Tom, With the licensing migration to Software Blades, anything that use to be defined as a "Site" is now referred to as a firewall.
A site that was defined by 2 (or more) firewalls will now need to be licensed appropriately PER gateway. Anything that was licensed for one cluster will now need to be done for each member of the cluster. This has many repercussions: (This list is non-exhaustive) -A SCS that could manage 5 Sites can now manage 5 GATEWAYS. -A SmartDefence license good for a site of 2 firewalls in HA-Cluster is now an IPS license that is good for ONLY one firewall. -Same thing for every other add-on licenses(AV/QOS/ADN/etc...) During the transition phase, upgrading from NGX to Software Blade licenses, CP allowed you to transform existing cluster license to a normal plus a HA one for Software blades until your next renewal. Whether or not this is still the case is something you'll need to take up to your VAR. Hope this helps -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:fw-1-mailingl...@amadeus.us.checkpoint.com] On Behalf Of Tom Robers Sent: Saturday, November 06, 2010 5:44 PM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: [FW-1] AW: [FW-1] general question about clustering Hi, we use the HA clustering for a long time with no problems and the benefits. Now we have the blades(R71) with Antivirus and URL Filtering... no update of the second cluster member is possible. I get no answer for this task; maybe a checkpoint license strategy ?? -Tom ________________________________________ Von: Mailing list for discussion of Firewall-1 [fw-1-mailingl...@amadeus.us.checkpoint.com]" im Auftrag von "Reinhard Stich [r.st...@internet-security.at] Gesendet: Samstag, 6. November 2010 12:52 Bis: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Betreff: Re: [FW-1] general question about clustering hi, At 08:24 06.11.2010, you wrote: >Hi , > >I wanna ask for the benefits which we'll gain, and the problems we may >have when making up a clustered firewall (especially Checkpoint fw-1 >of course) benefit: - no problem if one node fails (transparent failover) - updates / maintainance without outages - updates / maintainance during working hours (because there is no outage) problems: - with active-active clustering you have to care about the traffic that should go through both firewalls - so maybe you have to play with your switch-config - I prefer HA clusering (one node active, one standby) br reinhard -- Reinhard Stich r.st...@arrowecs.at Arrow ECS Internet Security AG, 1100 Wien, Wienerbergstrasse 11 Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com =================================================
