Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Silver

No of Gateways Managed by a Single Management Server

Jump to solution

Hi,

 

How many Checkpoint GW instances can be managed by a Single Management Server Instance in AWS ? 

 

Thanks

0 Kudos
1 Solution

Accepted Solutions
Highlighted

The number of gateways that an SMS can manage is technically dictated by the license container used to hold the individual blades.  The container specifies various other licensing limits:

  • SMS - # managed GWs
  • Firewall - # of usable cores
  • Endpoint Security - Number of allowed endpoints

If you look at the SKU of an SMS license you should see something like this:

CPSM-C-X

X indicates the number of gateways that can be managed.  Note that if you started with a CPSM-C-5 and later added on more gateways for management, your license wouldn't necessarily get converted to a CPSM-C-10, but there may be two instances of CPSM-C-5 instead adding up to 10.

Also the last digit(s) of a Smart-1 product number indicates the initial licensed number of gateways it can manage, such as:

  • Smart-1 405  (5 gateways)
  • Smart-1 625  (25 gateways)
  • Smart-1 5050  (50 gateways)

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com

View solution in original post

6 Replies
Highlighted
Sapphire

That is rather a licensing question - usually, this is restricted by management license only. In VM/Cloud, mostly there is a license for managing two GWs = one cluster included.

Highlighted
Silver
ohk.sorry if i posted it under the wrong header.

So a Mgmt Server can only manage 2 GWs by default and beyond 2 GW a license is required ?
0 Kudos
Highlighted
Employee++
Employee++

Per sk130372 likely 5 by default for AWS deployed Mgmt unless a different BYOL license was used.

Highlighted
Silver
I am using BYOL for my deployment... doesnt it support 2 by default ? post licensing is there any way to check how many GW Instance it can manage

Thanks
0 Kudos
Highlighted

The number of gateways that an SMS can manage is technically dictated by the license container used to hold the individual blades.  The container specifies various other licensing limits:

  • SMS - # managed GWs
  • Firewall - # of usable cores
  • Endpoint Security - Number of allowed endpoints

If you look at the SKU of an SMS license you should see something like this:

CPSM-C-X

X indicates the number of gateways that can be managed.  Note that if you started with a CPSM-C-5 and later added on more gateways for management, your license wouldn't necessarily get converted to a CPSM-C-10, but there may be two instances of CPSM-C-5 instead adding up to 10.

Also the last digit(s) of a Smart-1 product number indicates the initial licensed number of gateways it can manage, such as:

  • Smart-1 405  (5 gateways)
  • Smart-1 625  (25 gateways)
  • Smart-1 5050  (50 gateways)

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com

View solution in original post

Highlighted
Admin
Admin
Output of cplic print from the management will tell you for sure.