Quote:
Originally Posted by Testing-123  Hello All,
Trying to understand checkpoint licensing a bit better having been confused [...] |
Join the crowd :)
Quote:
| 1) is a NG license and the key word unlimited would imply you won't have any issues with being short on enforcement licensing. However, how does checkpoint enforce the "number of IP addresses" limit? Do you get a warning or certain functionality is disabled? Can you tell how much you've consumed on an enforcement module? |
The gateway counts the number of IP addresses that attempt to pass it from an "Internal" interface.
When you exceed your license count, you will receive console errors and SmartView Monitor alerts
Additional connections should be dropped (YYMV on this one)
Quote:
| 2) and 3) I've read that NGX has moved from licensing per ip address to per user? What's the difference and again how is this enforced and is there a way of checking how close you are to the limit? |
It has not in functionality, just how the EULA reads (This is
not an official answer!!).
In the past, FW-1's license counted every connected device protected by the gateway, even devices that never connected to the Internet (e.g. printers). Now only connections that try to traverse it are counted.
For Messaging Security, users are counted but without an enforcement mechinisem other than IP address count.