> Source: [sk79700](https://support.checkpoint.com/results/sk/sk79700) # sk79700 - VSNext / VSX supported features | Property | Value | |----------|-------| | Solution ID | sk79700 | | Date Created | 2012-07-19 | | Last Modified | 2026-09-01 | | Technical Level | General | | Products | Security Gateway, Scalable Platforms | | Versions | R82.10, R82, R81.20, R81.10 (EOS), R81 (EOS), R82.10, R82 | | OS | Gaia | ## Solution The table below shows the Software Blades and Features supported in the VSX mode (read the notes below the table). Legend: * " Yes " - Supported * " No " - Not supported (either by design, or due to a known limitation) * "N / A" - Not applicable (such feature does not exist) Enter the string to filter this table: |------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------| | Blade / Feature | R82.10 VSNext | R82.10 Traditional VSX | R82 VSNext | R82 Traditional VSX | R81.20 | R81.10 | R81 | | | **Software Blades** | | **Software Blades** |||| | | Firewall | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | IPS Blade | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | IPSec VPN Blade | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Anti-Bot Blade | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Anti-Virus Blade | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Traditional Anti-Virus Blade | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | Threat Emulation Blade - ThreatCloud Emulation | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | | Threat Emulation Blade - Remote Emulation | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | Yes **^(1)^** | | Threat Emulation Blade - Local Emulation | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | Threat Extraction Blade ([sk101553](https://support.checkpoint.com/results/sk/sk101553)) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Zero Phishing ([sk177924](https://support.checkpoint.com/results/sk/sk177924)) | Yes | Yes | Yes | Yes | Yes | N / A | N / A | | Anti-Spam and Email Security Blade | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | Data Loss Prevention (DLP) Blade | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | Application Control Blade | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | | URL Filtering Blade | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | Yes **^(4)^** | | Legacy URL Filtering Blade | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | Content Awareness Blade | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Identity Awareness Blade | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | HTTPS Inspection | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | HTTP / HTTPS Proxy | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Monitoring Blade | No (by design) | Yes | No (by design) | Yes | Yes | Yes | Yes | | Mobile Access Blade | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | QoS Blade (Floodgate) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | QoS Feature, Light Weight (CPQOS - VSX native QoS) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | [IoT Protect with Infinity Portal](https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Quantum-IoT-Admin-Guide/Default.htm) | Yes | Yes | Yes | Yes | No (by design) | No (by design) | No (by design) | | IoT Protect with 3rd-party IoT Discovery Service | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | SD-WAN ([sk180605](https://support.checkpoint.com/results/sk/sk180605)) | No (PMTR-104977) | No (by design) | No (PMTR-104977) | No (by design) | No (by design) | No (by design) | N / A | | MDPS ([sk138672](https://support.checkpoint.com/results/sk/sk138672)) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | | **Management Server Features** | | **Management Server Features** |||| | | Central Deployment of Hotfixes and Version Upgrades from SmartConsole | Yes | Yes (except VSLS) | Yes | Yes (except VSLS) | Yes (except VSLS) | Yes (except VSLS) | Yes (except VSLS) | | Dedicated Management Interface (DMI) **^(9)^** | N / A | Yes | N / A | Yes | Yes | Yes | Yes | | Non-Dedicated Management Interface (Non-DMI) | N / A | No (by design) | N / A | No (by design) | No (by design) | No (by design) | No (by design) | | Management Server behind NAT **^(10)^** | Yes | No (by design) | Yes | No (by design) | No (by design) | No (by design) | No (by design) | | Management through a Virtual Gateway / Virtual System **^(11)^** | Yes | No (by design) | Yes | No (by design) | No (by design) | No (by design) | No (by design) | | SmartUpdate | Yes | No (by design) | Yes | No (by design) | No (by design) | No (by design) | No (by design) | | SmartProvisioning / SmartLSM | No (by design: PMTR-109023) | Yes (as a Center Gateway (Corporate Office Gateway) in the Star VPN Community) | No (by design: PMTR-109023) | Yes (as a Center Gateway (Corporate Office Gateway) in the Star VPN Community) | No (by design) | No (by design) | No (by design) | | SmartWorkflow on Management Server | Yes | No (by design) | Yes | No (by design) | No (by design) | No (by design) | No (by design) | | Database Revision Control on Management Server ([sk65420](https://support.checkpoint.com/results/sk/sk65420)) | Yes | Yes (only if you did not change the VSX configuration since the revision) | Yes | Yes (only if you did not change the VSX configuration since the revision) | Yes (only if you did not change the VSX configuration since the revision) | Yes (only if you did not change the VSX configuration since the revision) | Yes (only if you did not change the VSX configuration since the revision) | | Compliance Blade report on Management Server **^(7)^** | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | StandAlone Configuration | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | All Management Server Blades | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | | **Global Features** | | **Global Features** |||| | | Network Address Translation (NAT) on traffic | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | NAT64 objects in Access Control Policy | No (PMTR-107345) | Yes | No (PMTR-107345) | Yes | Yes | Yes (from R81.10 JHF Take 30) | No (by design) | | NAT46 objects in Access Control Policy | No (MBS-16945, PMTR-111371) | Yes | No (MBS-16945, PMTR-111371) | Yes | Yes | Yes | No (by design) | | NAT-T Initiator | No (PMTR-47783) | No (by design) | No (PMTR-47783) | No (by design) | No (by design) | No (by design) | No (by design) | | SecureXL - Kernel Mode (KPPAK) | No (by design) | No (by design) | Yes | Yes | Yes | Yes | Yes | | SecureXL - User Mode (UPPAK) **^(13)^** | No (PMTR-106079) | Yes | No (PMTR-106079) | Yes | Yes (from R81.20 JHF Take 89) | Yes (from R81.20 JHF Take 150) | N / A | | SecureXL - Penalty Box whitelist (fwaccel dos pbox) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | SecureXL - IP deny-list (fwaccel dos deny) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | SecureXL - Rate Limiting policy (fwaccel dos rate) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | SecureXL - Accelerated SYN Defender (fwaccel synatk) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | CoreXL | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | CoreXL Dynamic Dispatcher ([sk105261](https://support.checkpoint.com/results/sk/sk105261)) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | CoreXL Dynamic Balancing ([sk164155](https://support.checkpoint.com/results/sk/sk164155)) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | HyperFlow ([sk178070](https://support.checkpoint.com/results/sk/ sk178070)) | Yes | Yes | Yes | Yes | Yes | N / A | N / A | | Multi-Queue ([sk153373](https://support.checkpoint.com/results/sk/sk153373)) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Dynamic Routing | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Source Based Routing on Virtual Router | N / A | Yes | N / A | Yes | Yes | Yes | Yes | | Policy Based Routing (PBR) on Virtual Router **^(6)^** | N / A | Yes | N / A | Yes | Yes | Yes | Yes | | SNMP Per Virtual Gateway / Virtual System using SNMPv3 | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | DHCP Client | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | DHCP Relay | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | DHCP Server | No (MBS-3246) | Yes **^(12)^** | No (MBS-3246) | Yes **^(12)^** | Yes **^(12)^** | No (by design) | No (by design) | | NTP Client | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | NTP Server | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | Mirror and Decrypt | No (PMTR-109011) | Yes | No (PMTR-109011) | Yes | Yes | Yes | Yes | | ICAP Client | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | ICAP Server | Supported from [R82](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) [Jumbo](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm), Take 44 | No (by design) | Supported from [R82](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) [Jumbo](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm), Take 44 | No (by design) | No (by design) | No (by design) | No (by design) | | Security Servers | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Jumbo Frames ([sk111407](https://support.checkpoint.com/results/sk/sk111407)) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Rule Hit Count | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | UserCheck (supported for Application Control / URL Filtering / Identity Awareness blades) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Gaia Portal | Yes | Yes **^(8)^** | Yes | Yes **^(8)^** | Yes **^(8)^** | Yes **^(8)^** | Yes **^(8)^** | | Gaia OS "Cloning Groups" | N / A (built-in SMO cloning) | No (by design) | N / A (built-in SMO cloning) | No (by design) | No (by design) | No (by design) | No (by design) | | IPv6 traffic | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | VRRP Cluster | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | VPN Site-to-Site - Enhanced Link Selection | No (PMTR-109016) | Yes | No (PMTR-109016) | Yes | N / A | N / A | N / A | | VPN Site-to-Site - Legacy Link Selection | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | VPN Site-to-Site - VTI - Numbered | Yes from R82.10 Jumbo Hotfix, Take 19 | Yes | Yes from R82 Jumbo Hotfix, Take 103 | Yes | Yes | Yes | Yes | | VPN