Forge vs. Check Point
Forge emulates Check Point screens in the browser — nothing connects to a real gateway. This page lists every screen, the Check Point version and source it was compared against, and what it deliberately leaves out. Check Point is a trademark of Check Point Software Technologies; Forge is not affiliated or endorsed.
Emulation version 2.0 · 33 screens
Visually referenced against a captured screen
Documented workflow simulation
Forge extension — not a vendor screen
Not built yet — capture needed
Captured evidence
Genuine Check Point documentation captures are shown beside Forge only when the compared scope is explicit. A related product screen does not count as a match.
Matched to the captured R82 Gaia Portal shell: navigation, toolbar, status area, overview layout, and search.
Source: R82 Gaia Administration Guide · Gaia Portal Introduction · 10 June 2026. Check Point material is shown for comparison and remains © Check Point Software Technologies Ltd.
Adjacent R82 SmartConsole chrome only. The vendor capture is Cyber Attack View; Forge shows Gateways & Servers, so this remains documented rather than matched.
Source: R82 SmartConsole Threat Prevention guide · Cyber Attack View. Check Point material is shown for comparison and remains © Check Point Software Technologies Ltd.
| Forge screen | Compared against | Behavior version | Evidence | Not part of this screen |
|---|---|---|---|---|
Device WebUI The gateway's own operating system: interfaces, routes, administrators, maintenance. | R82 Gaia Administration Guide · Gaia Portal Introduction · 10 June 2026 | gaia-r82.10-subset | V · Visually referenced against a captured screen | rulebase, publish, install, cloud-inventory, posture, fleet |
Local WebUI The branch appliance: internet links, local network, branch policy, logs. | Spark R82 WebUI documentation; clean current capture outstanding | spark-r82.00.x-local | D · Documented workflow simulation | cloud-inventory, posture, fleet |
Access rules The gateway's own access-rule layer: add, reorder, publish, then install on this box. | R82 SmartConsole Threat Prevention guide · Cyber Attack View | central-r82-gateway-rules-subset | D · Documented workflow simulation | interfaces, routes, maintenance, cloud-inventory, posture, fleet |
Central policy The management server: rule base, edit session, publish, then install per gateway. | R82 SmartConsole Threat Prevention guide · Cyber Attack View | central-r82-subset | D · Documented workflow simulation | interfaces, routes, maintenance, cloud-inventory, posture |
Fleet and SD-WAN The sites that enforce policy: enrollment, desired vs applied, links and steering. | Spark Management and SD-WAN documentation; current capture outstanding | fleet-sdwan-subset | D · Documented workflow simulation | rulebase, publish, install, interfaces, routes, cloud-inventory |
Endpoint management The computers themselves: deployment packages, endpoint policy, detections, isolation. | Endpoint Security Management documentation; current capture outstanding | endpoint-e88-subset | D · Documented workflow simulation | interfaces, routes, rulebase, install, cloud-inventory, fleet |
Automation Response automations: triggers and steps, activation, runs, pending approvals, lists, connectors. | Response-automation service documentation; current capture outstanding | automation-playblocks-subset | D · Documented workflow simulation | interfaces, routes, rulebase, install, cloud-inventory, posture |
Web and API protection Applications and APIs in front of their origins: mode, protections, scoped exceptions, rollout, events. | Web application and API protection documentation; current capture outstanding | waf-appsec-subset | D · Documented workflow simulation | interfaces, routes, rulebase, install, cloud-inventory, fleet |
SASE People rather than sites: team, networks, private access, internet access and live sessions. | SASE private/internet access documentation; current capture outstanding | sase-subset | D · Documented workflow simulation | interfaces, routes, rulebase, install, cloud-inventory, assets |
Logs and events What actually happened: the records gateways sent, the events correlation raised, and how they are worked. | Log server and event correlation documentation; current capture outstanding | siem-smart-event-subset | D · Documented workflow simulation | interfaces, routes, rulebase, publish, install, cloud-inventory |
Network The wiring underneath: switches, ports, VLANs and trunks, plus the gateway's interfaces, routes, address translation and site tunnels. | Switch fabric and gateway networking documentation; current capture outstanding | network-fabric-subset | D · Documented workflow simulation | rulebase, publish, cloud-inventory, posture, team |
Policy server Many domains on one server, hardware contexts (security groups and virtual systems), the revision store and the log server. | Multi-domain, Maestro and VSX administration documentation; current capture outstanding | mds-policy-server-subset | D · Documented workflow simulation | interfaces, routes, rulebase, cloud-inventory, assets, team |
Multi-Domain Server Provider-1: the server above the domains — Domain Management Servers and their processes, creating a domain, global policy assignment, the object database and WatchDog. | Multi-domain, Maestro and VSX administration documentation; current capture outstanding | mds-policy-server-subset | D · Documented workflow simulation | interfaces, routes, rulebase, cloud-inventory, assets, team |
Spark Management A fleet of branch appliances: enrollment, owners, firmware, plans and whether each branch is actually running the plan it was given. | Spark Management service documentation; current capture outstanding | spark-management-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cloud-inventory, team |
Threat Prevention Protections and the profiles that decide whether each one watches or blocks, plus the exceptions written against them. | Threat Prevention profile and protection documentation; current capture outstanding | threat-prevention-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cloud-inventory, team |
