[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW1] two IP650 running VRRP
Glenn: CheckPoint some time back changed their stance as to when (or when you don't) need a second license. People on the list can correct me if I am wrong but... If I remember correctly CheckPoint says that if you have two FWs and one of them is a "Hot" standby (Nokia's using VRRP, Sun's using Stonebeat, Rainwall, etc.) then you will need to purchase a FW license for each of the boxes. Whereas if you have one machine that is "active" and one that is powered down (in a "cold" standby state) then you can get by with only having one license. It also does not matter where you place the Management server (whether on the machine running the FW module or on a separate machine) you can still use the license from your "active" server to obtain a license for your management server. Though if your client does opt to go with a "cold" standby solution that you strongly recommend putting the mgmt. server a separate and distinct machine (because if the "active" machine that is running the FW mod is also the mgmt. server, if it ever goes down and you need to implement the "cold" standby you will not be able to "manage" the now active FW. And I am not sure if you will be able to use the second "cold" standby machine to manage the "active" FW. This I think would be a very gray area as far as CheckPoint licenses are concerned. Hope that this helps. Glenn Carnagey <[email protected]> on 01/27/2001 03:53:08 PM To: [email protected] cc: (bcc: James E Clukey/Rush/RSH) Subject Re: [FW1] two IP650 running VRRP : At 4:13 PM -0800 1/26/01, Raymond N wrote: >Hi there, > >The answer to this question may seem obvious, but I guess it doesn't hurt >to ask. > >I have one Firewall-1 (Enterprise license) running on Sun Solaris right >now. I am thinking to buy two IP650 and use VRRP for fail-over. Do I need >to buy an additional license for the second IP650 (assuming I can transfer >the exiting license on Sun to the first IP650)? > >I am going to ask my reseller, but I am almost sure he would say "yes" >without a second thought. I have a somewhat similar licensing question: A client has a single Sun Ultra 1 running CP 3.0 SP9 on Solaris 2.5.1, they have a 50stdlightmotif license, but they already have their 4.0 key and software. We're hoping to go with 2 Nokias, but either: a.) 2 Nokias, one a cold backup, same or a 2nd 50 license b.) 1 Nokia, beef up the old Sun for a cold backup, new 50 license for the Nokia c.) 2 Nokias with VRRP CP 4.1 SP2 on any of these solutions (SP3 if we can't get the Sun out of the loop), looking at the IP440 for the Nokias. Obviously, we want them to go with the latter (basically, the diagram at http://www.nokia.com/securitysolutions/network/availability.html), but we're having a lot of difficulty getting a straight answer on what the licensing and upgrade situation needed for that scenario is. 3 answers from 3 different companies' salesman. Anyone know? -- --- Glenn Carnagey Pathfinder Associates, LLC, [email protected] ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================ ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|