Site-to-Site - VTI - Unnumbered | No (PMTR-60112) | No (by design) | No (PMTR-60112) | No (by design) | No (by design) | No (by design) | No (by design) | | Suspicious Activity Monitoring (SAM) Rules - in SmartUpdate, or with "*fw sam* " and "*sam_alert*" commands | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | Malicious Activity Detection (MAD) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | Connect Control | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | No (by design) | | ISP Redundancy | Yes From R82 JHF 44 (PMTR-117759) | No (by design) | Yes From R82 JHF 44 (PMTR-117759) | No (by design) | No (by design) | No (by design) | No (by design) | | Anti-Virus archive scanning | No (PMTR-109024) | Yes | No (PMTR-109024) | Yes | Yes | Yes | Yes | | Threat Emulation archive scanning | No (PMTR-109025) | Yes | No (PMTR-109025) | Yes | Yes | Yes | Yes | | Mail Transfer Agent (MTA) support for Threat Emulation | No (PMTR-109026) | Yes | No (PMTR-109026) | Yes | Yes | Yes | Yes | | Scalable Platform - Cluster High Availability (Two Sites) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Scalable Platform - Cluster Load Sharing (more than one member on the same Site) | Maestro: Yes ElasticXL: Yes from R82.10 Jumbo Hotfix, Take 19 (PMTR-125258) | Yes | Maestro: Yes ElasticXL: Yes from R82 Jumbo Hotfix, Take 103 (PMTR-125258) | Yes | Yes | Yes | Yes | | External Network Feeds | Yes | Yes | Yes | Yes | No (by design) | No (by design) | No (by design) | | IoC Feeds ([sk132193](https://support.checkpoint.com/results/sk/ sk132193)) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | DNS per Virtual System | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | VSLS (Virtual System Load Sharing mode) | Yes | Yes | Yes from R82 Jumbo Hotfix, Take 14 (PMTR-110224) | Yes | Yes | Yes | Yes | | Virtual Gateway / Virtual System in Monitor Mode | No (PMTR-109340) | Yes | No (PMTR-109340) | Yes | Yes | Yes | Yes | | | **VSNext / Traditional VSX in Bridge Mode ([sk101371](https://support.checkpoint.com/results/sk/sk101371))** | | **VSNext / Traditional VSX in Bridge Mode ([sk101371](https://support.checkpoint.com/results/sk/sk101371))** |||| | | Virtual Gateway / Virtual System in Bridge Mode ([sk101371](https://support.checkpoint.com/results/sk/sk101371)) | Not Relevant Use a Virtual Gateway with a Bridge interface | Yes | Not Relevant Use a Virtual Gateway with a Bridge interface | Yes | Yes | Yes | Yes | | Multi Bridge (support for multiple bridge interfaces on a Virtual System in Bridge Mode) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | Virtual Gateway / Virtual System with Bridge interface | Yes | Yes | Yes | Yes | Yes | Yes | Yes | | | **Resource Control** | | **Resource Control** |||| | | CPU monitoring per Virtual System (the '`vsx resctrl`' command) | N / A | No (by design) Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | N / A | No (by design) Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | No (by design) Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | No (by design) Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | No (by design) Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | | Memory monitoring per Virtual System (the '`vsx mstat`' command) | N / A | Yes Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | N / A | Yes Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | Yes Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | Yes Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | Yes Use the [CPView utility](https://support.checkpoint.com/results/sk/sk101878) | | CPU enforcement per Virtual System (known as Resource Control Enforcer in VSX R6x versions) | N / A | No (by design) | N / A | No (by design) | No (by design) | No (by design) | No (by design) | | Memory enforcement per Virtual System (known as Resource Control Enforcer in VSX R6x versions) | N / A | No (by design) | N / A | No (by design) | No (by design) | No (by design) | No (by design) | | | **Additional Features** | | **Additional Features** |||| | | Merging VSX objects using *cp_merge* utility ([sk33751](https://support.checkpoint.com/results/sk/sk33751)) | N / A | No (by design) | N / A | No (by design) | No (by design) | No (by design) | No (by design) | | Alias / Secondary IP address | No (PMTR-109028) | No (by design) | No (PMTR-109028) | No (by design) | No (by design) | No (by design) | No (by design) | | ECMP (Static Routes) | No (PMTR-109029) | No (by design) | No (PMTR-109029) | No (by design) | No (by design) | No (by design) | No (by design) | | Multiple Static Routes with different priorities to the same destination | Yes | No (by design) | Yes | No (by design) | No (by design) | No (by design) | No (by design) | | LLDP on data interfaces | Yes | Yes | Yes | Yes | No (by design) | No (by design) | No (by design) | | LLDP on the ElasticXL "Mgmt" interface | No (PMTR-108547) | N / A | No (PMTR-108547) | N / A | N / A | N / A | N / A | | Loopback Interfaces | Yes | No (by design) | Yes | No (by design) | No (by design) | No (by design) | No (by design) | | VxLAN Interfaces | No (PMTR-60874) | Yes (PMTR-60874) | No (PMTR-60874) | Yes (only in SecureXL KPPAK mode) | Yes (only in SecureXL KPPAK mode) | Yes (only in SecureXL KPPAK mode) | Yes | | GRE Interfaces | No (PMTR-60868) | Yes (PMTR-60868) | No (PMTR-60868) | Yes (only in SecureXL KPPAK mode) | Yes (only in SecureXL KPPAK mode) | Yes (only in SecureXL KPPAK mode) | Yes | | Hardware Security Module (HSM) | Yes | No (by design) | Yes | No (by design) | No (by design) | No (by design) | No (by design) | | Management with Web SmartConsole | No (PMTR-109032) | No (by design) | No (PMTR-109032) | No (by design) | No (by design) | No (by design) | No (by design) | | Management with Smart-1 Cloud | Yes | No (by design) | Yes | No (by design) | No (by design) | No (by design) | No (by design) | | Management with CloudGuard Controller | Yes**^(14)^** | Yes | Yes**^(14)^** | Yes | Yes | Yes | Yes | | Object Sharing from on-premises Management Server to Infinity Portal | No (PMTR-109033) | No (by design) | No (PMTR-109033) | No (by design) | No (by design) | No (by design) | No (by design) | | Log Sharing from on-premises Management Server to Infinity Portal | No (PMTR-109034) | No (by design) | No (PMTR-109034) | No (by design) | No (by design) | No (by design) | No (by design) | | Infinity Playblocks service in Infinity Portal | No (PMTR-109035) | No (by design) | No (PMTR-109035) | No (by design) | No (by design) | No (by design) | No (by design) | {#Filter1Table} **Notes:** 1. For this version, refer to [sk106496 - Software Blades updates - FAQ](https://support.checkpoint.com/results/sk/sk106496). 2. In this version, Gaia Portal is supported only to run the Gaia 'First Time Configuration Wizard'. 3. In this version, IPv6 is supported with these limitations: * Pure IPv6 is not supported (must have IPv4 addresses assigned) - applies only to Clusters. * IPv6 is not supported on Virtual Routers. 4. For this version, refer to [sk106496 - Software Blades updates - FAQ](https://support.checkpoint.com/results/sk/sk106496) and to the [VSX Administration Guide](https://support.checkpoint.com/product/359#q=%22VSX%20Administration%20Guide%22&f-commonsource=C.%20Documentation) for your version. 5. For this version, refer to the [VSX Administration Guide](https://support.checkpoint.com/product/359#q=%22VSX%20Administration%20Guide%22&f-commonsource=C.%20Documentation) for your version. 6. For this version, refer to the [Gaia Advanced Routing Administration Guide](https://support.checkpoint.com/product/359) for your version and [sk100500 - Policy-Based Routing (PBR) on Gaia OS](https://support.checkpoint.com/results/sk/sk100500). 7. Because "Compliance" Software Blade is a Management blade, you cannot activate it in a VSX Gateway / VSX Cluster object. By design, the "Security Best Practices" for "Gaia OS" are ***not*** checked on VSX Gateways / VSX Clusters. Refer to [sk92861 - ATRG: Compliance Blade](https://support.checkpoint.com/results/sk/sk92861). 8. In this version, Gaia Portal is supported only to install CPUSE packages. 9. Dedicated Management Interface (DMI) management is ***not*** supported through a physical interface (on the VSX Gateway / VSX Cluster Member) that has one or more VLAN interfaces configured. 10. NAT is ***not*** supported between the Management Server and the managed VSX Gateway / VSX Cluster. It is ***not*** supported to manage a VSX Gateway / VSX Cluster in these cases: * When the Management Server is behind NAT * When the VSX Gateway / VSX Cluster is behind NAT 11. It is ***not*** supported to manage a VSX Gateway / VSX Cluster when the management traffic passes through a Virtual System on the same VSX Gateway / VSX Cluster. Only VS0 can communicate directly with the Management Server. 12. You configure the DHCP Server settings in the context of a Virtual System (`set virtual-system `). Refer to the [Gaia Administration Guide](https://support.checkpoint.com/product/359#q=%22Gaia%20Administration%20Guide%22&f-commonsource=C.%20Documentation) for your version \> Chapter "Network Management" \> Section "DHCP Server" \> Section "Configuring a DHCP Server in Gaia Clish". 13. For information about SecureXL User Space (UPPAK) mode, see [sk179432](https://support.checkpoint.com/results/sk/sk179432). 14. This is supported with **Identity Sharing** . For details, refer to [Support for Identity Awareness Identity Sharing](https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_CloudGuard_Controller_AdminGuide/Default.htm?cshid=ID025). **Related Documentation:** * [Release Notes and VSX Administration Guides](https://support.checkpoint.com/product/359#f-commonsource=C.%20Documentation) * For information about Scalable Platforms, refer to: * For versions R82 and higher, refer to the corresponding Home Page article for that version. * For versions R80.20SP - R81.20, refer to [sk148074 - Known Limitations for Scalable Platforms R80.20SP - R81.20 (Maestro Appliances and Chassis)](https://support.checkpoint.com/results/sk/sk148074). **Related Solutions:** * [sk106496 - Software Blades updates - FAQ](https://support.checkpoint.com/results/sk/sk106496) --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content