According to Greaser, Kirk N.:
>
> I see I lot of mail beating up CP for their licensing issues.
> I've had issues BUT I have also had them resolved in a timely fashion.
> A couple of phone calls expressing my urgency and all has gone well for me.
hi,
probably you and your reseller fully understand which license feature
you need to achieve the desired functionality of your firewall system.
I think most beginners and a large number of resellers do not have
very much knowledge which licenses are required in a typical distributed
firewall environment using some encryption, authentication, maybe
against a directory server, generating some access lists for Cisco
routers, and so on. In $FWDIR/conf/cp.macro you can find on 4.1 SP1
a number of 559 different licenses, bundles, and combinations of them!
Even if you don't count the Floodgate, Provider-1, and MetaIP stuff
you still have certainly more than 100 different FW-1 licenses.
Imo that's real overkill.
Most of our FW-1 management boxes are enforcement points for features
like routers, ldap (AM), encryption, ca, control, securemote.
Every time we did a major version software upgrade (so far this has been
2.0 -> 3.0 -> 4.0 > 4.1) we experienced a major disaster getting the
new licenses issued. Without some couple of eval licenses or other
dirty tricks it's hard to survive a FW-1 version upgrade in a mission
critical environment. I remember the fun we had when upgrading from
3.0 -> 4.0 cause neither our reseller nor we have been aware that
suddenly licenses have been required for SecuRemote.
Olaf
--
Olaf Selke, [EMAIL PROTECTED], voice +49 5241 80-7069
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
