NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] no License



I stand corrected.  It's funny because I had this same conversation about 3
times, and it was other people that convinced me of the wrong answer, and
they were CheckPoint people no less.  But I just tested it, and I am
convinced that I was wrong.  You do not a motif license.  Sorry about that!

As for you license, if you look in a file called cp.macro on the CheckPoint
media cd, you will see all their license types and you can correlate it to
what their features are.
For example, a cpvp-vfm-100-3deS-v41 CK-6F92785A####  would be a Firewall
Module (No management license)) for 100 users, for 3DES encryption, version
4.1.   Looking at the file, your features are "pfm100, vpnstrong, and enc25"
As you can see, you don't have control or controlx, which would be your
management station license.

You need a license with 'controlx'. You have a bunch of different ways to
go.  
First off, Do you plan to have the management station on the Nokia itself???

If you are to separate the mgmt station from the fw, you will need probably
pay more.  
Scenario #1	Mgmt station+FW on the Nokia
	1)Upgrade your license to a CPVP-VIG-100-3DES-v41
(fw1:4.1:stdmed100 fw1:4.1:vpnstrong fw1:4.1:enc100 fw1:4.1:vpnmgmt).  You
would not be able to separate the management station from the firewall in
the future but it would cover your current needs and be cheaper than the
other route.
	2)Buy a CPVP-ESC-U-3DES-v41	(fw1:4.1:controlx fw1:4.1:vpnstrong)
Actually, you might just need a CPFW-ESC-U-v41	(fw1:4.1:control) since
their is already encryption in your current license.)

Scenario #2	Mgmt station separate from Nokia FW
	1)You could buy a CPVP-VEE-U-3DES-mgmt-v41	(fw1:4.1:controlx
fw1:4.1:vpnstrong) and that would cover your management station with
Encryption license. Also, they could be on separate boxes, which is
recommended for the Nokias.  This is not cheap, but I can't think of another
way to do it separately right now.  It seems like their should be another
way since you only need a 100 user license and this one is the unlimited,
but all the mgmt licenses appear to be unlimited user.  Anybody else have a
differing opinion on what to get?


Jason Luke



-----Original Message-----
From: Leggett, Jeff [mailto:[email protected]]
Sent: Monday, December 11, 2000 1:59 PM
To: Luke, Jason (ISS Southfield); 'Brian Mulford'; Fw1 Mailing List
(E-mail)
Subject: RE: [FW1] no License


I don't think this is correct information.  I setup a management station on
a Solaris and it runs fine using the GUI from a windows box.  If I wanted to
actually use the X-window GUI I would then need the Motif license.  



-----Original Message-----
From: Luke, Jason (ISS Southfield) [mailto:[email protected]]
Sent: Monday, December 11, 2000 1:12 PM
To: 'Brian Mulford'; Fw1 Mailing List (E-mail)
Subject: RE: [FW1] no License



Brian,
	Since you have a single gateway product, then your Nokia box is also
your Management Station.  Any time you have the Management Station on a unix
platform, Checkpoint requires that you purchase a MOTIF GUI license.  This
also includes Nokias.   Yes, the name is misleading, as it has nothing to do
with where the GUI is installed, only where the Management Station is
installed.  Call you reseller.  Tell them you want  CPMP-MOTIF-GUI-1-V41, ie
the Motif license.  Install it on your Nokia.

Jason Luke


-----Original Message-----
From: Brian Mulford [mailto:[email protected]]
Sent: Monday, December 11, 2000 11:30 AM
To: Fw1 Mailing List (E-mail)
Subject: [FW1] no License



I am setting up a new IP330. Its a single gateway product. I have setup the
Gui on an NT machine, and when I connect to the Nokia, it says "No license
for User interface"
I wasnt aware that you had to purchase a license for the GUI on a Nokia. any
ideas?

Brian


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.