Managament Server

[zgnf05]

We have multiple cp firewalls and all firewalls contain their licenses. We would like to go to a management server for all firewalls where all the licenses are on one server and we can manage rules from the same place. Been doing some reading but have not found a good source of how to do this properly. We have cp versions 4.1,3,5.4,5.5,6.1(going into prod) would like to build the server starting with the new 6.1 ver. Thanks for responding and look forward to your replies.

[chillyjim]

Starting in R54 I believe, central license management became available.

As long as your licenses are under support, you should be able to relicense them as "central" licenses. Install the new license on the SmartCenter using SmartUpdate and push the license out to the gateway.

This is something your reseller should be able to help you with (The licensing part anyway).

[Sergej]

Looks like you will need to upgrade you hardware also. Just start moving you infrastructure to a new hardware and R61.
Looks like you will need to recreate all you objects and rules by hands, but this is good moment to arrange you policy and filter out unneeded things.

[zgnf05]

I built a splat server and loaded the MDS on it and loaded the MDG on my laptop. my license is the Check Point Enterprise - VPN-1 Gateway for Unlimited Users and SMART Center here is the debate I think the license needs to be central but the boss thinks local so you can split the license for management and firewall. So if your using the splat server as management do you just use the license as central? Thanks for your repsonses. any other suggestions would be great as well. Maybe I am thinking wrong but doesnt the firewall access the splat server which is managed by your laptop or other system?

[kva.kva]

I don't see any causes to use local license if it's possible use central license. Central license is more comfortable in using. But SmartCenter's license is local always, if I remember right.

[zgnf05]

Ok built the splat server and got the firewall taking to server now the question.

1. Do you put the management license on the splat server and then the module license on the firewall via the smartserver?

2. Or do you use the module license for everything.

3. when I bring in another firewall to management server does that new license use the management server ip addy and then just attach to mod?

Thanks for any help.

Jason

[dondma]

When using centralized licensing, you can add the appropriate license to each server / gateway. First add your licenses to the repository. You can download these from User Center or use the tool within SmartUpdate to download them from User Center. Once the licenses are within the repository, you can select each gateway / management server and add the appropriate license to it.

It does make managing licensing a bit easier. When installing a new gateway, do not add licenses during setup. Once you have the gateway up and running, you can always add the license in using SmartUpdate.

Hope that helps

D