In the Security Management Architecture, what port and process does SmartConsole use to communicate with the Security Management Server?

In Check Point's R80.x and later Security Management Architecture, SmartConsole establishes its primary communication with the Security Management Server by connecting to the Check Point Process Manager (CPM) process. This connection is made over TCP port 19009. The CPM process is the core service that handles all management operations, including GUI client logins, policy management, and API requests. This architecture replaced the legacy Firewall Management (FWM) process used in pre-R80 versions.

A. CPM and 18190: CPM is the correct process, but port 18190 is used by the legacy FWM process for pre-R80 GUI clients, not by CPM for modern SmartConsole connections.

B. FWM and 19009: FWM is the legacy management process. The correct process for R80+ SmartConsole communication is CPM, although the port 19009 is correct.

D. CPM, 19009, and 18191: While port 18191 is used by the CPD process for tasks like status updates, the primary connection from SmartConsole is specifically to the CPM process on port 19009.

---

1. Check Point R81.10 Security Management Administration Guide:

Page 31, "Management Server Processes": "CPM - The main server process that runs on the Security Management Server for all management operations. For example, when you log in with SmartConsole, you are connected to the CPM process." This confirms CPM is the correct process.

2. Check Point Support Center, SecureKnowledge (SK) Article sk25977, "Ports used by Check Point software":

Section "SmartConsole clients to Management Server": This official document explicitly lists the service "CPM" using TCP port "19009" for communication between SmartConsole clients and the Management Server in R80 and above. It also lists "FWM" on port "18190" for "GUI Clients (pre-R80)".

3. Check Point R81.10 Architecture and Processes Technical Guide:

Section "Management Server Processes", Subsection "CPM": "The CPM process listens on TCP port 19009 for incoming connections from GUI clients (SmartConsole) and management API clients." This directly links the CPM process, port 19009, and SmartConsole.