CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point SecurePlatform (SPLAT)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-08-09
Senior Member
 
Join Date: 2007-06-05
Location: Canada
Posts: 203
Rep Power: 2
hotice_ has an average reputation (10+)
Default SPLAT to SPLAT PRO: requires new license?

Hi,
My current management is running on SPLAT and I need to upgrade to SPLAT PRO in order to enable Radius authentication.


Question is do I need a new license from Checkpoint?


currently running on CPMP-ESC-U-3DES-NGSX
Enterprise Management console for unlimited number of enforcement...
Reply With Quote
  #2 (permalink)  
Old 2007-08-09
Senior Member
 
Join Date: 2007-02-07
Location: Halle (Saale)
Posts: 268
Rep Power: 2
dantro has an average reputation (10+)
Default Re: SPLAT to SPLAT PRO: requires new license?

Check Point has a wonderful support team for any license related questions. Chat with them and you'll get an instant answer that has proof.

Best regards,
Danny Trommer
CCSA/CCSE/CCSE+
Reply With Quote
  #3 (permalink)  
Old 2007-08-09
Senior Member
 
Join Date: 2006-02-09
Location: Charleston, SC
Posts: 293
Rep Power: 3
lammbo has an average reputation (10+)
Default Re: SPLAT to SPLAT PRO: requires new license?

RADIUS for what purpose? I use RADIUS for all the time and I don't have SPLAT Pro.

I am assuming you want to use it for VPN auth against AD accounts. Below is how to setup RADIUS to work with CP.


RADIUS Setup (works for 2003 as well):

Description: Step by step instruction on setting up Windows 2000 RADIUS server to communicate with Nokia VPN Gateway.

Solution: Install the IAS Windows Component.

Under Administrative tools open the Internet Authentication Service icon.
Under the client section create a new client with IP of Nokia VPN gateway (or DNS name) and the shared secret to use between the RADIUS server and Nokia VPN gateway. Under Remote Access Policies open the properties of the default policy "Allow access if dail-in permission is enabled". Click 'Edit Profile'; Under the 'Authentication' tab select "Unencrypted Authentication (PAP, SPAP)". Under the 'Advanced' tab, remove both "Service Type RADIUS Standard Framed" and "Framed Protocol RADIUS Standard PPP".

Exit IAS admin and goto User Admin. Under properties for users that will be authenticating, select 'Dial-in' tab and choose "Allow Access". Leave other settings at their default.
__________________
There's no place like 127.0.0.1
Reply With Quote
  #4 (permalink)  
Old 2007-08-10
Junior Member
 
Join Date: 2007-05-08
Posts: 23
Rep Power: 0
auroranl has an average reputation (10+)
Default Re: SPLAT to SPLAT PRO: requires new license?

The main difference between SPLAT and SPLAT PRO is the support for dynamic routing. So only use PRO (and buy a license) if you need this supported.
Reply With Quote
  #5 (permalink)  
Old 2007-08-12
Member
 
Join Date: 2006-12-20
Posts: 83
Rep Power: 3
NickBrandson has an average reputation (10+)
Default Re: SPLAT to SPLAT PRO: requires new license?

What I would say Yes and No.

Yes, you need SPlat-Pro for Radius Authentication for "Firewall Administrators". One more differentiation for Pro and non-Pro (except the dynamic routing thing)

No, if you just authenticate for user/VPN.

Quote:
Originally Posted by hotice_ View Post
Hi,
My current management is running on SPLAT and I need to upgrade to SPLAT PRO in order to enable Radius authentication.


Question is do I need a new license from Checkpoint?


currently running on CPMP-ESC-U-3DES-NGSX
Enterprise Management console for unlimited number of enforcement...
Reply With Quote
  #6 (permalink)  
Old 2007-08-14
Senior Member
 
Join Date: 2007-06-05
Location: Canada
Posts: 203
Rep Power: 2
hotice_ has an average reputation (10+)
Default Re: SPLAT to SPLAT PRO: requires new license?

yeah its for firewall administration purposes...Should have been more specific
Reply With Quote
  #7 (permalink)  
Old 2007-08-19
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,681
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: SPLAT to SPLAT PRO: requires new license?

A quick summary for SPLAT Pro, it enables

1. Dynamic Routing (GateD)
2. RADIUS authentication for SPLAT administrators (Not SmartDashboard admins)

SPLAT Pro is a licensable feature.
Reply With Quote
  #8 (permalink)  
Old 2007-08-28
Junior Member
 
Join Date: 2007-08-17
Location: Brussels
Posts: 20
Rep Power: 0
suber has an average reputation (10+)
Send a message via MSN to suber
Default Re: SPLAT to SPLAT PRO: requires new license?

can you give the price for a splat pro licence ?

i don't find in the pirce list (https://pricelist.checkpoint.com/pri...enerallist.jsp )


thx
Reply With Quote
  #9 (permalink)  
Old 2007-08-28
Senior Member
 
Join Date: 2007-06-04
Posts: 1,095
Rep Power: 3
mcnallym has an average reputation (10+)
Default Re: SPLAT to SPLAT PRO: requires new license?

It is licenseable on a per gateway and then certain points. 1,5,25,50, 10. You are best talking to your Check Point reseller if you need to get a price for SPLAT Pro.
Reply With Quote
  #10 (permalink)  
Old 2007-08-28
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,681
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: SPLAT to SPLAT PRO: requires new license?

If you click on one of the gateway's pricing it's at the bottom of the "ordering information" page...


SecurePlatform PRO for VPN-1 Gateway
Check Point SecurePlatform PRO for 1 Gateway CPOS-SPRO-1 I $1,500
Check Point SecurePlatform PRO for 5 Gateways CPOS-SPRO-5 I $6,000
Check Point SecurePlatform PRO for 25 Gateways CPOS-SPRO-25 I $25,000
Check Point SecurePlatform PRO for 50 Gateways CPOS-SPRO-50 I $40,000
Check Point SecurePlatform PRO for 100 Gateways CPOS-SPRO-100 I $60,000
Reply With Quote
  #11 (permalink)  
Old 2007-08-29
Junior Member
 
Join Date: 2007-08-17
Location: Brussels
Posts: 20
Rep Power: 0
suber has an average reputation (10+)
Send a message via MSN to suber
Default Re: SPLAT to SPLAT PRO: requires new license?

thx for your reply
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 10:00.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0