Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Abhinav_Shrivas
Participant

Remote VPN users capacity on Checkpoint 1470

Hi all

I have Checkpoint 1470 appliance, version - R77.20.80.

I want to know few things

1- How many remote VPN users can be configured on that appliance ?

2- How many user can connect at same time ?

and from where i can see the connected users on GUI or CLI.

16 Replies
Jerry
Leader
Leader

1. depends on licensing of MAB (mobile access blade)

2. technically or teoretically?

have you seen the full spec of that appliance Sir ?

https://www.checkpoint.com/downloads/product-related/datasheets/ds-1400-appliance.pdf

ps. this isn't super powerful appliance indeed but i believe that Account Services should advise you accordingly before you bought that model how many IPSec/SSL users you could potentially board on it.

imho, no more than 50 users should use it as it is only SOHO/SMB device with no more than 4 CORE's if I remember correclty plus WiFi module?

Jerry
0 Kudos
_Val_
Admin
Admin

The device comes with 200 Mobile Access Users license. So the first one answer is 200. The second is a bit trickier and depends on many other parameters, but 50 users seems legit

Abhinav_Shrivas
Participant

yes, I have seen the document, according to this 200 users can be configured, but when i look in side the firewall dashboard it says "max concurrent remote access" could be only 3.  

0 Kudos
Jerry
Leader
Leader

Licensing mate, I wrote that to you earlier Smiley Happy meaning you did not apply a proper license onto the MGMT/GW.

Jerry
_Val_
Admin
Admin

No, you read this wrongly. The max number on the second picture is the highest amount of sessions you have had from the last boot.

Abhinav_Shrivas
Participant

Are you sure ?

I rebooted the firewall and checked that, it still shows "3".  You said its a highest amount of session from last reboot, in that case it should be 0 after rebooting the firewall.  

0 Kudos
Jerry
Leader
Leader

show us the output of "cplic -x print"  though

Jerry
0 Kudos
Abhinav_Shrivas
Participant

see this.

0 Kudos
G_W_Albrecht
Legend
Legend

Here we see it: SSLVPN-50 means that 50  user can connect at same time ! See which user is connected is only available in Dashboard (SmartLog or Tracker).

0 Kudos
Abhinav_Shrivas
Participant

It shows "CPSB_SSLVPN-50"  two times, does it mean that 100 users can connect at the same time or only 50 users can connect ?

0 Kudos
G_W_Albrecht
Legend
Legend

According to the 14x0 data sheet, 1470 has 200 Mobile Access User Licenses in default package, 300 maximum.

G_W_Albrecht
Legend
Legend

Question 3 was :

and from where i can see the connected users on GUI or CLI.

This you did answer yourself by showing the screenshot - Statistics = Remote Access tunnels !

Abhinav_Shrivas
Participant

but I want to see which user is connected.

0 Kudos
Jerry
Leader
Leader

SmartMonitor? + new cli "cpview" ?

Jerry
0 Kudos
Jerry
Leader
Leader

plus SmartLog shows MobileAccess blade connections so you can see who's logging in and from where  

Jerry
0 Kudos
Emil
Explorer

To see a list of connected users:

- "VPN" in main menu on the left

- Section "Remote Access"

- "Connected Remote Users"

0 Kudos