Need some advice on what license to use for a test firewall

kb1 — Thu, 04 Feb 2021 19:30:34 GMT

So i have a installed a test firewall for https inspection, the only license it has is the firewall license, this firewall will purely be used for testing https inspection (might be used for other stuff as well in the future), so for https inspection shall i request a license for checkpoint? or should i be able to make do with a trial 30 day all in one license(which i know can be keep getting renewed after the end of 30 days)?

Also how do i make sure the test firewall is running the same hotfix as our internet firewall (on which the https inspection rules and policies will eventually be replicated).

test firewall info -

cpinfo -y all

This is Check Point CPinfo Build 914000202 for GAIA
[IDA]
No hotfixes..

[CPFC]
No hotfixes..

[MGMT]
No hotfixes..

[FW1]
No hotfixes..

FW1 build number:
This is Check Point's software version R80.20 - Build 255
kernel: R80.20 - Build 258

[SecurePlatform]
No hotfixes..

[CPinfo]
No hotfixes..

[PPACK]
No hotfixes..

[DIAG]
No hotfixes..

[CVPN]
No hotfixes..

[CPUpdates]

internet firewall info -

cpinfo -y all

This is Check Point CPinfo Build 914000202 for GAIA
[IDA]
No hotfixes..

[CPFC]
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[MGMT]
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[FW1]
HOTFIX_MAAS_TUNNEL_AUTOUPDATE
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

FW1 build number:
This is Check Point's software version R80.20 - Build 163
kernel: R80.20 - Build 151

[SecurePlatform]
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[CPinfo]
No hotfixes..

[PPACK]
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[DIAG]
No hotfixes..

[CVPN]
HOTFIX_ESOD_SCANNER_AUTOUPDATE
HOTFIX_ESOD_CSHELL_AUTOUPDATE
HOTFIX_ESOD_SWS_AUTOUPDATE
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[CPUpdates]
BUNDLE_ESOD_SCANNER_AUTOUPDATE Take: 9
BUNDLE_ESOD_CSHELL_AUTOUPDATE Take: 13
BUNDLE_ESOD_SWS_AUTOUPDATE Take: 14
BUNDLE_MAAS_TUNNEL_AUTOUPDATE Take: 25
BUNDLE_INFRA_AUTOUPDATE Take: 36
BUNDLE_DEP_INSTALLER_AUTOUPDATE Take: 18
BUNDLE_R80_20_JUMBO_HF_MAIN Take: 118

[CPDepInst]
No hotfixes..

[AutoUpdater]
No hotfixes..

Thank you.

Re: Need some advice on what license to use for a test firewall

G_W_Albrecht — Thu, 04 Feb 2021 21:44:06 GMT

Web interface, CPUSE. You have a 14 day trial on the newly installed deployment, eval is good for longer time.

Re: Need some advice on what license to use for a test firewall

PhoneBoy — Fri, 05 Feb 2021 01:02:05 GMT

The typical "All-in-one" eval should be totally fine for this purpose.

Re: Need some advice on what license to use for a test firewall

_Val_ — Mon, 08 Feb 2021 07:50:19 GMT

Additional note. R80.20 is particuarly poor choice to test HTTPS Inspection. Use R80.40 or higher, R81, where we use much more efficient engine for known HTTPS issues.

topic Re: Need some advice on what license to use for a test firewall in General Topics

Need some advice on what license to use for a test firewall

Re: Need some advice on what license to use for a test firewall

Re: Need some advice on what license to use for a test firewall

Re: Need some advice on what license to use for a test firewall