Glenn:
CheckPoint some time back changed their stance as to when (or when you
don't) need a second license. People on the list can correct me if I am wrong
but...
If I remember correctly CheckPoint says that if you have two FWs and one of
them is a "Hot" standby (Nokia's using VRRP, Sun's using Stonebeat, Rainwall,
etc.) then you will need to purchase a FW license for each of the boxes.
Whereas if you have one machine that is "active" and one that is powered
down (in a "cold" standby state) then you can get by with only having one
license.
It also does not matter where you place the Management server (whether on
the machine running the FW module or on a separate machine) you can still use
the license from your "active" server to obtain a license for your management
server. Though if your client does opt to go with a "cold" standby solution that
you strongly recommend putting the mgmt. server a separate and distinct machine
(because if the "active" machine that is running the FW mod is also the mgmt.
server, if it ever goes down and you need to implement the "cold" standby you
will not be able to "manage" the now active FW. And I am not sure if you will be
able to use the second "cold" standby machine to manage the "active" FW. This I
think would be a very gray area as far as CheckPoint licenses are concerned.
Hope that this helps.
Glenn Carnagey <[EMAIL PROTECTED]> on 01/27/2001 03:53:08 PM
To: [EMAIL PROTECTED]
cc: (bcc: James E Clukey/Rush/RSH)
Subject Re: [FW1] two IP650 running VRRP
:
At 4:13 PM -0800 1/26/01, Raymond N wrote:
>Hi there,
>
>The answer to this question may seem obvious, but I guess it doesn't hurt
>to ask.
>
>I have one Firewall-1 (Enterprise license) running on Sun Solaris right
>now. I am thinking to buy two IP650 and use VRRP for fail-over. Do I need
>to buy an additional license for the second IP650 (assuming I can transfer
>the exiting license on Sun to the first IP650)?
>
>I am going to ask my reseller, but I am almost sure he would say "yes"
>without a second thought.
I have a somewhat similar licensing question:
A client has a single Sun Ultra 1 running CP 3.0 SP9 on Solaris
2.5.1, they have a 50stdlightmotif license, but they already have
their 4.0 key and software. We're hoping to go with 2 Nokias, but
either:
a.) 2 Nokias, one a cold backup, same or a 2nd 50 license
b.) 1 Nokia, beef up the old Sun for a cold backup, new 50
license for the Nokia
c.) 2 Nokias with VRRP
CP 4.1 SP2 on any of these solutions (SP3 if we can't get the Sun out
of the loop), looking at the IP440 for the Nokias.
Obviously, we want them to go with the latter (basically, the diagram
at http://www.nokia.com/securitysolutions/network/availability.html),
but we're having a lot of difficulty getting a straight answer on
what the licensing and upgrade situation needed for that scenario is.
3 answers from 3 different companies' salesman. Anyone know?
--
---
Glenn Carnagey
Pathfinder Associates, LLC
512.799.6961, Fax 646.810.0946
[EMAIL PROTECTED]
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
