| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| Hi, My current management is running on SPLAT and I need to upgrade to SPLAT PRO in order to enable Radius authentication. Question is do I need a new license from Checkpoint? currently running on CPMP-ESC-U-3DES-NGSX Enterprise Management console for unlimited number of enforcement... |
| |||
| Check Point has a wonderful support team for any license related questions. Chat with them and you'll get an instant answer that has proof. Best regards, Danny Trommer CCSA/CCSE/CCSE+ |
| |||
| RADIUS for what purpose? I use RADIUS for all the time and I don't have SPLAT Pro. I am assuming you want to use it for VPN auth against AD accounts. Below is how to setup RADIUS to work with CP. RADIUS Setup (works for 2003 as well): Description: Step by step instruction on setting up Windows 2000 RADIUS server to communicate with Nokia VPN Gateway. Solution: Install the IAS Windows Component. Under Administrative tools open the Internet Authentication Service icon. Under the client section create a new client with IP of Nokia VPN gateway (or DNS name) and the shared secret to use between the RADIUS server and Nokia VPN gateway. Under Remote Access Policies open the properties of the default policy "Allow access if dail-in permission is enabled". Click 'Edit Profile'; Under the 'Authentication' tab select "Unencrypted Authentication (PAP, SPAP)". Under the 'Advanced' tab, remove both "Service Type RADIUS Standard Framed" and "Framed Protocol RADIUS Standard PPP". Exit IAS admin and goto User Admin. Under properties for users that will be authenticating, select 'Dial-in' tab and choose "Allow Access". Leave other settings at their default. __________________ There's no place like 127.0.0.1 |
| |||
| What I would say Yes and No. Yes, you need SPlat-Pro for Radius Authentication for "Firewall Administrators". One more differentiation for Pro and non-Pro (except the dynamic routing thing) No, if you just authenticate for user/VPN. Quote:
|
| |||
| A quick summary for SPLAT Pro, it enables 1. Dynamic Routing (GateD) 2. RADIUS authentication for SPLAT administrators (Not SmartDashboard admins) SPLAT Pro is a licensable feature. |
| |||
| can you give the price for a splat pro licence ? i don't find in the pirce list (https://pricelist.checkpoint.com/pri...enerallist.jsp ) thx |
| |||
| It is licenseable on a per gateway and then certain points. 1,5,25,50, 10. You are best talking to your Check Point reseller if you need to get a price for SPLAT Pro. |
| |||
| If you click on one of the gateway's pricing it's at the bottom of the "ordering information" page... SecurePlatform PRO for VPN-1 Gateway Check Point SecurePlatform PRO for 1 Gateway CPOS-SPRO-1 I $1,500 Check Point SecurePlatform PRO for 5 Gateways CPOS-SPRO-5 I $6,000 Check Point SecurePlatform PRO for 25 Gateways CPOS-SPRO-25 I $25,000 Check Point SecurePlatform PRO for 50 Gateways CPOS-SPRO-50 I $40,000 Check Point SecurePlatform PRO for 100 Gateways CPOS-SPRO-100 I $60,000 |
![]() |
| Thread Tools | |
| Display Modes | |
| |