CloudGuard IaaS VE

[dantsec]

We have a customer with CloudGuard IaaS VE (2 vCore) running GW and SMS in the same Server/Hardware. However, the performance is not satisfactory, so we want to install SMS on another Server/Hardware.

In this scenario, where the customer has only one Standalone GW, to have the Management on another Server/Hardware, is it necessary the Next Generation Security Management Software for 5 Gateways License (CPSM-NGSM5)?

[G_W_Albrecht]

This is absolutely correct: CloudGuard license is only for StandAlone with bundled SMS + GW - in Virtual Environments, usually the Hardware is shared by all VMs and resources distributed as needed, so this makes sense! If you need more VE GWs than two or want a separate management, you need  the CPSM-NGSM5 license (that is the cheapest unbundled SMS license available).

[dantsec]

If the client uses the same server/hardware, only with another VM, does it still need the CPSM-NGSM5 license?

It's a small company, with only one location and 100Mbps bandwidth, so it's hard to explain that he pays $ 2,800 for the firewall and needs to pay more $ 5,900 just to have the management on another VM.

[Maarten_Sjouw]

Each VM is seen as a separate server and therefore a separate machine, 1 gateway and one SMS, so yes these are 2 different machines and need a license each.