## Application control matches only Web Browsing Hello everyone, I've done a migration from R80 to R80.10 and now I only see "Web Browsing" application in App Control logs: All access is caught by URL filtering, but only the blocks match to their specific rules. A rule which allows facebook gets no hits, yet all facebook traffic matches the clean up any - any - any - allow: Here is an example of app control log: The gateway is an SMB 1470 appliance running R77.20.60. There are separate layers for Network and Application rules as required for R77. All logging is set to extended. Is this a gateway limitation or a configuration issue? - Tags: - [1400](https://community.checkpoint.com/t5/tag/1400/tg-p/board-id/smb-smp) - [application control](https://community.checkpoint.com/t5/tag/application%20control/tg-p/board-id/smb-smp) - [logs](https://community.checkpoint.com/t5/tag/logs/tg-p/board-id/smb-smp) - [r80.10](https://community.checkpoint.com/t5/tag/r80.10/tg-p/board-id/smb-smp) - [smb](https://community.checkpoint.com/t5/tag/smb/tg-p/board-id/smb-smp) 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4591?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) - [All forum topics](https://community.checkpoint.com/t5/Spark-Firewall-SMB/bd-p/smb-smp/page/103 "Spark Firewall (SMB)") - [Previous Topic](https://community.checkpoint.com/t5/Spark-Firewall-SMB/1570-xDSL-and-LTE-VDSL2-SFP/td-p/128925 "1570 xDSL and LTE / VDSL2 SFP") - [Next Topic](https://community.checkpoint.com/t5/Spark-Firewall-SMB/VoIP-Issue-and-SMB-Appliance-600-1000-1200-1400/td-p/40613 "VoIP Issue and SMB Appliance (600/1000/1200/1400)") 10 Replies [aner\_sagi](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/8159) Contributor ‎2017-07-3102:04 PM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5688) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4592/highlight/true#M5688) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5688/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4592) HTTPS inspection enabled ? 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4592?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) [Pedro\_Espindola](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/4362) Employee ‎2017-08-0106:55 AM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5690) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4594/highlight/true#M5690) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5690/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4594) [In response to aner\_sagi](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4592/highlight/true#M5688) Yes! But I get the same result for inspected and bypassed traffic. The policy in R80.10 is the same as it was in R80, when it worked fine. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4594?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) [Federico\_Meine1](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/9786) Participant ‎2017-07-3103:26 PM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5689) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4593/highlight/true#M5689) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5689/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4593) Totally agree with Aner. I had a similar issue in the past with anonymizers, we could identify Tor traffic but couldn't apply any policies to it without HTTPS inspection. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4593?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) [Pedro\_Espindola](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/4362) Employee ‎2017-08-0106:58 AM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5691) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4595/highlight/true#M5691) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5691/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4595) [In response to Federico\_Meine1](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4593/highlight/true#M5689) So you solved the issue by enabling HTTPS inspection? 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4595?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) [Federico\_Meine1](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/9786) Participant ‎2017-08-0107:37 AM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5692) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4596/highlight/true#M5692) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5692/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4596) [In response to Pedro\_Espindola](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4595/highlight/true#M5691) I didn't had the experience with Facebook/Twitter, by enabling HTTPS we could block Tor traffic via AppControl/URL Filtering. Try it in a lab enviroment first. Also keep in mind that HTTPS Inspection is highly resource demanding in the gateway side. If you have your network segmented is best to implement it by phases by adding exceptions and see the impact in CPU/Memory. [1\\ \\ \\ Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/smb-smp/message-id/5692/tab/all-users "Click here to see who gave kudos to this post.") [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4596?