topic Re: licensing VPN client for MAC in SASE and Remote Access

licensing VPN client for MAC

Wolfgang — Tue, 03 Mar 2020 08:06:32 GMT

Hello CheckMates,

we are in a discussion with Check Point and the distributor about licensing of VPN clients.

One of our clients is using EndPoint VPN client on Apples MAC-OS. The licenses are bought in steps of 25, 50 or 100 seats and the VPN blade on the gateway needs to be licensed.

Now the customer wants to expand there VPN clients (only VPN nothing else) and the licensing team mentioned you have to buy full EndPoint-clients and too the EndPoint-Managementserver.

We don't need the EndPoint-Management and technical you don't need this to use the RemoteAccess-VPN clients.

Why the customer can't buy only licenses for the VPN clients and have to pay money for something they don't need ?

Wolfgang

Re: licensing VPN client for MAC

_Val_ — Tue, 03 Mar 2020 08:26:03 GMT

We do not have VPN only licenses anymore for endpoint.

Depending on the scope of your requirements, annual solutions such as SandBlast Agent Basic may or may not be an alternative. You did not give enough info to judge 🙂

Re: licensing VPN client for MAC

Wolfgang — Tue, 03 Mar 2020 08:56:04 GMT

@_Val_

the only thing we need is 50 seats more of the VPN clients, no sandblast, no ThreatPrevention, no URLF ... nothing then VPN on the client .

Wolfgang

Re: licensing VPN client for MAC

_Val_ — Tue, 03 Mar 2020 09:26:50 GMT

I totally understand your argument. Once more, we do not have VPN only licenses for a while now. I believe, the further dialog should be taken with the local sales team.

I personally will be happy to help, if needed. Ping me offline, if required.

Re: licensing VPN client for MAC

PhoneBoy — Wed, 04 Mar 2020 03:09:58 GMT

If you just need VPN clients, you can buy Mobile Access Blade.
Install Check Point Mobile, connect as IPSEC VPN, no need to enable MAB on gateway.
The only thing you miss compared to the prior Endpoint VPN license is Desktop Firewall.

Re: licensing VPN client for MAC

Wolfgang — Wed, 04 Mar 2020 07:09:44 GMT

Thanks @PhoneBoy ,

but how about MAC operating system. CheckPoint mobile is only available for Windows.

Is this too supported and correct licensed, MOB-Blade license only and EndPoint VPN client on MAC ?

Wolfgang

Re: licensing VPN client for MAC

PhoneBoy — Wed, 04 Mar 2020 15:25:54 GMT

If you use the SNX client on the Mac, yes.
To use the regular VPN client on the Mac, you need a full Endpoint license on the Mac.

Re: licensing VPN client for MAC

PhoneBoy — Mon, 09 Mar 2020 00:40:37 GMT

While they are not listed in the Product Catalog, I received word it should be possible to order the SKUs CPEP-ACCESS-P and CPEP-ACCESS-1Y again.
I assume the price is the same as before, but obviously can't look it up.

Re: licensing VPN client for MAC

Abd_S81 — Wed, 06 May 2020 03:48:14 GMT

Hi @PhoneBoy- Is it possible to get the full Endpoint license for MAC but disable all options like Sandblast, FW, Anti-virus etc and use only for VPN, effectively making it similar to Checkpoint mobile client.

Re: licensing VPN client for MAC

_Val_ — Wed, 06 May 2020 07:06:25 GMT

Not phoneboy, but yes. It is a matter of policy