Renew license on 3600 appliances.

[hle2001]

Hi all,

We replaced our 4200 with 3600 last year with 3600 appliances, and we our gateway only use Firewall & log so every year we only renew Software support Premium (CPES-SS-PREMIUM-ADD)  just so we can get software update and hotfixes. Is checkpoint now require you must select package subscription for renew support even I never use those blade feature as show in attached message?

cplic print in detail.

All we need basic support so we can get software update and hotfixes and knowledgebase access , in the past 10 year we rarely open ticket with Checkpoint, Any suggestions? Thank in advance.

[the_rock]

Maybe if you send us output of cplic print, it would give a better idea.

Andy

[PhoneBoy]

Note that with current appliances, we bundle NGTP for the first year.
As such, renewal quotes include these blades by default.
They are optional.

[hle2001]

Thank you for your reply, I thought the same too. Because when we bought 4200 and now 3600 we did pay for yearly Premium support and NGFW package, then after that we only renew the software support without package, doing that for 7 year now. Then when we tried to renew this week our reseller Checkpoint require we must pay for one of the Sandblast package plus software support, I think that crazy to pay for features we never use. Our company have other vendor for network monitoring, IPS/IDS, and Antivirus apps. Our reseller got that information from a Checkpoint engineer office in Oklahoma, Texas. If that is the case I for sure will switch to Palo Alto because our other sites using Palo Alto did not have this problem. I fought to keep checkpoint at our site when my company request to change to Palo Alto because I had checkpoint since Nokia appliances and SecurePlatform before switch to GaiA. But if Checkpoint force to renew with all Packages in NGFW than I have no choice to switch to Palo Alto next time.

-Robert

[G_W_Albrecht]

NGFW is firewall only, no TP subscriptions included.

[the_rock]

I guess you can always confirm all this with Account services, just to be 100% sure.

Andy

[PhoneBoy]

Product Catalog (available to Partners) isn't allowing firewall-only renewal quotes at present.
I don't know if this is the result of a policy change...will check.

[G_W_Albrecht]

I had a look, that is true:

The small package is FW, APCL and IPS.

[the_rock]

Personally and this is just me, I had been doing the same when it comes to CP licenses for the last 15 years...either I verify with Account services they are correct or if its super urgent, just generate eval for 30 days for the time being, until all is sorted out. It is a fact that licensing with other vendors might be indeed less complicated, but at the same time, its also dependant on different factors.

Andy

[G_W_Albrecht]

No, you can just buy e.g. - but what about Management ?

Renewals & Blades

CPSB-NGFW-3600-3Y

SW subscription

Next Generation Firewall Package for additional 3 years for 3600 Base Appliance

[hle2001]

Hi all,

Thank you for all your comments, finally our reseller did correct and accepted our renewal using NGFW package came standard with the hardware after 1 year, so we only renew software support both for management and hardware appliance we chose Enterprise Premium support. We are using Cluster for redundancy, if one fails we just buy a new one.

Regards,

-Robert

[G_W_Albrecht]

Why buy a new cluster node ? If it is under support you will get a replacement appliance quickly using RMA.