CloudGuard IaaS VE
We have a customer with CloudGuard IaaS VE (2 vCore) running GW and SMS in the same Server/Hardware. However, the performance is not satisfactory, so we want to install SMS on another Server/Hardware.
In this scenario, where the customer has only one Standalone GW, to have the Management on another Server/Hardware, is it necessary the Next Generation Security Management Software for 5 Gateways License (CPSM-NGSM5)?
This is absolutely correct: CloudGuard license is only for StandAlone with bundled SMS + GW - in Virtual Environments, usually the Hardware is shared by all VMs and resources distributed as needed, so this makes sense! If you need more VE GWs than two or want a separate management, you need the CPSM-NGSM5 license (that is the cheapest unbundled SMS license available).
If the client uses the same server/hardware, only with another VM, does it still need the CPSM-NGSM5 license?
It's a small company, with only one location and 100Mbps bandwidth, so it's hard to explain that he pays $ 2,800 for the firewall and needs to pay more $ 5,900 just to have the management on another VM.