Gary, Check Point documentation in general does not mention licensing issues in general, so it would in fact be unusual for that to happen with Office Mode.
I cannot point you to a doc, but if you send a message to [EMAIL PROTECTED] asking about this, they will tell you that you must have a Secure Client license in order to use Office Mode legally. Anyway, somebody else on this thread already pointed out something important, and that is that you must install the client as Secure Client, not SecuRemote, to have the option of enabling Office Mode. I'm not agreeing with Check Point on this one, in fact I consider OM should be a basic feature on any VPN Client software and I don't see why somebody would have to pay for a Secure Client license, which by the way is expensive, to be able to use it, but that is just the way they work. Regards On Jan 16, 2008 4:34 PM, Gary Scott <[EMAIL PROTECTED]> wrote: > There is no need to have a secureclient license to be able to use OM. In > every OM config doc I have read there is no mention of the legal need > for the secureclient (VSC) license to utilize OM. Can someone point me > to the doc that says this is not "legal" to use OM unless you have a VSC > lic? Thanks, > > -GS > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] On Behalf Of > Cardwell, David (Kansas City) > Sent: Wednesday, January 16, 2008 4:45 PM > To: [email protected] > Subject: Re: [FW-1] secure remote > > With NGAI you need a policy server lic, but with NGX the policy server > license is included in the > gateway lic. Now with a SecureClient lic you can use Office Mode and a > desktop policy just by having > a SecureClient lic. > > You will want to give Office Mode a subnet that is not used on your LAN. > You can use IP Pools > instead. The benefit of using office mode is so you can have DHCP give > out addresses if needed and > can assign DNS servers. > > Hope that helps a little. > > David. > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] On > Behalf Of John Lindblom > Sent: Wednesday, January 16, 2008 3:05 PM > To: [email protected] > Subject: Re: [FW-1] secure remote > > So is it my understanding that people are buying SecurClient licenses in > order to have the Office Mode functionality only? Is the policy server > yet > another license if you wanted to use more of the SecurClient features? > > We are starting to run into issues more and more now subnet address > conflicts and the response from an online chat with Checkpoint was > "SecurClient with Office Mode will work without a license but not > legally". > Well, that's not something I would want to do then and also have the > possibility of installing it on a bunch of machines and have it break > unexpectedly with an upgrade. > > John > > > > > Sergio Alvarez > > <[EMAIL PROTECTED] > > OM> > To > Sent by: Mailing > [EMAIL PROTECTED] > list for INT.COM > > discussion of > cc > Firewall-1 > > <FW-1-MAILINGLIST > Subject > @AMADEUS.US.CHECK Re: [FW-1] secure remote > > POINT.COM> > > > > > > 01/16/08 02:39 PM > > > > > > Please respond to > > Mailing list for > > discussion of > > Firewall-1 > > <FW-1-MAILINGLIST > > @AMADEUS.US.CHECK > > POINT.COM> > > > > > > > > > > Licensing speaking, Office Mode **is** a Secure Client feature. The only > reason you can use it without a Secure Client license is because > technically > the firewall software is currently not enforcing this, which does not > mean > eventually a newer release could do so. > > That situation happened with SmartView Reporter (recently renamed > Eventia > Reporter), it has always been licensed per site, but in the past having > a > single of those licenses was enough to generate reports for several > sites > or > gateways. Starting on R60, there was a change and now the application > checks > and warns you, if you have more gateways than licenses available, you > are > forced to choose for which gateways you would be generating reports, > leaving > the unlicensed ones out of the process. > > That caused a headache to one of our customers, who used to work with > another Check Point reseller, which did not explain the situation from > the > very beginning. > > Regards > > On Jan 15, 2008 6:30 AM, Sidney Boumendil <[EMAIL PROTECTED]> > wrote: > > > On Jan 15, 2008 1:01 PM, sin <[EMAIL PROTECTED]> wrote: > > > Sidney Boumendil wrote: > > > > Securemote doesn't offer Office mode. > > > > > > I have setup office mode with only securemote for customers in the > past > > > and worked fine (with NGX). > > > > Still, you certainly had to install the client in secureclient mode > > not securemote (office mode checkbox is greyed out). Office mode > > license enforcement is not activated on certain version (I don't know > > wich ones), only the use of policy server seem to be checking for a > > secureclient license. > > > > Sidney > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > > -- > Sergio Alvarez > (506)8301342 > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Sergio Alvarez (506)8301342 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
