Re: Somewhat OT - Firewall Licencing

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Checkpoint, like many other software subscription services does keep an account of numbers of subscribers. As the administrator it is your job to increase (or decrease) license counts to match your user community.

Just because the "current" users actively logged on is below the 50 threshold, it is more or less irrelevant, what is at issue is the total number of potential nodes. I have used Checkpoint too, it is a PITA to have to actually manually update the count, but that is how they encourage truth from their subscribers. As mentioned, if you are unwilling to abide by the license agreement, it may be time to find a lesser firewall solution provider.

On a personal note: it don't think the alternatives are anywhere near as flexible or as feature rich as Checkpoint. If you haven't assessed your license needed since it was installed, several years ago, it may be time to get those additional licenses. Think of this way - its no more or less onerous than getting a volume license agreement from MS for servers, if your connections are above the license you can use a management package that will check for actual concurrent users on the system, but that is not what the license is for...you are complaining about a technicality. Go to your accounting dept. give them the facts and let them make the decision. Its a pain, but its more of a pain to be found in a non-compliant license state. Remember, there are bounty hunters out there!
"TheScullster" <phil@xxxxxxxxxxxxxxx> wrote in message news:-ZOdnXewlaR2d1ranZ2dneKdnZydnZ2d@xxxxxxxxxxxxxxxxx
Hi all

We have been using a Checkpoint Firewall for a few years and the licencing method is a pain.
Do all firewalls work in the same way?

Explanation:

Our firewall is licenced for 50 users.
However, instead of considering the number of concurrent users, it simply stores all ip addresses that have used the device.
This means that:
a) the DHCP scope has to be real tight to avoid any overspill
b) when you want to retire one piece of kit and replace with another, you can't afford the luxury of overlap and have to re-assign static ips on change over

Maybe I'm just tight, but the current setup seems so inflexible.
I get the ISP emailing to say we are over our allocated licence level, but if I get their tech department to check genuine on-going usage we are always well below the 50 limit.

Phil


.

Relevant Pages

  • Re: New Orleans/Katrina Urban Legends/Myths
    ... At first glance it appears to be a security checkpoint, ... > drivers license, insurance, and registration of anyone heading towards ... > for no proof of insurance. ... > no insurance - vehicle was impounded, ...
    (rec.sport.pro-wrestling)
  • Re: Checkpoint FW1 failover requirements?
    ... > an Enterprise license for unlimited users. ... > I am looking to set up another identical Solaris box running Checkpoint to ... Is this functionality built in to the NG firewall software ...
    (comp.security.firewalls)
  • Re: checkpoint confusion help.
    ... Checkpoint is the ... > but it is not licensed and can't be used unless you purchase a license. ... > CheckPoint NG Account Management ... CheckPoint NG Check Point Express SmartCenter Add-on ...
    (comp.security.firewalls)
  • Re: Comodo Personal Firewall
    ... > automatically install the license from the license code we send. ... Testing Comodo seems no ... how about a compare with my current firewall? ...
    (comp.security.firewalls)