 Re: Using 300 SecureClient users with only 100 licensed
Officially SecureClient is licensed on a "per user" basis.
Check Point defines a user in this statement:
"User is defined as a computing device that is trying to traverse the firewall. For example, any IP address that is trying to pass through the firewall is counted. The IP address is counted even if it is blocked due to a specific rule configuration. Under the new User based license we are not differentiating between two users using a single machine i.e. a single IP address. In this scenario the two individuals will still be counted as one."
But more in detail I quote here under the official explanation of Check Point how the SecureClient licensing is working:
--------------------------------------------------------------------------
SecureClient license (CPVP-VSC-XXX-NG) is installed on SmartCenter management.
Prior to NG with Application Intelligence (R54), if the user group allowed to connect to a Policy Server (in SmartDashboard) contained more users than specified in the license, the administrator received a warning in SmartView tracker regarding a license violation.
Starting in NG with Application Intelligence (R54), the Policy Server counted unique user logins on a monthly basis, per Policy Server. If the number of unique users that logged on to the Policy server in one month exceeded the number specified in the license, the administrator received a license violation warning.
In NGX there is additional enforcement on the module, which counts the number of tunnels opened by remote users. A SecuRemote or SecureClient user can open only one VPN tunnel per gateway. For example, if the VPN-1 Pro license includes support for 1000 SecuRemote users, and in addition there is a license for 500 SecureClients, the 1501 user that attempts to open a tunnel to the gateway will not succeed.
--------------------------------------------------------------------------
This means that if each one of your 300 users will log in to the Policy Server at least once monthly, you have to buy a 300 users SecureClient license!
Ciao  |