topic Re: Remote Access VPN License in SASE and Remote Access

Remote Access VPN License

Heisenberg — Mon, 05 Apr 2021 15:14:17 GMT

Hi CheckMates,

I do have an inquiry from my client regarding remote access vpn license. they have 2 Check Point Firewalls but only one have MAB license SSL-VPN-U due to budget limitation. Their use case is that when downtime occurs they want to transfer the MAB license to the other Firewall.

Is this operation of constantly moving licenses from container to container advisable/recommended?

If not is there any SK related to the dettach/move/attach of licenses? if possible stating its not recommended

What would be the effect and necessary changes need to make if they want to push it?

Re: Remote Access VPN License

PhoneBoy — Mon, 05 Apr 2021 15:42:13 GMT

Assuming the license is centrally managed, you can, in theory, re-attach the license to a different gateway from the management.
However, that can be disruptive and may not be possible of the gateway in question is offline.
What you’re probably better off doing in this case (assuming the downtime isn’t extended) would be to just apply eval licenses on the other gateway as needed.

Re: Remote Access VPN License

the_rock — Mon, 05 Apr 2021 17:55:03 GMT

Maybe work with account services (license team) to confirm. CP licensing is very confusing, to be 100% honest about it...I heard that from many CP employees as well : )