The reseller is incorrect to an extent. It depends on how the licensing is setup - either as a central license, or a local license. Enforcement module HA requires the SmartCenter Server (management server) to be installed separately from the Enforcement modules. If you use the Central licensing scheme, you will get 2 license strings - one that could be applied to the SmartCenter Server, and one to be applied to the Enforcement module. Once this is setup, you would simply be able to buy an additional VPN-1 gateway license to complete the cluster.
The biggest thing to take in to consideration here is the separation of SmartCenter Server from the VPN-1 Pro gateway... Regards, Chris -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Golden, Dan Sent: Tuesday, June 08, 2004 1:22 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] CP licensing and Nokia VRRP - Problem. Pls. help. Sascha, From the description of the issue, it sounds like the reseller is incorrect. If you have the VEE license you would need an additional FW module license to create a the VRRP Cluster. From the Checkpoint Licensing Summary I did not find any mention to a CPVP-VCT license, but it states for the CPVP-VEE that you would need an additional FW module to create a cluster. The link for the guide is https://usercenter.checkpoint.com/ucdocs/SummaryLicensing.htm Hope this helps. Regards, Dan -----Original Message----- From: Sascha Picchiantano [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 08, 2004 10:10 AM To: [EMAIL PROTECTED] Subject: [FW-1] CP licensing and Nokia VRRP - Problem. Pls. help. Hi there, about 2 years ago one of my customers bought a so called Checkpoint Enterprise Center which was supposed to have management for unlimited gateways and IP addresses. It is CPVP-VEE-U-NG (which is the unlimited management including one unlimited VPN-1 gateway). Today we tried to buy a new unlimited VPN-1 gateway module to install on a second Nokia Box, so that we can do Nokia VRRP high availability. Now the sales person is telling us in order to do this, we would have to upgrade our existing (_unlimited_!) enterprise center to a new version called CPVP-VCT-U-NG. Needless to say this upgrade is expensive. Without the update we would not be able to buy and even install new Gateway modules. So the once unlimited Enterprise Center today becomes a limited one. Something must be very wrong here but they insist of being right. They also say if we would buy a gateway module today and operate that in an HA environment together with the "old" gateway, we would run into problems, thus the need for an upgrade of the existing gateway. Can anyone with licensing experience and technical background in Nokia VRRP shed some light on this for me please? I really don't understand why we would have to upgrade the existing gateway although the existing one was part of an unlimited bundle and is unlimited itself. Looks to me like they want to make some additional money... To make a long story short: We have CPVP-VEE-U-NG and want to buy a second gateway module to gain HA. Is this possible without expensivly upgrading the CPVP-VEE-U-NG? Thanks so much for your help. Oh and if anyone knows of a page that explains all those CP abbreviations like CPVP-VEE-U-NG I'd appreciate that too :) Regards, Sascha ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
