CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Licensing
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-02-01
antonyso88 antonyso88 is offline
Senior Member
 
Join Date: 2006-11-23
Posts: 151
Rep Power: 2
antonyso88 has an average reputation (10+)
Default Central or Local license

Hi,

I've installed a distribution on 2 nokia firewall gateway and one managemenet server in R61.

I updated the license from NG into NGX myself in the checkpoint web site. I use "Local" on both nokia and "Central" on the smartcenter/management server. Does it has any impact/affect on the performance? Any problem in future?

I can show the license information from the smart update.
Reply With Quote
  #2 (permalink)  
Old 2007-02-02
Joncon Joncon is offline
Senior Member
 
Join Date: 2006-06-08
Location: UK
Posts: 149
Rep Power: 3
Joncon has an average reputation (10+)
Default Re: Central or Local license

Checkpoint recommend that all licences be central. This will make future config changes such as IP changes easier to manage.
Reply With Quote
  #3 (permalink)  
Old 2007-02-02
antonyso88 antonyso88 is offline
Senior Member
 
Join Date: 2006-11-23
Posts: 151
Rep Power: 2
antonyso88 has an average reputation (10+)
Default Re: Central or Local license

So, it means i put local on my gateway haven't any impact. Right?
Reply With Quote
  #4 (permalink)  
Old 2007-02-02
abusharif abusharif is offline
Senior Member
 
Join Date: 2006-04-27
Location: Twillight zone
Posts: 434
Rep Power: 3
abusharif has an average reputation (10+)
Default Re: Central or Local license

Quote:
Originally Posted by antonyso88 View Post
So, it means i put local on my gateway haven't any impact. Right?
on performance? no
Reply With Quote
  #5 (permalink)  
Old 2007-02-02
MarioL MarioL is offline
Senior Member
 
Join Date: 2007-01-18
Location: London
Posts: 346
Rep Power: 2
MarioL has an average reputation (10+)
Default Re: Central or Local license

The type of license, "local" or "central", only refers to how you plan to install and manage them.

Central IS always the way to go. You import all licenses on the SmartCenter server, using SmartUpdate. Then you deploy licenses for the other modules as you see fit.

This makes it much easier to change IPs, etc, it's a bliss when compared to local licenses.

So whenever I generate or update licenses I always get them as "central" and use the management server's IP address.
Reply With Quote
  #6 (permalink)  
Old 2007-02-04
antonyso88 antonyso88 is offline
Senior Member
 
Join Date: 2006-11-23
Posts: 151
Rep Power: 2
antonyso88 has an average reputation (10+)
Default Re: Central or Local license

I am not sure i am using "Central" on my firewall gateway IP or not. How can i check it is "Central" or "local"? I can't read it in my user account on the license detail.
Reply With Quote
  #7 (permalink)  
Old 2007-02-04
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 862
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: Central or Local license

On the Licenses tab of SmartUpdate, please tell us what is shown for the firewall gateway.

Ray
Reply With Quote
  #8 (permalink)  
Old 2007-02-04
antonyso88 antonyso88 is offline
Senior Member
 
Join Date: 2006-11-23
Posts: 151
Rep Power: 2
antonyso88 has an average reputation (10+)
Default Re: Central or Local license

I am going to migrate and replace my NG FP2 into NGX R61.

It's "local" on my firewall gateways while "central" on my smartcenter. My "local" licensing the firewall gateways IP and "central" licensing on the smartcenter IP.

I won't change the IP on both gateways and also smartcenter in the future.

And i see the license is never expired. If i keep "local" on gateways, any problem?
Reply With Quote
  #9 (permalink)  
Old 2007-02-04
antonyso88 antonyso88 is offline
Senior Member
 
Join Date: 2006-11-23
Posts: 151
Rep Power: 2
antonyso88 has an average reputation (10+)
Default Re: Central or Local license

Anyway, i use all "central" and smartcenter IP for my both firewall gateways after consult our vendor. Thanks.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 06:32.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0