There is no need to have a secureclient license to be able to use OM. In every OM config doc I have read there is no mention of the legal need for the secureclient (VSC) license to utilize OM. Can someone point me to the doc that says this is not "legal" to use OM unless you have a VSC lic? Thanks,
-GS -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Cardwell, David (Kansas City) Sent: Wednesday, January 16, 2008 4:45 PM To: [email protected] Subject: Re: [FW-1] secure remote With NGAI you need a policy server lic, but with NGX the policy server license is included in the gateway lic. Now with a SecureClient lic you can use Office Mode and a desktop policy just by having a SecureClient lic. You will want to give Office Mode a subnet that is not used on your LAN. You can use IP Pools instead. The benefit of using office mode is so you can have DHCP give out addresses if needed and can assign DNS servers. Hope that helps a little. David. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of John Lindblom Sent: Wednesday, January 16, 2008 3:05 PM To: [email protected] Subject: Re: [FW-1] secure remote So is it my understanding that people are buying SecurClient licenses in order to have the Office Mode functionality only? Is the policy server yet another license if you wanted to use more of the SecurClient features? We are starting to run into issues more and more now subnet address conflicts and the response from an online chat with Checkpoint was "SecurClient with Office Mode will work without a license but not legally". Well, that's not something I would want to do then and also have the possibility of installing it on a bunch of machines and have it break unexpectedly with an upgrade. John Sergio Alvarez <[EMAIL PROTECTED] OM> To Sent by: Mailing [EMAIL PROTECTED] list for INT.COM discussion of cc Firewall-1 <FW-1-MAILINGLIST Subject @AMADEUS.US.CHECK Re: [FW-1] secure remote POINT.COM> 01/16/08 02:39 PM Please respond to Mailing list for discussion of Firewall-1 <FW-1-MAILINGLIST @AMADEUS.US.CHECK POINT.COM> Licensing speaking, Office Mode **is** a Secure Client feature. The only reason you can use it without a Secure Client license is because technically the firewall software is currently not enforcing this, which does not mean eventually a newer release could do so. That situation happened with SmartView Reporter (recently renamed Eventia Reporter), it has always been licensed per site, but in the past having a single of those licenses was enough to generate reports for several sites or gateways. Starting on R60, there was a change and now the application checks and warns you, if you have more gateways than licenses available, you are forced to choose for which gateways you would be generating reports, leaving the unlicensed ones out of the process. That caused a headache to one of our customers, who used to work with another Check Point reseller, which did not explain the situation from the very beginning. Regards On Jan 15, 2008 6:30 AM, Sidney Boumendil <[EMAIL PROTECTED]> wrote: > On Jan 15, 2008 1:01 PM, sin <[EMAIL PROTECTED]> wrote: > > Sidney Boumendil wrote: > > > Securemote doesn't offer Office mode. > > > > I have setup office mode with only securemote for customers in the past > > and worked fine (with NGX). > > Still, you certainly had to install the client in secureclient mode > not securemote (office mode checkbox is greyed out). Office mode > license enforcement is not activated on certain version (I don't know > wich ones), only the use of policy server seem to be checking for a > secureclient license. > > Sidney > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Sergio Alvarez (506)8301342 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
