content, how well does Threat Prevention work without https inspection enabled, rad errors, improvements to Application Control signatures, a way to find IPS Signatures with the API, CloudGuard WAF updates, and a good reason not to run debugs on a production firewall.

• Check Point Acquires Lakera
• Introducing Lakera - Securing the AI Frontier TechTalk
• Maestro Best Practices FAQ
• Maestro and Asymmetric Connections
• What real production do we get from Threat Prevention Without HTTPS Inspection
• How to Deal with RAD Errors
• Advanced Technical Resource Guide: RAD
• Improved App Control Detection Without HTTPS Inspection
• How to filter for IPS signatures with a space in the name via the API
• CloudGuard WAF: Product News September 2025
• Run Debugs in a Maintenance Window

In this episode, PhoneBoy talks about the DigiCert issue, an excerpt from our External Cyber Risks session, four features you should be using, a SmartConsole extension to help you find zero hit-count rules, and new API calls in R82 JHF 38.

Upcoming Sessions the week of September 8 2025:

• The Future of SD-WAN
• Management API Best Practices
• Quantum Spark Management Unleashed
• Remote Access and SASE Best Practices 

PhoneBoy plays an excerpt from the recent State of Ransomware Q2 2025 session as well addressing a bunch of questions on Web Filtering!

• Web Filtering Best Practices August 2025
• Not showing last matched layer in logs
• App Control/URLF Rules and Classification
• Unified Column-Based Rule Matching
• Best Practices for Websites and Applications
• Product & Feature Suggestions
• External RFE Ideas Portal (Pilot)

PhoneBoy plays an excerpt from our SharePoint CVEs Deep Dive, 3 Features You Should Start Using, different DNS servers per domain, using dnsmasq prior to R82, interpreting fwaccel stat output, ordered versus inline layers, and a SmartConsole cheat cheat.

PhoneBoy discusses Check Point's announcement of the Quantum Force 3900 Series Appliances, sk183199, Hotfix Installation Order, R82.10 Production Early Availability, and new updatable objects (including one for MCP Servers).

Make sure to register for our upcoming TechTalk showing off Veriti, a.k.a. Threat Exposure Management.

PhoneBoy discusses the latest TechTalk on AI Agents, Threat Prevention Performance Boost in R82, R82 JHF 25, SAML and Secondary Connect, SSH to a given VS, and the generic-object API.