- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
10 December @ 5pm CET / 11am ET
Improve Your Security Posture with
Threat Prevention and Policy Insights
Overlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hello Community,
I have an open server with license CPSM-NGSM5 which refer to 5 gateway that can be managed with this license.
How does it count for non-vsx cluster member(Active/Standby)? will it consume 2 seat or 1 seat?
Now, I have 3 cluster with total 6 member gateway is managed by this mgmt server with license NGSM5. There is any error message prompt saying it exceeded the license seat when pushing policy package
I wonder how is the logic behind.
Thanks
Yes, gateway objects consume license slots, regardless of whether you have SIC with them. In my lab management, I build a bunch of gateway objects so I'll have a cluster, a non-clustered firewall, some ElasticXL, and so on. I only ever establish SIC to one or two. I tried this on a real management with a real, permanent license (on a 3200), and the extra unused objects prevented me from pushing policy because I had too many firewalls for the license.
A ClusterXL cluster with 2 members is counted as two gateways.
VSX by comparison is documented here: https://support.checkpoint.com/results/sk/sk119075
Each gateway in a ClusterXL cluster counts as a managed gateway for licensing purposes.
Which means that an NGSM5 will only be able to manage two HA clusters and a single gateway.
For ElasticXL (relevant from R82), only the SMO object counts as a managed gateway.
Which means you could manage five ElasticXL clusters (each with three members) with an NGSM5.
As far as I know, yes, you will receive an error if you exceed the license limit.
Is there a command that will tell you the current usage?
I believe the license is based on the number of gateway objects defined (whether or not you are pushing policy to them).
Yes, gateway objects consume license slots, regardless of whether you have SIC with them. In my lab management, I build a bunch of gateway objects so I'll have a cluster, a non-clustered firewall, some ElasticXL, and so on. I only ever establish SIC to one or two. I tried this on a real management with a real, permanent license (on a 3200), and the extra unused objects prevented me from pushing policy because I had too many firewalls for the license.
You may try the mgmt-cli commands from sk178544
That worked, thanks!
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 17 | |
| 12 | |
| 11 | |
| 7 | |
| 6 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 |
Thu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasFri 12 Dec 2025 @ 10:00 AM (CET)
Check Mates Live Netherlands: #41 AI & Multi Context ProtocolThu 04 Dec 2025 @ 02:00 PM (EST)
End-of-Year Event: Securing AI Transformation in a Hyperconnected World - AmericasFri 12 Dec 2025 @ 10:00 AM (CET)
Check Mates Live Netherlands: #41 AI & Multi Context ProtocolTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY