topic Re: Quantum Spark understanding license - focus on vpn in Spark Firewall (SMB)

Quantum Spark understanding license - focus on vpn

Askey_oot — Tue, 21 Jan 2025 20:56:26 GMT

Hi Community,

I am currently still learning about licensing models and have a question about VPN. From what I initially understand based on the Datasheet documentation, Checkpoint has paid functionality when it comes to VPNs regardless of whether they are Quantum Spark or Force or Open Server. What happens if I do not renew the license, e.g. as part of the NGFW bundle on my Quantum Spark 1535? What is the exact limitation of functionality and simultaneous sessions when it comes to VPNs and other blades on the device? Can the device be used within the functionality limitation? I was looking for documentation that describes this but I didn't find any specific answers, I also have access to the partner portal

If I understood correctly, it looks like this: to use VPN (regardless of whether it's ipsec dialup or site to site or ssl vpn) you need VPN Blade and Mobile Access Blade, which is available, for example, when purchasing NGFW blade in the amount of 100 simultaneous sessions for users or site to site for the 1535 model, and we can buy additional packages of 50 SKU CPSB-MOB-50 licenses if we want to expand

I would like to ask for direction and correction of the information and, if possible, sending links to documentation explaining the above issues that I discussed above

Best Regards

Re: Quantum Spark understanding license - focus on vpn

Chris_Atkinson — Wed, 22 Jan 2025 07:22:23 GMT

Per the Spark datasheet 100 Mobile Access with MOB-50 being an added option (I believe only applicable for the larger models).

Source: https://www.checkpoint.com/downloads/products/1500-pro-security-gateway-datasheet.pdf

Below for reference is the GUI license output for an example Spark gateway, you'll note the S2S VPN is perpetual (no expiry).

Re: Quantum Spark understanding license - focus on vpn

G_W_Albrecht — Wed, 22 Jan 2025 09:11:44 GMT

You are entitled to use S2S VPN and RA VPN without any renewal needed - if you have a valid support contract, you can install the newest version of Embedded GAiA, and with a services renewal, IPS, AV, ASPAM, URLF, APCL, ABOT will update and work.