<update> March23/2020: Jump to last post for summary. During week of March16, 2020; Checkpoint released eval version of MOB-U. Client details (and associated eval licensing) detailed in summary table -GA </update>
<update2> March23/2020: added three screenshots of unlimited Mobile Access eval keys on customer R80.xx platform. </update2>
During current COVID19 measures being adopted by various countries, states, cities, and local governments; the topic of accommodating unprecedented remote-access for entire workforces has been consistent thread for our customers.
Many Checkpoint gateway customers already have license for Mobile Access Blade (MOB) specifically because of the session-count licensing. While Mobile Access Blade provide end-user portal and various remote application and file access via web browser, I suggest large portion of MOB customers simply continue to use remote access IPsec VPN in "office mode".
The licensing mechanism for MOB is concurrent sessions.
The licensing mechanism for IPsec VPN is per user (based on a client install over some period of time -- 24hrs, 30days, etc -- I don't recall the specific period).
I perceive -- based entirely on anecdotal evidence -- that MOB session-based license somehow over-rides the IPsec VPN user-count mechanism. Thus, MOB-50 allows for fifty concurrent IPsec VPN connections.
The issue arises when our customers call about significantly increasing their remote-access licensing. We have quoted MOB-U to numerous customers (ie. unlimited concurrent remote-access sessions).
Some procurement may take multiple days, if not weeks. In the mean-time, we had hoped to leverage 30day eval keys to bridge gap (until fulfillment) -- OR for those customers taking approach this current remote access situation will only last 4-6 weeks. I suggest CP execs would be willing to accept that customers shouldn't necessarily have to make a significant "one off" purchase to cover unique pandemic issue for 4-6 weeks. Granted, the current COVID related closures and changes to business operations may last multiple months.
I called CP Account Services on topic and described my concerns and what I was hoping to accomplish.
We need "a temporary way to provide unlimited remote access connections". The conversation concluded that 30day eval key is equivalent to MOB-U (ie. unlimited session).
Based on customer feedback, it appears that 30day eval key applies differently to the MOB and underlying IPsec VPN licensing mechanisms.
It appears that 30day eval key provides the following (based on customer feedback):
- MOB-U but ONLY to the HTTPS/SSL/TLS remote access solutions.
- VPN-100 for remote-access IPsec VPN in "office mode"
Can someone please verify this? In addition, is this by design and to be expected?
This is somewhat beyond the technical comfort zone of Account Services yet entirely a licensing topic (ie. not relevant for standard support services).
An answer from executive CP product mgmt would be appreciated to put this issue to rest for all customers (and resellers attempting to help).