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) [Pedro\_Espindola](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/4362) Employee ‎2017-08-0108:23 AM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5693) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4597/highlight/true#M5693) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5693/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4597) [In response to Federico\_Meine1](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4596/highlight/true#M5692) HTTPS is already enabled and blocking https malware, I tested it. I tried disabling it and got the exact same result. It is back on. It has been enabled and working beautifully with central management since R77.30 + Addon and then R80. I've noticed some differences when upgrading to R80.10. - In R80, when some scope (network or host) was not explicitly defined for inspection or bypass in the https inspection rulebase it was NOT inspected. - After upgrading to R80.10, I had to explicitly set the bypass for those networks or they would be inspected. I have not found documentation that explains the differences. Most of the network IS inspected, including the machine I am using to test, obviously. CPU/Memory is not an issue. The number of users and throughput is much lower than supported by the appliance. Memory is usually at 40% at most. CPU is usually at 10%. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4597?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) [PhoneBoy](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7) Admin ‎2017-08-0108:26 PM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5694) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4598/highlight/true#M5694) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5694/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4598) Make sure you have logging configured as described in this thread: [https://community.checkpoint.com/message/6785-rules-with-any-applicationservice-not-logging-applicat...](https://community.checkpoint.com/message/6785-rules-with-any-applicationservice-not-logging-application-in-r8010?sr=search&searchId=e208ab41-7161-4934-9f0d-1ea03209001c&searchIndex=1) ‌ [2\\ \\ \\ Kudos](https://community.checkpoint.com/t5/kudos/messagepage/board-id/smb-smp/message-id/5694/tab/all-users "Click here to see who gave kudos to this post.") [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4598?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) [Pedro\_Espindola](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/4362) Employee ‎2017-08-0206:34 AM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5695) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4599/highlight/true#M5695) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5695/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4599) [In response to PhoneBoy](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4598/highlight/true#M5694) Thank you for your reply, Dameon. I was the one that asked that other question. The logging mode is set for extended. In that one the issue was a R80.10 gateway. Now it is a preR80 1470, which doesn't have multiple logging modes. The problem here is a little different, it is not just the logs, it seems. Application Control is not matching the applications correctly and all allowed traffic is processed at the Clean Up. URL filtering is correctly matching most of the blocked sites at the correct rule, except for "High Risk Applications", which are being allowed as "Web browsing". Look at the screenshot below. Facebook traffic doesn't match this rule and is allowed at the last rule. Maybe this question should be moved to another category. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4599?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) [PhoneBoy](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/7) Admin ‎2017-08-0207:23 AM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5696) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4600/highlight/true#M5696) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5696/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4600) [In response to Pedro\_Espindola](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4599/highlight/true#M5695) Can you post a screenshot of the rule that it should match? Also if you haven't already, I would start a case with the Check Point TAC. 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4600?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) [Pedro\_Espindola](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/4362) Employee ‎2017-08-0310:52 AM [Show option menu](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=smb-smp&message.id=5697) - [Permalink](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4601/highlight/true#M5697) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/smb-smp/message-id/5697/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/4601) Turns out, the good old REBOOT solved the problem... Unfortunately we won't know what caused it. Thank you all for the help, guys. [2\\ \\ \\ Kudos](https://community.checkpoint.com/t5/kudos/messagepage/board-id/smb-smp/message-id/5697/tab/all-users "Click here to see who gave kudos to this post.") [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/4601?t:ac=board-id/smb-smp/message-id/5687/thread-id/5687&t:cp=kudos/contributions/tapletcontributionspage&ticket=9NSwezK8By-o_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) Post Reply Leaderboard Epsum factorial non deposit quid pro quo hic escorol. | User | Count | | --- | --- | |
[sx8n20394](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/107449) | 7 | |
[israelfds95](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/93117) | 7 | |
[jorgeluiznim](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/85528) | 5 | |
[velo](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/110726) | 1 | |
[BikeMan](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/54723) | 1 | |
[emmap](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/71054) | 1 | |
[CEEJAY](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/112446) | 1 | |
[Max\_Leorne](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/142185) | 1 | |
