[mcnallym]

If you have an all in one box with gateway and management on 1 box then yes I would recommend that you license on the external address. It just makes life a lot easier where the license address in question matches the external address, which is what will be VPN connections to. Just makes life easier in terms of VPN.

If in a split environment then yes I would use the internal ip of the smartcenter which is what you will read in the docs etc.

I take it that the object definition for the gateway/module box shows the external ip address, and that is what is in /etc/hosts hence why Check Point say to license on the external.