Endpoint device license management

[Charlie_Dobson]

We constantly seem to be going over the number of allotted licenses we have for our company which made my director question how Check Point manages licenses.  I seem unable to find this information on my own.  How does Check Point count endpoint devices and how do I know old devices that have been removed from our network aren't still being counted as taking up a license?

[G_W_Albrecht]

This can not be answered globally for all CP products - but i would assume that you are using an EPSS !  Here, SmartEndpoint - 'Reporting' tab - 'Licenses Reporter' pane does show all the client seats that were installed. A complete detailed explanation about these licenses can be found here: Endpoint Security Management Server Administration Guide R80.20 p.16f,  sk61832: EndpointSecurity Licensing for E80.x and sk61181 - Endpoint Security License and Contract Installation Instructions for E80 / E80.x.

PhoneBoy - I would suggest to move this question to Endpoint > Endpoint Security Products where it really belongs...

[Charlie_Dobson]

Thanks for responding.  I should have clarified that we are still using R77.30.  I am looking at Smart Endpoint - Licenses Report and, for example, I'm looking at URL Filtering and it shows we are consuming 352 more licenses than we have.  Our company has gone through some high turnover for some departments within the last 6 months or so, but the number seems a little high, so we are curious if seats are still being consumed by users no longer with the company or by devices that have been since re-deployed to new users and thus maybe being counted twice?  How does Check Point count license seats?  Per device or per user, or both?

[G_W_Albrecht]

Using R77.30 means a R77.30 Management - but the EPSS must be a R80.xx ! EPS Licenses are counted per client / seat, e.g. number of clients with installed EPS client and blades. This can be found in detail in every version of the Endpoint Security Administration Guide !

If you have issues with the number of seats available und used i would suggest to use the procedure from sk122119: License counter showing incorrect number of seats and contact TAC with the results !

[PhoneBoy]

At a high level, Endpoints that have phoned home in the last 30 days will be taking up a license.
If these licenses aren't clearing out then I recommend getting the TAC involved.