[Chris\_Atkinson](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/3630) | 1 | [View All ≫](https://community.checkpoint.com/t5/forums/kudosleaderboardpage/board-id/smb-smp/timerange/one_month/page/1/tab/authors) Trending Discussions [Reach My Device – A Native Option for Secure Remote Access to Quantum Spark Appliances](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Reach-My-Device-A-Native-Option-for-Secure-Remote-Access-to/td-p/280076) [Downgrading a Quantum Spark Appliance: From 'Upgrade Not Supported' to a Working Boot Loader Recover](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Downgrading-a-Quantum-Spark-Appliance-From-Upgrade-Not-Supported/td-p/279888) [L2TP Remote Access VPN - Can't Connect on SMB 2550 R82.00.10](https://community.checkpoint.com/t5/Spark-Firewall-SMB/L2TP-Remote-Access-VPN-Can-t-Connect-on-SMB-2550-R82-00-10/td-p/279943) Upcoming Events Sort by: - [All](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591#) - [Virtual](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591#) - [In-Person](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591#) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats](https://community.checkpoint.com/t5/CheckMates-Events/Under-the-Hood-Check-Point-and-Illumio-Modern-Network-Defense/ev-p/279701) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280019) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280021) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280020) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) Thu 30 Jul 2026 @ 11:30 AM (CDT) [CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/CheckMates-Live-DFW-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279920) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) [Virtual](https://community.checkpoint.com/labels/Virtual) Thu 30 Jul 2026 @ 10:00 AM (PDT) [AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Masters-E12-READY-OR-NOT-Securing-the-AI-Enterprise/ev-p/277411) [In-Person](https://community.checkpoint.com/labels/In-Person) Tue 11 Aug 2026 @ 11:30 AM (EDT) [New York City: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/New-York-City-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279476) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 13 Aug 2026 @ 11:30 AM (EDT) [Waltham, MA: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/Waltham-MA-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279475) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 08:30 AM (COT) [Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Evolution-Hybrid-Mesh-Management-Visibilidad/ev-p/280003) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 06:00 PM (COT) [Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Intelligence-IA-Generativa-en-Acci%C3%B3n-para/ev-p/280004) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 27 Aug 2026 @ 09:00 AM (CEST) [Check Point Hands-On SASE and Cloud Workshop - Zurich](https://community.checkpoint.com/t5/CheckMates-Events/Check-Point-Hands-On-SASE-and-Cloud-Workshop-Zurich/ev-p/279914) [In-Person](https://community.checkpoint.com/labels/In-Person) Wed 21 Oct 2026 @ 09:00 AM (BST) [AI Security Workshop - Glasgow](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Workshop-Glasgow/ev-p/278505) [CheckMates Events](https://community.checkpoint.com/t5/CheckMates-Events/eb-p/events) [Top](https://community.checkpoint.com/t5/Spark-Firewall-SMB/Application-control-matches-only-Web-Browsing/m-p/4591) About CheckMates - [Getting Started & FAQ](https://community.checkpoint.com/t5/help/faqpage) - [Community Guidelines](https://community.checkpoint.com/t5/user/TermsOfServicePage) Learn Check Point - [Check Point for Beginners](https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/bg-p/check-point-for-beginners-2-0) - [Check Point Trivia](https://community.checkpoint.com/t5/Check-Point-Trivia/bg-p/trivia) - [CheckFlix Videos](https://community.checkpoint.com/t5/CheckFlix/ct-p/checkflix) Advanced Learning - [Check Point Security Masters](https://community.checkpoint.com/t5/Check-Point-Security-Masters/gp-p/ccsm) - [Tip of the Week](https://community.checkpoint.com/t5/SecureKnowledge-Tip-of-the-Week/bg-p/secureknowledge) - [TechTalks](https://community.checkpoint.com/t5/TechTalks/ct-p/techtalks%20role=) - [Training and Certification](https://community.checkpoint.com/t5/Training-and-Certification/bd-p/training-and-certification) Resources - [CheckMates Toolbox](https://community.checkpoint.com/t5/CheckMates-Toolbox/ct-p/CheckMatesToolbox) - [Developers (Code Hub)](https://community.checkpoint.com/t5/Developers-API-CLI/bd-p/codehub) - [Product Announcements](https://community.checkpoint.com/t5/Product-Announcements/bg-p/products-blog) - [Upcoming Events](https://community.checkpoint.com/t5/Upcoming-Events/bg-p/checkmates-live) Non-English Discussions - [Español](https://community.checkpoint.com/t5/Espa%C3%B1ol/bd-p/spanish) - [French](https://community.checkpoint.com/t5/Fran%C3%A7ais/bd-p/francais) - [Japanese](https://community.checkpoint.com/t5/Japanese-%E6%97%A5%E6%9C%AC%E8%AA%9E/bd-p/Japanese) - [Português](https://community.checkpoint.com/t5/Portugu%C3%AAs/bd-p/portuguese) - [Russian](https://community.checkpoint.com/t5/Russian/bd-p/russian) - [Chinese](https://community.checkpoint.com/t5/Chinese/bd-p/taiwan) YOU DESERVE THE BEST SECURITY We’re Social. Follow Us [CheckMates on LinkedIn](http://linkedin.com/company/cpcheckmates) [Check Point on YouTube](https://www.youtube.com/user/CPGlobal) [CheckMates on Facebook](https://www.facebook.com/cpcheckmates/) [CheckMates on Instagram](https://www.instagram.com/cpcheckmates/) ©1994-2026 Check Point Software Technologies Ltd. All rights reserved. [Copyright](https://www.checkpoint.com/copyright/) [Privacy Policy](https://www.checkpoint.com/privacy/) [About Us](https://www.checkpoint.com/about-us/) [UserCenter](https://usercenter.checkpoint.com/) Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.