> Source: [sk1000152](https://support.checkpoint.com/results/sk/sk1000152)

# sk1000152 - Configuring Anti-Virus, Anti-Bot, IPS and Application Control automatic updates over HTTPS

| Property | Value |
|----------|-------|
| Solution ID | sk1000152 |
| Date Created | 2026-09-15 |
| Last Modified | 2026-10-04 |
| Technical Level | General |
| Products | Check Point Firewall |
| Versions | R82.20 |
| OS | Gaia |

## Solution

Introduction
------------

By default, the Check Point Firewalls download updates for the following Software Blades over HTTP:

* Anti-Virus
* Anti-Bot
* IPS
* Application Control

If HTTP connectivity to the Check Point update servers is unavailable, you can configure the Check Point Firewall to download updates over HTTPS.

**Procedure**

1. Connect to the Check Point Firewall over SSH.
2. Run one of these commands:

   * In the Expert mode, run:  
     `confp_cli set -p firewall.ipv4.tp.malware_policy.ciu_force_https -v true`
   * In Gaia Clish, run:

     `set param path firewall.ipv4.tp.malware_policy.ciu_force_https param-value true`

3. Verify configuration. Run:   
   `show configuration | grep ciu_force_https`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content