Remote VPN users capacity on Checkpoint 1470

[Abhinav_Shrivas]

Hi all

I have Checkpoint 1470 appliance, version - R77.20.80.

I want to know few things

1- How many remote VPN users can be configured on that appliance ?

2- How many user can connect at same time ?

and from where i can see the connected users on GUI or CLI.

[Jerry]

1. depends on licensing of MAB (mobile access blade)

2. technically or teoretically?

have you seen the full spec of that appliance Sir ?

https://www.checkpoint.com/downloads/product-related/datasheets/ds-1400-appliance.pdf

ps. this isn't super powerful appliance indeed but i believe that Account Services should advise you accordingly before you bought that model how many IPSec/SSL users you could potentially board on it.

imho, no more than 50 users should use it as it is only SOHO/SMB device with no more than 4 CORE's if I remember correclty plus WiFi module?

[_Val_]

The device comes with 200 Mobile Access Users license. So the first one answer is 200. The second is a bit trickier and depends on many other parameters, but 50 users seems legit

[Abhinav_Shrivas]

yes, I have seen the document, according to this 200 users can be configured, but when i look in side the firewall dashboard it says "max concurrent remote access" could be only 3.  

[Jerry]

Licensing mate, I wrote that to you earlier  meaning you did not apply a proper license onto the MGMT/GW.

[_Val_]

No, you read this wrongly. The max number on the second picture is the highest amount of sessions you have had from the last boot.

[Abhinav_Shrivas]

Are you sure ?

I rebooted the firewall and checked that, it still shows "3".  You said its a highest amount of session from last reboot, in that case it should be 0 after rebooting the firewall.  

[Jerry]

show us the output of "cplic -x print"  though

[Abhinav_Shrivas]

see this.

[G_W_Albrecht]

Here we see it: SSLVPN-50 means that 50  user can connect at same time ! See which user is connected is only available in Dashboard (SmartLog or Tracker).

[Abhinav_Shrivas]

It shows "CPSB_SSLVPN-50"  two times, does it mean that 100 users can connect at the same time or only 50 users can connect ?

[G_W_Albrecht]

According to the 14x0 data sheet, 1470 has 200 Mobile Access User Licenses in default package, 300 maximum.

[G_W_Albrecht]

Question 3 was :

and from where i can see the connected users on GUI or CLI.

This you did answer yourself by showing the screenshot - Statistics = Remote Access tunnels !

[Abhinav_Shrivas]

but I want to see which user is connected.

[Jerry]

SmartMonitor? + new cli "cpview" ?

[Jerry]

plus SmartLog shows MobileAccess blade connections so you can see who's logging in and from where  

[Emil]

To see a list of connected users:

- "VPN" in main menu on the left

- Section "Remote Access"

- "Connected Remote Users"