## Both Active and Standby AWS Cloudguard reply to HTTPS probes Hello CheckMates, I am trying to understand, why Checkpoint CloudGuard standby gateway in AWS is replying to my 443 health probes? My management portal has been moved from the default port to 9443, I have tried to configure $FWDIR/boot/modules/fwkern.conf with a cloud\_balancer\_port=8117 as per [https://support.checkpoint.com/results/sk/sk181836](https://support.checkpoint.com/results/sk/sk181836) but it seems like the behavior is different than in Azure. It will actually forward the probes to the endpoint server, and as a regular webserver - it does listen to 443, not 8117. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/263760?t:ac=board-id/CloudNetworkSecurityforum-board/thread-id/5584&t:cp=kudos/contributions/tapletcontributionspage&ticket=JR4dQwJ27OCG_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760) - [All forum topics](https://community.checkpoint.com/t5/Cloud-Firewall/bd-p/CloudNetworkSecurityforum-board/page/10 "Cloud Firewall") - [Previous Topic](https://community.checkpoint.com/t5/Cloud-Firewall/Azure-Data-Center-Objects-Inaccessible/td-p/243834 "Azure Data Center Objects - Inaccessible") - [Next Topic](https://community.checkpoint.com/t5/Cloud-Firewall/Secondary-Azure-management-server/td-p/263478 "Secondary Azure management server") 1 Solution Accepted Solutions [Nir\_Shamir](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1792) Employee ‎2025-11-2810:07 PM [Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=5587) - [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263870/highlight/true#M5587) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/5587/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/263870) [In response to reybanger](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263765/highlight/true#M5586) [Jump to solution](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263870#M5587) What kind of deployment do you exactly have ? from what you wrote it looks like a Cluster HA and with Clusters in AWS we use the “virtual IP”  as the destination because it forwards the traffic to the ACTIVE member. in AWS we use LB’s only with Autoscale deployments. [View solution in original post](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263870#M5587) [1\\ \\ \\ Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/CloudNetworkSecurityforum-board/message-id/5587/tab/all-users "Click here to see who gave kudos to this post.") [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/263870?t:ac=board-id/CloudNetworkSecurityforum-board/thread-id/5584&t:cp=kudos/contributions/tapletcontributionspage&ticket=JR4dQwJ27OCG_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760) 3 Replies [\_Val\_](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/181) Admin ‎2025-11-2704:44 AM - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=5585) - [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263763/highlight/true#M5585) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/5585/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/263763) [Jump to solution](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263870#M5587) HTTPS port on a standby GW answering probes is a normal situation. HTTPS is open in one of many scenarios, when specific blades, such as RAS VPN, Mobile access, Identity Awareness, and more, are enabled. Why does it cause an issue for you? 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/263763?t:ac=board-id/CloudNetworkSecurityforum-board/thread-id/5584&t:cp=kudos/contributions/tapletcontributionspage&ticket=JR4dQwJ27OCG_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760) [reybanger](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/70586) Contributor ‎2025-11-2705:47 AM - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=5586) - [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263765/highlight/true#M5586) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/5586/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/263765) [In response to \_Val\_](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263763/highlight/true#M5585) [Jump to solution](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263870#M5587) Thank you for replying. This is basically to avoid session issues or asymmetric traffic. IT would be nice if Checkpoint would work in a similar way like in Azure - where the traffic from LB is forwarded only to active member. I am looking for some options here to point traffic to my backend servers listening on 443 using load balancer in front. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/263765?t:ac=board-id/CloudNetworkSecurityforum-board/thread-id/5584&t:cp=kudos/contributions/tapletcontributionspage&ticket=JR4dQwJ27OCG_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760) [Nir\_Shamir](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1792) Employee ‎2025-11-2810:07 PM [Jump to solution](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/m-p/263870#M5587) What kind of deployment do you exactly have ? in AWS we use LB’s only with Autoscale deployments. 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760) Post Reply Leaderboard Epsum factorial non deposit quid pro quo hic escorol. | User | Count | | --- | --- | |
[WiliRGasparetto](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/96099) | 13 | |
[Jeff\_Engel](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1390) | 1 | |
