topic Re: Remote VPN users capacity on Checkpoint 1470 in Spark Firewall (SMB)

Remote VPN users capacity on Checkpoint 1470

Abhinav_Shrivas — Wed, 22 Aug 2018 11:10:37 GMT

Hi all

I have Checkpoint 1470 appliance, version - R77.20.80.

I want to know few things

1- How many remote VPN users can be configured on that appliance ?

2- How many user can connect at same time ?

and from where i can see the connected users on GUI or CLI.

Re: Remote VPN users capacity on Checkpoint 1470

Jerry — Wed, 22 Aug 2018 12:36:25 GMT

1. depends on licensing of MAB (mobile access blade)

2. technically or teoretically?

have you seen the full spec of that appliance Sir ?

https://www.checkpoint.com/downloads/product-related/datasheets/ds-1400-appliance.pdf

ps. this isn't super powerful appliance indeed but i believe that Account Services should advise you accordingly before you bought that model how many IPSec/SSL users you could potentially board on it.

imho, no more than 50 users should use it as it is only SOHO/SMB device with no more than 4 CORE's if I remember correclty plus WiFi module?

Re: Remote VPN users capacity on Checkpoint 1470

_Val_ — Wed, 22 Aug 2018 13:40:26 GMT

The device comes with 200 Mobile Access Users license. So the first one answer is 200. The second is a bit trickier and depends on many other parameters, but 50 users seems legit

Re: Remote VPN users capacity on Checkpoint 1470

Abhinav_Shrivas — Wed, 22 Aug 2018 13:58:51 GMT

yes, I have seen the document, according to this 200 users can be configured, but when i look in side the firewall dashboard it says "max concurrent remote access" could be only 3.

Re: Remote VPN users capacity on Checkpoint 1470

Jerry — Wed, 22 Aug 2018 14:03:59 GMT

Licensing mate, I wrote that to you earlier meaning you did not apply a proper license onto the MGMT/GW.

Re: Remote VPN users capacity on Checkpoint 1470

_Val_ — Wed, 22 Aug 2018 14:14:00 GMT

No, you read this wrongly. The max number on the second picture is the highest amount of sessions you have had from the last boot.

Re: Remote VPN users capacity on Checkpoint 1470

Abhinav_Shrivas — Wed, 22 Aug 2018 14:30:47 GMT

Are you sure ?

I rebooted the firewall and checked that, it still shows "3". You said its a highest amount of session from last reboot, in that case it should be 0 after rebooting the firewall.

Re: Remote VPN users capacity on Checkpoint 1470

Jerry — Wed, 22 Aug 2018 14:32:10 GMT

show us the output of "cplic -x print" though

Re: Remote VPN users capacity on Checkpoint 1470

G_W_Albrecht — Wed, 22 Aug 2018 14:38:21 GMT

Question 3 was :

and from where i can see the connected users on GUI or CLI.

This you did answer yourself by showing the screenshot - Statistics = Remote Access tunnels !

Re: Remote VPN users capacity on Checkpoint 1470

Abhinav_Shrivas — Wed, 22 Aug 2018 14:49:16 GMT

see this.

Re: Remote VPN users capacity on Checkpoint 1470

Abhinav_Shrivas — Wed, 22 Aug 2018 14:51:35 GMT

but I want to see which user is connected.

Re: Remote VPN users capacity on Checkpoint 1470

Jerry — Wed, 22 Aug 2018 15:01:44 GMT

SmartMonitor? + new cli "cpview" ?

Re: Remote VPN users capacity on Checkpoint 1470

Jerry — Wed, 22 Aug 2018 15:02:46 GMT

plus SmartLog shows MobileAccess blade connections so you can see who's logging in and from where

Re: Remote VPN users capacity on Checkpoint 1470

G_W_Albrecht — Thu, 23 Aug 2018 08:07:57 GMT

Here we see it: SSLVPN-50 means that 50 user can connect at same time ! See which user is connected is only available in Dashboard (SmartLog or Tracker).

Re: Remote VPN users capacity on Checkpoint 1470

Abhinav_Shrivas — Thu, 23 Aug 2018 08:18:35 GMT

It shows "CPSB_SSLVPN-50" two times, does it mean that 100 users can connect at the same time or only 50 users can connect ?

Re: Remote VPN users capacity on Checkpoint 1470

G_W_Albrecht — Thu, 23 Aug 2018 11:35:24 GMT

According to the 14x0 data sheet, 1470 has 200 Mobile Access User Licenses in default package, 300 maximum.

Re: Remote VPN users capacity on Checkpoint 1470

Emil — Mon, 09 Mar 2020 08:38:20 GMT

To see a list of connected users:

- "VPN" in main menu on the left

- Section "Remote Access"

- "Connected Remote Users"