Licence IP counting

[sandana]

hello,

Please somebody explain me how checkpoint count the IP?

many thanks in advance

[chillyjim]

IP addresses that pass through a firewall from an internal interface.

So, if you have printers that do not have a default route for instance, they don't count, but if you allow printing from the DMZ to the LAN, then they would count (as they have to traverse the gateway).

[Izzio]

..."internal interface" is every interface that is not defined as "external"

[geck072]

Just like to know how do i check what the current IP count on my FW at any point in time? So that i know if it is reaching the license limit. Thanks!

[dantro]

cplic print
fw tab -t host_table -s && fw lichosts | awk '{print $4}' | awk 'BEGIN{FS=":"}{print $2}' | sort | uniq
cat /var/log/messages | grep LOG_CRIT

[MrSnakey]

Originally Posted by dantro

cplic print
fw tab -t host_table -s && fw lichosts | awk '{print $4}' | awk 'BEGIN{FS=":"}{print $2}' | sort | uniq
cat /var/log/messages | grep LOG_CRIT

AWK-tastic man! nice.

[lintocs]

I've got a bunch of IPs that collected on a secondary egress firewall because of a routing error (someone cross connected a dev LAN with an admin LAN, Ripv2 did it's thing, and checkpoimnt recorded an extra 50 or so IPs that aren't supposed ot use that gateway).

Is it easy/possible to flush this?

[northlandboy]

Yes, it's fairly easy. Check sk38945