Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
weisoon
Explorer
Explorer
Jump to solution

How does number of managed gateway ngsm count for cluster?

Hello  Community,

I have an open server with license CPSM-NGSM5 which refer to 5 gateway that can be managed with this license.
How does it count for non-vsx cluster member(Active/Standby)? will it consume 2 seat or 1 seat?

Now, I have 3 cluster with total 6 member gateway is managed by this mgmt server with license NGSM5. There is any error message prompt saying it exceeded the license seat when pushing policy package

I wonder how is the logic behind.

Thanks

0 Kudos
1 Solution

Accepted Solutions
Bob_Zimmerman
Authority
Authority

Yes, gateway objects consume license slots, regardless of whether you have SIC with them. In my lab management, I build a bunch of gateway objects so I'll have a cluster, a non-clustered firewall, some ElasticXL, and so on. I only ever establish SIC to one or two. I tried this on a real management with a real, permanent license (on a 3200), and the extra unused objects prevented me from pushing policy because I had too many firewalls for the license.

View solution in original post

0 Kudos
7 Replies
Chris_Atkinson
Employee Employee
Employee

A ClusterXL cluster with 2 members is counted as two gateways.

VSX by comparison is documented here: https://support.checkpoint.com/results/sk/sk119075 

CCSM R77/R80/ELITE
0 Kudos
PhoneBoy
Admin
Admin

Each gateway in a ClusterXL cluster counts as a managed gateway for licensing purposes.
Which means that an NGSM5 will only be able to manage two HA clusters and a single gateway.

For ElasticXL (relevant from R82), only the SMO object counts as a managed gateway.
Which means you could manage five ElasticXL clusters (each with three members) with an NGSM5.

As far as I know, yes, you will receive an error if you exceed the license limit.

0 Kudos
CaseyB
Advisor

Is there a command that will tell you the current usage?

0 Kudos
PhoneBoy
Admin
Admin

I believe the license is based on the number of gateway objects defined (whether or not you are pushing policy to them).

0 Kudos
Bob_Zimmerman
Authority
Authority

Yes, gateway objects consume license slots, regardless of whether you have SIC with them. In my lab management, I build a bunch of gateway objects so I'll have a cluster, a non-clustered firewall, some ElasticXL, and so on. I only ever establish SIC to one or two. I tried this on a real management with a real, permanent license (on a 3200), and the extra unused objects prevented me from pushing policy because I had too many firewalls for the license.

0 Kudos
Chris_Atkinson
Employee Employee
Employee

You may try the mgmt-cli commands from sk178544

CCSM R77/R80/ELITE
CaseyB
Advisor

That worked, thanks!

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events