Identity Awareness Where the estate learns who somebody is, the access roles built from it, and who is signed in right now. | Identity Awareness and access role documentation; current capture outstanding | identity-awareness-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cloud-inventory, assets |
Security groups and virtual systems The hardware underneath: appliances grouped into one logical gateway, and virtual systems that move on their own. | Maestro and VSX administration documentation; current capture outstanding | hardware-contexts-subset | D · Documented workflow simulation | rulebase, cloud-inventory, team, assets |
Maestro orchestrator Several appliances turned into one logical gateway: orchestrators, sites, members, ports and the security groups they carry. | Maestro orchestrator and security-group administration documentation; current capture outstanding | maestro-orchestrator-subset | D · Documented workflow simulation | rulebase, cloud-inventory, team, assets |
Email and collaboration Mailboxes and the messages held back from them: verdicts, quarantine, and release with a written reason. | Email and collaboration protection documentation; current capture outstanding | email-security-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cloud-inventory, fleet |
Endpoint client What the person at the desk sees: the agent's blades, its posture checks, its policy age and whether it has been isolated. | Endpoint client agent documentation; current capture outstanding | endpoint-client-subset | D · Documented workflow simulation | rulebase, install, cloud-inventory, team, fleet |
Compliance and posture Best practice measured against the estate's own configuration, with waivers that have to be justified. | Compliance best-practice documentation; current capture outstanding | compliance-subset | D · Documented workflow simulation | rulebase, interfaces, routes, team, assets |
Reporting Reports and scheduled views over the records the log server already holds, and the exports taken from them. | Report and scheduled-view documentation; current capture outstanding | reporting-subset | D · Documented workflow simulation | rulebase, interfaces, routes, install, cloud-inventory |
Cloud tenant portal Tenant services: posture, workload, application security, intelligence, orchestration. | Current portal service navigation; service switcher not captured | portal-2026-09-subset | D · Documented workflow simulation | interfaces, routes, rulebase, publish, install, device-cli |
Management Portal The management server's own housekeeping: administrators, permission profiles, sessions and the change lock, the API service, Management HA, backup and licensing. | SmartConsole/SmartPortal administration documentation; current capture outstanding | mgmt-portal-subset | D · Documented workflow simulation | rulebase, publish, install, cloud-inventory, team, assets |
AI Copilot An assistant panel scoped to the estate/domains an account may see: ask, propose a change, and only an approver can apply it. | Forge extension — no vendor screen captured for this assistant panel | ai-copilot-subset | P · Forge extension — not a vendor screen | rulebase, publish, install, cloud-inventory, interfaces, routes |
Harmony Browse The browser-extension protection service: enrolled extensions, the URL-filtering rule base, unsaved changes and the logs extensions actually produced. | Harmony Browse admin console documentation; current capture outstanding | harmony-browse-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cloud-inventory, team, assets |
Harmony Mobile Mobile threat defense: enrollment, the fleet dashboard, device detail, events and the CA/block-page configuration. | Harmony Mobile admin console documentation; current capture outstanding | harmony-mobile-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cloud-inventory, team, assets |
Smart-1 Cloud The hosted management service itself: the tenant, its service version and maintenance windows, the gateways connected to it and the tokens that connect them. | Smart-1 Cloud service portal documentation; current capture outstanding | smart1-cloud-subset | D · Documented workflow simulation | rulebase, interfaces, routes, team, assets |
Threat Emulation and Extraction Files held for emulation: the queue, the verdict each file received, what extraction stripped out and which appliance or cloud service did the work. | Threat Emulation / SandBlast documentation; current capture outstanding | threat-emulation-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cloud-inventory, team, assets |
CNAPP posture Assessments, findings against a framework, rulesets, and the exceptions/remediation written against them. | CNAPP posture/workload/intelligence documentation, including the historical CDR graph-first layout; current capture outstanding | cnapp-posture-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cnapp-graph, cnapp-scans |
CNAPP workload Cloud assets — image, instance and running workload — and the scans requested against them. | CNAPP posture/workload/intelligence documentation, including the historical CDR graph-first layout; current capture outstanding | cnapp-workload-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cnapp-findings, cnapp-graph |
CNAPP intelligence The security graph, activity logs and a timeline, laid out on the historical CDR navigation profile: graph, node detail, then logs/timeline. | CNAPP posture/workload/intelligence documentation, including the historical CDR graph-first layout; current capture outstanding | cnapp-intelligence-subset | D · Documented workflow simulation | rulebase, interfaces, routes, cnapp-findings, cnapp-scans |
SSH session A shell on the box itself, on the same state the WebUI reads. | R82 Gaia Administration Guide · Gaia Portal Introduction · 10 June 2026 | gaia-r82.10-subset | V · Visually referenced against a captured screen | rulebase, cloud-inventory |
CYBRARY