possibility to use the Check Point Endpoint Security Client without enabling the Mobile Access blade

[Deemath141185]

Is it possible to use the Check Point Endpoint Security Client(harmony EDR) for connect to VPN without enabling the Mobile Access blade license on the Check Point Firewall?

I would appreciate any clarification on the licensing requirements and possible limitations.

[Chris_Atkinson]

Yes please refer: https://support.checkpoint.com/results/sk/sk67820 

[PhoneBoy]

Yes.
Client-based Remote Access VPN can be provided either by the VPN blade or Mobile Access.
Endpoint Security VPN and Mobile Access Blade require different licenses.
You must have Endpoint licenses or CPEP-ACCESS licenses to use Endpoint Security VPN.

[Rashin]

Thanks for the explanation. But I had a bit confusing as below point it is saying that "A maximum of five VPN users can only connect when using Harmony Endpoint" sk67820

Let's assume we purchase the 500 endpoint security (data protection - CP-HAR-EP-DATA) licenses and not purchasing additional mobile VPN licenses (CPSB-MOB) for firewall. Can these 500 users concurrently connect via VPN only using above mentioned endpoint security data protection license?

[Shyyyy]

Hey,
I believe the data protection license (CP-HAR-EP-DATA) doesn't include VPN.
I think you can purchase license for the endpoints that include VPN to resolve that issue.

but you should definitely consult a sales engineer about this.

[Chris_Atkinson]

Package inclusions are outlined here:

https://sc1.checkpoint.com/uc/pdf/Har_EP_Pricing_Packages.pdf