SNX License Management

[Ted Odom]

How is SNX license count managed?
I can find no documentation on this and the Checkpoint License center says one thing then writes something else on the ticket.

Is it managed by the total number of users connected at any one time?
Is by the number requests to download the small clients?
If not concurrent, how do you monitor the license usage?
Can this count be cleared or reset?

I have a customer with SPLAT NGAI 55 HF15 with SNX 25 users. It has been working for over a year. Recently the user would get disconnected and could not connect again until the FW was rebooted. Then for only a day or so until it reoccurred. I could find nothing wrong and now error or log messages. I suspected the license so I put a 30 day eval on and the problem went away ( it has been 4 day so far).

I will be replacing this unit soon with a R61 SPLAT so it is not pressing now, but I need to know the above.

[chillyjim]

On a gateway (not Connectra) SNX is licensed by TOTAL number of users. In theory, the count is a rolling 30 day window but I don't know how it is enforced, if it even is.

I know under NGX the SecureClient/SNX enforcement was changed and is supposedly working now, whatever that means.

[Ted Odom]

Your explination makes sense. I also heard from a Checkpoint SE that the Number of "Registered Users" is the key. I finally checked the user group reference in the office mode field and found over 30 users included. So it is a exceeding license issue.

The interesting thing was the way it acted. Working for a day after a reboot then no one could connect. It could have just settled on the few persons that used it every day, aka CEO, CFO, etc...

[wujido]

Actually, for VPN-1, SNX is licensed as is SecureClient, total users. On Connectra SNX is licensed as concurrent.