CheckMates Go: Cyber Security Podcast from Check Point

On this episode, we’ll talk about the release of Check Point Firewall R82.20, a new Critical Security Advisory, OpenAI and Safety, Anthropic Risk Report, CoSnitch, AI Agents finding and exploiting CI/CD flaws.

On this episode, we’ll talk about the release of Check Point Firewall R82.20, a new Critical Security Advisory, OpenAI and Safety, Anthropic Risk Report, CoSnitch, AI Agents finding and exploiting CI/CD flaws.

On this episode, we’ll talk about MCP Servers, Hazmat, Patchmagedon, a LiteLLM Supply Chain Attack, Firewall rule limits, lab tools for Windows, Troubleshooting ARP and Layer 2 issues, DGA vs DNS Tunneling, and a tip when running debugs on a firewall.

On this episode, we talk on-premise SD-WAN management, IPS Optimization, Policy Auditor, and some AI News.

On this episode of CheckMates Go, PhoneBoy talks about Check Point-specific CVEs, AI News, and Rulebase Evaluation, Maestro Troubleshooting, and Rate Limiting.

In this episode, PhoneBoy talks about the AI Network Firewall and recent AI news.

In this episode, I discuss Check Point’s AI Security Report, AI Appreciation Day, some recent posts from community members worth highlighting, and the introduction of Check Point Live Patch.

In addition to the recent AI news, PhoneBoy discusses the R82.20 Public Early Availability Program. See also the TechTalk on SD-WAN On-Prem Management , a feature present in R82.20.

In addition to the recent AI news, PhoneBoy discusses updates with Web SmartConsole, Playblocks AI Agents Early Availability, other updates to Playblocks, and the Background Gateway Upgrade Early Availability.

See also:

On this episode, we talk about The Great Exposure Reset and some recent AI news.

See also: From Prompt Testing to AI Red Teaming at Enterprise Scale

Leave comments on CheckMates

PhoneBoy features the following posts from the CheckMates community:

PhoneBoy discusses the recent CheckMates Fest and a bunch of community-driven topics.

PhoneBoy discusses AI Risk Mapping, AI Security Masters, and some great posts from the CheckMates community you may have missed.

PhoneBoy interviews Cyber Security Technologist and Evangelist Marc Davidson discussing his recent blog posts on Hybrid Mesh and credential theft, more specifically on Identity Awareness in Hybrid Mesh.

Also, join us for CheckMates Fest 2026 on January 14th and vote on the best in the community in 2025!

1990s Marketing Graphic

PhoneBoy interviews Cyber Security Technologist and Evangelist Marc Davidson discussing his recent blog posts on Hybrid Mesh and credential theft when a question was asked: how do you ensure policies are implemented consistently across vendors. We also talk about the release of R82.10, which we did a TechTalk on a few weeks back.

PhoneBoy interviews Cyber Security Technologist and Evangelist Marc Davidson discussing his recent blog post on How Hybrid Mesh Defeats Credential Attacks, the fourth in a series on credential theft. (We discuss the third one in a future episode)

PhoneBoy interviews Cyber Security Technologist and Evangelist Marc Davidson discussing his recent blog post on Why Defenses Fail: The Fragmentation Problem, the second in a series on credential theft.

PhoneBoy also highlights a new feature in Infinity Playblocks called IOC Enforcement Connector.

PhoneBoy interviews Cyber Security Technologist and Evangelist Marc Davidson discussing his recent blog post on Defending Against Credential Attacks with a Hybrid Mesh Architecture. This episode discusses what credentials actually are and why letting them get out might be dangerous.

We also highlight a series of posts by Chris Atkinson providing tips on Dynamic Routing, specifically Router ID, Default Originate, Bidirectional Forwarding Detection, Protocol Rank, and Connection Persistence. 

In this episode of CheckMates Go, we'll play an excerpt from our recent Access Control and Threat Prevention Best Practices session that focuses on a key service that drives both: ThreatCloud AI.

In this episode of CheckMates Go, we’ll talk about Infinity AIOps, Infinity Playblocks, Early Availability of Policy Advisor, updates on Harmony Browse, and some how-to videos on Harmony SASE.

On this episode, we’ll follow up on how Threat Prevention blades work without HTTPS Inspection enabled, more about the Public R82.10 Early Availability program, enabling MFA for administrators, and more Maestro discussions and best practices.

On this episode of CheckMates Go, we’ll answer some questions about the community itself from our recent Learn About CheckMates session, the announcement of Public Early Availability of R82.10, and an errata about the Dynamic URL List feature mentioned in the last episode.

See also our Events calendar and the upcoming Deep Dive on Troubleshooting 101 for EMEA.

In this episode, we talk about the Spark Management Portal, Cloud Workshops, troubleshooting legacy geo policy, Network Groups and Updatable Objects,  Dynamic URL Lists for Application Control and URL Filtering, and the best way to upgrade a NIC to a higher speed while minimizing the work.

Wel talk about our latest integration with Wiz, more management features you may not be using, various tips and tricks related to VPNs, and an invitation to Check Point’s Usability Lab.

We have an excerpt from our recent Future of SD-WAN session and how Check Point products protect against BRICKSTORM.

This week, we’ve got some Maestro content, how well does Threat Prevention work without https inspection enabled, rad errors, improvements to Application Control signatures, a way to find IPS Signatures with the API, CloudGuard WAF updates, and a good reason not to run debugs on a production firewall.

In this episode, PhoneBoy talks about the DigiCert issue, an excerpt from our External Cyber Risks session, four features you should be using, a SmartConsole extension to help you find zero hit-count rules, and new API calls in R82 JHF 38.

Upcoming Sessions the week of September 8 2025:

PhoneBoy plays an excerpt from the recent State of Ransomware Q2 2025 session as well addressing a bunch of questions on Web Filtering!

PhoneBoy plays an excerpt from our SharePoint CVEs Deep Dive, 3 Features You Should Start Using, different DNS servers per domain, using dnsmasq prior to R82, interpreting fwaccel stat output, ordered versus inline layers, and a SmartConsole cheat cheat.

PhoneBoy discusses Check Point's announcement of the Quantum Force 3900 Series Appliances, sk183199, Hotfix Installation Order, R82.10 Production Early Availability, and new updatable objects (including one for MCP Servers).

Make sure to register for our upcoming TechTalk showing off Veriti, a.k.a. Threat Exposure Management.

PhoneBoy discusses the latest TechTalk on AI Agents, Threat Prevention Performance Boost in R82, R82 JHF 25, SAML and Secondary Connect, SSH to a given VS, and the generic-object API.

We have a few TechTalks planned:

I also discuss how to filter "wildcard domains" for web access and how to build your own Check Point lab.

Some recent discussions on the CheckMates community:

Professional Services Consultant Lari Luoma gives an introduction to Maestro and how it is different from ElasticXL, launched as part of the R82 release.

Product Manager Amit Navon discusses discusses the four ways Check Point provides a hybrid SASE solution.

Product Manager Bar Yassure discusses what we did to improve performance and stability in the E88.70 release of Harmony Endpoint.

A talk given by Morten Sørensen on Network Segmentation at CPX 2025 in Vienna.

An except from Tim Hall's Be Your Own TAC Part Deux session on User-Space Performance Pack (UPPAK) for Quantum Security Gateways.

An excerpt from a session with Danny Jung, Cyber Security Evangelist at SITS Group at CPX 2025 Vienna: Maestro for Everyone!

I talk about the highlights from CPX 2025 and include a mention to our upcoming Be Your Own TAC Part Deux session for EMEA and Americas on 27 March 2025!