Tim and David,
Tim, your right. But your answer needs clarifcation.
Checkpoint counts IP's that it 'sees' on all interfaces _except_
the external interface($FWDIR/conf/external.if).
Technically, you license based on the number of hosts allowed
in the IP network your using(class C=255(253), B=65536(65534) or
if you've subnetted, then the total allowed in the subnet) This is how
checkpoint likes to make oooodles of $$. But most of the time the
licensing is an art of interpretation.
David, you may want to verify the contents of your 'external.if'
file and make sure that it's using the true external interface(one facing
your ISP.)
Also, you need to remove/rename the following two files and then
restart fw1(fwstop;fwstart):
$FWDIR/database/fwd.h and $FWDIR/database/fwd.hosts
See http://www.phoneboy.com/fw1/faq/0001.html for a nice
writeup on this issue.
Robert
(p.s. oooodles is a technical term for a lot :)
- -
Robert P. MacDonald
Global Infrastructure Group, Haworth, Inc.
Voice: +1.616.393.1247
email: [EMAIL PROTECTED]
>>> "Tim Holman" <[EMAIL PROTECTED]> 02/20/01 10:08AM >>>
>
>Checkpoint will check the number of IP addresses behind the firewall. Each
>one is stored, and licensed.
>For a Proxy server, although one IP address will logically appear to the
>firewall, all nodes behind it must be licensed.
>Any multihomed workstations, routers and what have you will all be picked
>up.
>
>----- Original Message -----
>From: David Crousset <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: 20 February 2001 13:18
>Subject: [FW1] Checkpoint Licensing
>>
>> Hi,
>>
>> I can't get rid of this message even if I delete fwd.h :
>>
>> Dear Check Point VPN-1 & FireWall-1 customer
>>
>> It seems that your organization has violated the Right-To-Use
>> License Agreement. There are more computers trying to communicate
>> through your VPN-1 & FireWall-1 gateway installed on Node-1, than the
>> license
>> entitles you to. Please contact your VPN-1 & FireWall-1 reseller to
>> arrange for an appropriate license.
>>
>> You can avoid those repeated messages by removing the file:
>> $FWDIR/database/fwd.h, then restarting VPN-1 & FireWall-1 and making
>> sure you do not violate the License Agreement again.
>>
>> Check Point Software Technologies Ltd.
>>
>> I have 65 workstations running internally and I have a 100-users license.
>> What does Firewall check for license validity?? Does it count how many IP
>> are coming out-in?
>>
>> Thanks
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
