John, as bizarre as it sounds, the answer is yes, some customers have had to pay for Secure Client licenses JUST to use Office Mode legally, precisely for the same issues you are experiencing with subnets conflicts and such.
The Policy Server is just something you enable on your main firewall to be able to deliver security policies to the personal firewall included with Secure Client, it does not need anything extra, besides off course the Secure Client license. The story about the Reporter is something I tell my customers before working on deploying Office Mode without Secure Client, you can in fact get into trouble if a hotfix changes everything and you loose Office Mode, it would be a royal pain if you have a lot of remote access users out there, but some of my customers that just have a few of them and just can't afford to pay for a SC license to get small subnet issues, have decided to take the risk. Regards On Jan 16, 2008 3:05 PM, John Lindblom <[EMAIL PROTECTED]> wrote: > So is it my understanding that people are buying SecurClient licenses in > order to have the Office Mode functionality only? Is the policy server > yet > another license if you wanted to use more of the SecurClient features? > > We are starting to run into issues more and more now subnet address > conflicts and the response from an online chat with Checkpoint was > "SecurClient with Office Mode will work without a license but not > legally". > Well, that's not something I would want to do then and also have the > possibility of installing it on a bunch of machines and have it break > unexpectedly with an upgrade. > > John > > > > Sergio Alvarez > <[EMAIL PROTECTED] > OM> To > Sent by: Mailing [EMAIL PROTECTED] > list for INT.COM > discussion of cc > Firewall-1 > <FW-1-MAILINGLIST Subject > @AMADEUS.US.CHECK Re: [FW-1] secure remote > POINT.COM> > > > 01/16/08 02:39 PM > > > Please respond to > Mailing list for > discussion of > Firewall-1 > <FW-1-MAILINGLIST > @AMADEUS.US.CHECK > POINT.COM> > > > > > > > Licensing speaking, Office Mode **is** a Secure Client feature. The only > reason you can use it without a Secure Client license is because > technically > the firewall software is currently not enforcing this, which does not mean > eventually a newer release could do so. > > That situation happened with SmartView Reporter (recently renamed Eventia > Reporter), it has always been licensed per site, but in the past having a > single of those licenses was enough to generate reports for several sites > or > gateways. Starting on R60, there was a change and now the application > checks > and warns you, if you have more gateways than licenses available, you are > forced to choose for which gateways you would be generating reports, > leaving > the unlicensed ones out of the process. > > That caused a headache to one of our customers, who used to work with > another Check Point reseller, which did not explain the situation from the > very beginning. > > Regards > > On Jan 15, 2008 6:30 AM, Sidney Boumendil <[EMAIL PROTECTED]> > wrote: > > > On Jan 15, 2008 1:01 PM, sin <[EMAIL PROTECTED]> wrote: > > > Sidney Boumendil wrote: > > > > Securemote doesn't offer Office mode. > > > > > > I have setup office mode with only securemote for customers in the > past > > > and worked fine (with NGX). > > > > Still, you certainly had to install the client in secureclient mode > > not securemote (office mode checkbox is greyed out). Office mode > > license enforcement is not activated on certain version (I don't know > > wich ones), only the use of policy server seem to be checking for a > > secureclient license. > > > > Sidney > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > > -- > Sergio Alvarez > (506)8301342 > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Sergio Alvarez (506)8301342 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
