Sascha Picchiantano wrote:
Hi there,
about 2 years ago one of my customers bought a so called Checkpoint Enterprise Center which was supposed to have management for unlimited gateways and IP addresses. It is CPVP-VEE-U-NG (which is the unlimited management including one unlimited VPN-1 gateway). Today we tried to buy a new unlimited VPN-1 gateway module to install on a second Nokia Box, so that we can do Nokia VRRP high availability. Now the sales person is telling us in order to do this, we would have to upgrade our existing (_unlimited_!) enterprise center to a new version called CPVP-VCT-U-NG. Needless to say this upgrade is expensive. Without the update we would not be able to buy and even install new Gateway modules.
So the once unlimited Enterprise Center today becomes a limited one.
Sounds fishy, but they may be correct. We have a CPVP-VEE licensed management station that runs more than one module. You should be able to run more than one module from yours too. HOWEVER, doing HA _is_ an extra license. But I thought you bought an extra license for the enforcement pair. Something like a CPFW-VHM license. I didn't think it had anything to do with the license on the management server.
I don't know what a CPVP-VCT license is. It may have something to do with the fact that Nokia VRRP is not the same thing as Check Point HA. I'm not sure if you need Check Point HA to do Nokia VRRP. I actually didn't think you needed a CP HA license at all for Nokia VRRP. Someone out there must be in a similar licensing situation. What do other Nokia VRRP licensees have?
They also say if we would buy a gateway module today and operate that in an HA environment together with the "old" gateway, we would run into problems, thus the need for an upgrade of the existing gateway.
This I do know is true. You need identical versions of the FW-1 software running on modules that do state syncronization. The form of the data they share is a rather "raw" binary format and small differences between internal data formats could seriously break things. But an upgrade should not cost license money, just staff's-time money (provided your maintenance is current).
BTW, you don't need any additional licenses to do state synchronization. -- Crist J. Clark [EMAIL PROTECTED] Globalstar Communications (408) 933-4387
The information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact [EMAIL PROTECTED]
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
