Licence Issues

[switzer]

Hi

Can any kind soul - give me an idea of how the lack of presence int
the checkpoint user centre affects the firewall .

I assumed that the user centre should be a mirror of what is on our
management station and firewall.
Unfortunately we seem to be having problems with a management stn
and the 2 NGX R62 AND 1 R60 FIREWALLS.

Here are the discrepancies -
On the management stn and cp user centre the Signature keys do
not match on the following -
cpvp-vee-u-3des-mgmt-ngx

One firewall cpxp-ci-vpx-u-ngx is not on the user centre.

This is on the firewall - cpvp-vsr-5000-ngx and on the management centre
but only one licence on the Checkpoint user center.

CPPWR-VPG-HA-U - on user centre but not anywhere else

CPPWR-CKP-U-U - on user centre but nowhere else.

We have no Smartmap - could that be due to CPPWR-CKP-U-U
not being on the management server ? - as according to smartupdate
we have VPNPOWER.

Many thanks to anyone who can help with this !

Steve

[mcnallym]

There is no link as such between your UserCenter and your actual SMARTCenter. Your Check Point installation works with the licenses installed.

However if there is a discrepancy then you want to sort out as you legally have what is in your UserCenter account, and you may be missing out on features your have bought but not using ( You are by the way) Your UserCenter should match what is on your System and if it doesn't then you should remedy the situation.

When you install R62 you have a choice of VPN-1 Power and VPN-1 UTM to install. This does not mean you have those licenses.

If you have a cpvp-vee-u-3des-mgmt-ngx installed on the SMARTCenter then you may well have the product VPN-1 Power installed, however your license is a VPN-1 Pro SMARTCenter or non-Pro. As such you do not have a SMARTMAP license on your SMARTCenter.

You should sort out your licenses to get the additional functionality

CPPWR-CKP-U-U is a VPN-1 Power Bundle of a VPN-1 Power Unlimited Gateway and a VPN-1 SMARTCenter. The SMARTCenter license here is a full POWER license and so includes all of the old SMARTCenter Pro license, ie SMARTMAP, SMARTUPdate, Account Unit etc.

CPPWR-VPG-HA-U is a VPN-1 Power Gateway License to be used on a HA gateway.

These two would give you licenses for your

1 x SMARTCenter Pro

2 x R62 Gateways in a HA configuration

Do you have any other licenses in the User Center for your 3rd Gateway. As if the license is not in User Center you do not own the license as far as Check Point are concerned.

Do not worry about the cpvp-vsr-5000-ngx license as is a Secure Remote license and your other licenses in the UserCenter mean that you don't need them anymore