topic Re: Security gateway license scheme in Firewall and Security Management

Security gateway license scheme

Wei_Soon_Heng — Wed, 03 Apr 2019 03:53:10 GMT

Hi All,

Currently, I had customer who has a query on the purchased sku license : CPSG-C-2-500 which is 2 cores limited and 500 limited users. My question here is how is the 500 users count? Is it based on IP of internal users, gateway or router? Will the firewall let the traffic bypassed if the environment is exceed 500 users?

Thanks

Re: Security gateway license scheme

Timothy_Hall — Wed, 03 Apr 2019 12:10:10 GMT

At least at one point the gateway would count all unique source IP addresses that would show up inbound on all interfaces marked as Internal in the firewall/cluster topology. When you went over the limit, a warning would be issued in the firewall traffic logs (and syslog as well) but firewall functionality would not be otherwise affected (usually, but see below). I don't know if recent versions of gateway code still do this "counting" as I haven't seen this warning message in a very long time.

I'm intimately familiar with this mechanism, see the link below for a trip down memory lane for those of you that have used Check Point for more than 15 years...

https😕/seclists.org/bugtraq/2001/Jan/282

Re: Security gateway license scheme

G_W_Albrecht — Wed, 03 Apr 2019 12:14:31 GMT

Or sk10200: 'too many internal hosts' error in /var/log/messages on Security Gateway - Last Updated: 23-Jan-2018