Port 8116
Check Point CCP
Check Point Cluster Control Protocol (CCP) is a proprietary communication protocol used in Check Point firewall clusters. It facilitates the synchronization of state, status updates, and health information among all nodes within a cluster, enabling efficient failover and load balancing in clustered environments..
Technical Details
Check Point Cluster Control Protocol (CCP) operates primarily over UDP port 8116 to maintain high availability across Check Point firewall clusters. It manages communication between cluster members by exchanging synchronization packets that contain state and configuration information, ensuring consistent traffic handling.
CCP operates in both 'broadcast' and 'unicast' modes. In broadcast mode, messages are sent to all members simultaneously, while unicast targets a specific cluster member. During normal operations, periodic heartbeat packets and synchronization messages allow cluster nodes to detect failure and elect a new master if necessary. This seamless communication mechanism enhances the resilience of security gateways without disrupting ongoing sessions.
Because it is a proprietary protocol, CCP details are closely tied to Check Point's clustering mechanisms such as ClusterXL or VSX. Proper function depends on correct configuration of network and firewall rules to allow UDP 8116, and on keeping cluster members synchronized in terms of policy and state.