How to Verify UTM License

[avilT]

I have Checkpoint NG FP3 on Nokia IP330. I am moving it to new hardware IP390 with NGXR61. My hardware vendor says I need to have "CheckPointUTM US/U" to manage the new IP390. I have received the new license for NGXR61. How to verify whether its UTM license or not?

Thanks
Av

[chillyjim]

What is the SKU?

[avilT]

Its
cpvp-vee-u-3des-module-ngx
cpvp-vps-1-ngx cpmp-ppk-1-ngx

Thanks

[chillyjim]

Originally Posted by avilT

Its
cpvp-vee-u-3des-module-ngx

Unlimited enforcement point (Firewall) with VPN (3des/AES)

cpvp-vps-1-ngx cpmp-ppk-1-ngx

SecureClient Policy Server and Performance Pack

So it looks like a VPN-1 Power license.
There is no UTM features (Anti-virus/spam, URL filtering) and no management license.

You will require at least a CPUTM-SC-5 for management
(see: https://pricelist.checkpoint.com/pri...nter_UTM_Power)

Now somewhere along the line you had to have a SmartCenter/Management Module license to manage the FP3.

[avilT]

Is it not possible to manage the IP390 without the UTM license? I do not need antispam/antivirus features of UTM. Is it possible to install NGXR61 on IP390?
Thanks

[chillyjim]

It's a bad marketing name. SmartCenter UTM has nothing to do with the UTM feature set, it's just the version that is bundled with UTM (The more feature rich, and expensive SmartCenter Power is bundled with the Power licenses, if you buy a bundle).

You need a SmartCenter (AKA Management Module) license to manage you Check Point firewall, regardless of platform. How are you managing the FP3 box now?

What license is on that now (cplic print or fw lic print I don't remember which in FP3)?

[avilT]

I am managing the Checkpoint FP3 on Nokia with firewall manager on Windows 2000. Following is the cplic print command output from the firewall manager.

CPVP-VEE-U-3DES-MGMT-NG FW1:5.0:DBVR_UNLIMIT

Thanks

[mcnallym]

That is a VPN-1 Pro Management License.

You should be able to upgrade the license to NGX in User Center and use to manage a UTM gateway license.

As you don't want the UTM functionality then is likely to be fine.