I have a central licensed linked to my internal IP - Does it matter???

[clarkeyi]

Hello

I have a central licsense on my Smartcenter server. I have attached this and license and set up SIC to the Internal IP address of my nokia firewall. I'm in testting mode but I can push policies and rules (internal only tested) seem fine. What are the issues of this deployment if any. If I do need to tie it all to my external address is it a big job. when I try to reach my Nokia's external IP is always fails so this why I used my internal IP
Cheers

[chillyjim]

There should be no issue with this. As SmartCenter's usually don't have an external IP address, this is vary common.

[clarkeyi]

That's good news, as all posts I have read say the external IP of the Nokia enforemcent module should be used but never found out why?. So if you think the intenal IP of the firewall will causes no issues then I will keep it as it is.

Cheers

[sail4fun]

Guess that the "external" har some thing to do with some Pre NG historic issues , things tend's to glue to peopels mind.

[chillyjim]

Back in the day, most people ran central configs (FW Module and Management Module aka, Gateway and SmartCenter, on one box) and for that matter there was no such thing as central licenses. Check Point wanted the license tied to the external/routable IP address so you couldn't cheat the license. Up to 4.0 IIRC the license was tied to the system's hostid and not the IP address. It was a royal PIA when you had to replace hardware.