[jorgeluiznim](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/85528) | 1 | [View All ≫](https://community.checkpoint.com/t5/forums/kudosleaderboardpage/board-id/CloudNetworkSecurityforum-board/timerange/one_month/page/1/tab/authors) Trending Discussions [Part 1 How CloudGuard Controller R82.10 Builds Dynamic Security Context](https://community.checkpoint.com/t5/Cloud-Firewall/Part-1-How-CloudGuard-Controller-R82-10-Builds-Dynamic-Security/td-p/279800) [Identity Distribution, TTL, Monitoring, and Operations in CloudGuard Controller R82.10](https://community.checkpoint.com/t5/Cloud-Firewall/Identity-Distribution-TTL-Monitoring-and-Operations-in/td-p/279918) [Known R82.10 Limitations That Affect Architecture The current R82.10 documentation lists limitati](https://community.checkpoint.com/t5/Cloud-Firewall/Known-R82-10-Limitations-That-Affect-Architecture-The-current/td-p/279934) Upcoming Events Sort by: - [All](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760#) - [Virtual](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760#) - [In-Person](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760#) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats](https://community.checkpoint.com/t5/CheckMates-Events/Under-the-Hood-Check-Point-and-Illumio-Modern-Network-Defense/ev-p/279701) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280019) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280021) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280020) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) Thu 30 Jul 2026 @ 11:30 AM (CDT) [CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/CheckMates-Live-DFW-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279920) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) [Virtual](https://community.checkpoint.com/labels/Virtual) Thu 30 Jul 2026 @ 10:00 AM (PDT) [AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Masters-E12-READY-OR-NOT-Securing-the-AI-Enterprise/ev-p/277411) [In-Person](https://community.checkpoint.com/labels/In-Person) Tue 11 Aug 2026 @ 11:30 AM (EDT) [New York City: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/New-York-City-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279476) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 13 Aug 2026 @ 11:30 AM (EDT) [Waltham, MA: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/Waltham-MA-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279475) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 08:30 AM (COT) [Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Evolution-Hybrid-Mesh-Management-Visibilidad/ev-p/280003) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 06:00 PM (COT) [Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Intelligence-IA-Generativa-en-Acci%C3%B3n-para/ev-p/280004) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 27 Aug 2026 @ 09:00 AM (CEST) [Check Point Hands-On SASE and Cloud Workshop - Zurich](https://community.checkpoint.com/t5/CheckMates-Events/Check-Point-Hands-On-SASE-and-Cloud-Workshop-Zurich/ev-p/279914) [In-Person](https://community.checkpoint.com/labels/In-Person) Wed 21 Oct 2026 @ 09:00 AM (BST) [AI Security Workshop - Glasgow](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Workshop-Glasgow/ev-p/278505) [CheckMates Events](https://community.checkpoint.com/t5/CheckMates-Events/eb-p/events) [Top](https://community.checkpoint.com/t5/Cloud-Firewall/Both-Active-and-Standby-AWS-Cloudguard-reply-to-HTTPS-probes/td-p/263760) About CheckMates - [Getting Started & FAQ](https://community.checkpoint.com/t5/help/faqpage) - [Community Guidelines](https://community.checkpoint.com/t5/user/TermsOfServicePage) Learn Check Point - [Check Point for Beginners](https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/bg-p/check-point-for-beginners-2-0) - [Check Point Trivia](https://community.checkpoint.com/t5/Check-Point-Trivia/bg-p/trivia) - [CheckFlix Videos](https://community.checkpoint.com/t5/CheckFlix/ct-p/checkflix) Advanced Learning - [Check Point Security Masters](https://community.checkpoint.com/t5/Check-Point-Security-Masters/gp-p/ccsm) - [Tip of the Week](https://community.checkpoint.com/t5/SecureKnowledge-Tip-of-the-Week/bg-p/secureknowledge) - [TechTalks](https://community.checkpoint.com/t5/TechTalks/ct-p/techtalks%20role=) - [Training and Certification](https://community.checkpoint.com/t5/Training-and-Certification/bd-p/training-and-certification) Resources - [CheckMates Toolbox](https://community.checkpoint.com/t5/CheckMates-Toolbox/ct-p/CheckMatesToolbox) - [Developers (Code Hub)](https://community.checkpoint.com/t5/Developers-API-CLI/bd-p/codehub) - [Product Announcements](https://community.checkpoint.com/t5/Product-Announcements/bg-p/products-blog) - [Upcoming Events](https://community.checkpoint.com/t5/Upcoming-Events/bg-p/checkmates-live) Non-English Discussions - [Español](https://community.checkpoint.com/t5/Espa%C3%B1ol/bd-p/spanish) - [French](https://community.checkpoint.com/t5/Fran%C3%A7ais/bd-p/francais) - [Japanese](https://community.checkpoint.com/t5/Japanese-%E6%97%A5%E6%9C%AC%E8%AA%9E/bd-p/Japanese) - [Português](https://community.checkpoint.com/t5/Portugu%C3%AAs/bd-p/portuguese) - [Russian](https://community.checkpoint.com/t5/Russian/bd-p/russian) - [Chinese](https://community.checkpoint.com/t5/Chinese/bd-p/taiwan) YOU DESERVE THE BEST SECURITY We’re Social. Follow Us [CheckMates on LinkedIn](http://linkedin.com/company/cpcheckmates) [Check Point on YouTube](https://www.youtube.com/user/CPGlobal) [CheckMates on Facebook](https://www.facebook.com/cpcheckmates/) [CheckMates on Instagram](https://www.instagram.com/cpcheckmates/) ©1994-2026 Check Point Software Technologies Ltd. All rights reserved. [Copyright](https://www.checkpoint.com/copyright/) [Privacy Policy](https://www.checkpoint.com/privacy/) [About Us](https://www.checkpoint.com/about-us/) [UserCenter](https://usercenter.checkpoint.com/) Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.