hi,

normally a "user" is one internal IP. if you have defined your NIC to the internet as "external" your VPN-peer-IPs that come from the internet should be seen as external.

you should reset the IP-table for the license and then see what IPs are counted as internal.

cheers
reinhard

At 15:14 07.10.2005, you wrote:
Hey people,

I'm trying to audit our licensing to ensure we are fully compliant.

We have an express license for 50 users one of our management servers which manages 2 gateways (HA).

When l do an "fwlichosts" l get over 140 hosts.

When l analyze the hosts, l see that some of them are hosts coming in from another site via a VPN tunnel, some are VPN users, etc.

Can anyone define for me what a valid user is in Checkpoint parlance?

l estimate we are close to our limit of 50 by counting internal ip's, but the fwlichosts results show a completely different picture.

Thanks in advance.

Al

Alan C. Choyna
Senior Consultant

Pathfinder Associates, LLC

<http://www.pathfinderassoc.com/>http://www.pathfinderassoc.com
Internet Strategy Business Consultants
<mailto:[EMAIL PROTECTED]>mailto:[EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]>.com
Business telephone (312) 372-1058. Mobile (773) 255-6662


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

--
Reinhard Stich  ASSIST  [EMAIL PROTECTED]
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to