Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
kb1
Collaborator

Need some advice on what license to use for a test firewall

So i have a installed a test firewall for https inspection, the only license it has is the firewall license, this firewall will purely be used for testing https inspection (might be used for other stuff as well in the future), so for https inspection shall i request a license for checkpoint? or should i be able to make do with a trial 30 day all in one license(which i know can be keep getting renewed after the end of 30 days)?

Also how do i make sure the test firewall is running the same hotfix as our internet firewall (on which the https inspection rules and policies will eventually be replicated).

test firewall info - 

cpinfo -y all

This is Check Point CPinfo Build 914000202 for GAIA
[IDA]
No hotfixes..

[CPFC]
No hotfixes..

[MGMT]
No hotfixes..

[FW1]
No hotfixes..

FW1 build number:
This is Check Point's software version R80.20 - Build 255
kernel: R80.20 - Build 258

[SecurePlatform]
No hotfixes..

[CPinfo]
No hotfixes..

[PPACK]
No hotfixes..

[DIAG]
No hotfixes..

[CVPN]
No hotfixes..

[CPUpdates]

internet firewall info - 

cpinfo -y all

This is Check Point CPinfo Build 914000202 for GAIA
[IDA]
No hotfixes..

[CPFC]
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[MGMT]
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[FW1]
HOTFIX_MAAS_TUNNEL_AUTOUPDATE
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

FW1 build number:
This is Check Point's software version R80.20 - Build 163
kernel: R80.20 - Build 151

[SecurePlatform]
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[CPinfo]
No hotfixes..

[PPACK]
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[DIAG]
No hotfixes..

[CVPN]
HOTFIX_ESOD_SCANNER_AUTOUPDATE
HOTFIX_ESOD_CSHELL_AUTOUPDATE
HOTFIX_ESOD_SWS_AUTOUPDATE
HOTFIX_R80_20_JUMBO_HF_MAIN Take: 118

[CPUpdates]
BUNDLE_ESOD_SCANNER_AUTOUPDATE Take: 9
BUNDLE_ESOD_CSHELL_AUTOUPDATE Take: 13
BUNDLE_ESOD_SWS_AUTOUPDATE Take: 14
BUNDLE_MAAS_TUNNEL_AUTOUPDATE Take: 25
BUNDLE_INFRA_AUTOUPDATE Take: 36
BUNDLE_DEP_INSTALLER_AUTOUPDATE Take: 18
BUNDLE_R80_20_JUMBO_HF_MAIN Take: 118

[CPDepInst]
No hotfixes..

[AutoUpdater]
No hotfixes..

Thank you.

0 Kudos
3 Replies
G_W_Albrecht
Legend
Legend

Web interface, CPUSE. You have a 14 day trial on the newly installed deployment, eval is good for longer time.

0 Kudos
PhoneBoy
Admin
Admin

The typical "All-in-one" eval should be totally fine for this purpose.

0 Kudos
_Val_
Admin
Admin

Additional note. R80.20 is particuarly poor choice to test HTTPS Inspection. Use R80.40 or higher, R81, where we use much more efficient engine for known HTTPS issues.

0 Kudos