No, do not license the internal IP of the gateway. You want to apply all licenses to the management station, as you noted, using central licensing. This enables you to change the external IP of the gateway without having to relicense it.
This article skI2574 explains how to remotely install a module license using SmartUpdate. SmartUpdate is available to everyone to handle licensing even if you haven't paid for the license for its remote upgrade capabilities.
Briefly, you will set up SIC between the SmartCenter server and the remote gateway as explained in the article. SIC is an SSL certificate-authenticated connection. The remote gateway will have to accept control connections (which are in its implied rules). The connection will be between the SmartCenter server on the private range out through its local gateway over the Internet to the external IP of the remote gateway.
Hopefully I understood your concern.
Ray
From: Piri McMullan <[EMAIL PROTECTED]> Reply-To: Mailing list for discussion of Firewall-1 <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [FW-1] Basic Licensing Question Date: Sat, 12 Jun 2004 13:33:46 -0700
This is my first post to this list and am somewhat new to CP. I have taken over CP admin from a previous employee who used to only set up integrated mgmt/fw systems. I am setting up a first distributed config, separate mgmt and fw systems and have a basic license question. I was under the impression that licensing had to be done according to the external interface which is giving me problems as my mgmt is behind the fw inside a private range. Can I license against the private range without issue? I will be adding a few more fw modules external to the mgmt site. I am familiar enough with the product itself however haven't had any real experience outside of integrated mgmt/fw systems so centralized licenses are new to me.
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
_________________________________________________________________ Stop worrying about overloading your inbox - get MSN Hotmail Extra Storage! http://join.msn.click-url.com/go/onm00200362ave/direct/01/
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
