topic Re: CloudGuard IaaS VE in Cloud Firewall

CloudGuard IaaS VE

dantsec — Wed, 10 Jul 2019 02:12:56 GMT

We have a customer with CloudGuard IaaS VE (2 vCore) running GW and SMS in the same Server/Hardware. However, the performance is not satisfactory, so we want to install SMS on another Server/Hardware.

In this scenario, where the customer has only one Standalone GW, to have the Management on another Server/Hardware, is it necessary the Next Generation Security Management Software for 5 Gateways License (CPSM-NGSM5)?

Re: CloudGuard IaaS VE

G_W_Albrecht — Wed, 10 Jul 2019 09:04:38 GMT

This is absolutely correct: CloudGuard license is only for StandAlone with bundled SMS + GW - in Virtual Environments, usually the Hardware is shared by all VMs and resources distributed as needed, so this makes sense! If you need more VE GWs than two or want a separate management, you need the CPSM-NGSM5 license (that is the cheapest unbundled SMS license available).

Re: CloudGuard IaaS VE

dantsec — Thu, 11 Jul 2019 16:04:50 GMT

If the client uses the same server/hardware, only with another VM, does it still need the CPSM-NGSM5 license?

It's a small company, with only one location and 100Mbps bandwidth, so it's hard to explain that he pays $ 2,800 for the firewall and needs to pay more $ 5,900 just to have the management on another VM.

Re: CloudGuard IaaS VE

Maarten_Sjouw — Thu, 11 Jul 2019 21:49:20 GMT

Each VM is seen as a separate server and therefore a separate machine, 1 gateway and one SMS, so yes these are 2 different machines and need a license each.