Update Licensing issues.

[Pneuma]

Good-day,

I recently purchased an update license on behalf one of my clients, whose policy resides on our NGX R60 central management station. We have an additional five policies with more gateways, belonging to other clients, on the same policy server, and all our firewalls are also NGX R60.

Checkpoint states on their FAQ and elsewhere that the license for SmartDefence Update is "per gateway/endpoint".
http://www.checkpoint.com/defense/ad....html#licensed

However, it appears that Checkpoint have no mechanism in place to select WHICH gateways recieve the SmartDefence Update, nor do I have the option of only applying the updates to specific policies.

From what I can see, the updates are applied accross all policies, and therefore presumably make me "out-of-license". Is this really the standard behaviour? Am I now forced by default to purchase licenses for ALL my other clients, who are sure to still not see the value, even though I have suggested it only a hundred times or so?
I do not really wish to seperate my policies onto two servers, those with the license and those without, as it would really nullify the concept of central management. Also the firm I work for, and me personally, would prefer not to keep mum about it and take it as a perk, as heads would surely roll were the anti-piracy folks audit us and find us out-of-license.

I guess I just can't believe that Checkpoint would stoop to such awful tricks to make a quick buck, there must be some way to keep the licensing seperate.

Any suggestions or personal experience of this problem would be much appreciated, maybe I just missed a tickbox somewhere in the hundreds of dialogs, wizards and tabs.

Regards,

marc