Check Point compliance checks are bracketed in custom_item encapsulation and CONFIG_CHECK. This is treated like any other .audit files and work for systems running the Check Point GAiA operating system. The CONFIG_CHECK check consists of two or more keywords. Keywords type and description are mandatory, which are followed by one or more keywords. The check works by auditing the “show config” command output, which is in the “set” format by default.