Creating your User Center Account

How do I create a new account in the User Center?

How do I get my Confirmation Code to create a new account?

Is the User Center secure? How?

How do I get added to my company’s current User Center account?

How can all of the administrators for our company see our products in the User Center?

How can I, as a partner/reseller/consultant, administrator my customers account in the User Center?

How can user’s access rights be updated?

 

Using your User Center account

How do I edit my personal or company information after I have created an account?

How do I delete an account that was created by mistake?

How do I recover my password if I have misplaced it?

How do I add my products to my User Center account?

How do I move products from one User Center account to another?

How do I find the Certificate Key, Software Subscription, Technical Support, and/or Order Keys that need to be added to my account?

Why do I receive the error “Not in Product List” when I try to add a product to my User Center account?

Why am I getting an error message telling me that my product is attached to another account when I try to add it to my product list?

Our Administrator has left the company and I need access to the products.  What do I need to do?

Our company purchased another company that has Check Point products.  How do we import those into our account?

How do I enter a service request with Check Point?

 

Registering Your Products

Why does the permanent product I purchased list as an evaluation version in my User Center Account?

Why does the software subscription/ technical support contracts show up as generic in my User Center Account?

 How to license a certificate key, software subscription contract, or a technical support contract?

If I change the IP address and/or Platform of my product, do I need a new license?

What is the process for upgrading my product to a newer version?

How can I generate a 4.1 license if my product version is at Next Generation?

How do I edit the customer label field?

Why am I getting the error “Support ID does not match product” when I try to register my Software Subscription or Technical Support contract?

 Why am I getting the error “Certificate Key has a starting date which is older then 12 months” when I try to license my Software Subscription?

Why did I not receive a Username and Password for the download website and/or SecureKnowledge when I registered my Software Subscription/Technical Support contract?

I have lost /forgotten my Username and Password for the download website and/or SecureKnowledge .  How can I obtain it?

I purchased my Software Subscription/Technical Support Contract for a specific number of days so that all my contracts end at the same time.  How can I know if the Support ID I have is for the right number of months?

What is the difference between Central and Local Licensing for version Next Generation?

How do I make changes to the contacts that are entitled to call in for technical support?

 

Licensing Questions

 

General Licensing

Why am I getting the error “Failed to install License” or “Invalid License” error when trying to install the license?

Why am I getting the error “No license for User Interface?”

Why am I getting the error “No license for FWM” when I try to open the GUI client?

Why am I getting the error “Failed to add License – No such feature”

What do I do if my license doesn’t work?

 

Management

Do Management stations support management of clusters?

 

VPN Clients

I already have a license, now I want to use SecureRemote. How can I get that added to my license?

Why am I getting the error “Site not licensed to perform the requested action” when I try to use my VPN Client product?

 

SecureUpdate

How is SecureUpdate licensed?

 SecureUpdate is licensed for a specific numbers of machines.  What is the definition of machine?

What SecureUpdate capabilities are provided in the standard Enterprise Management Station?

 

High Availability

What do I get when I purchase Management High Availability

How do I license a High Availability Module for two VPN/FireWall-1 modules?

How do I license the HA Module under the Central and Local licensing schemes?

 

UserAuthority

How is User Authority licensed?  Are licenses needed for both UserAuthority Server and UserAuthority Users?

If I need only authenticated QOS, do I need both a UserAuthority Server (UAS) license and a UserAuthority User (UAU) license?

What are the differences between the UserAuthority included in VPN-1/FireWall-1 SecureServer and the standalone UserAuthority Server?

If I have 100 SecureClient users, and 100 SecureRemote users (I want them to use UserAuthority), will I have to buy 500 UA User Licenses?

If I want to utilize only Management and DNS for licensing is that possible?

If I want redundancy for all services what do I need to license?

 

Meta IP

 Q: In Version 4.1, I only had 1 Certificate Key for my Meta IP product, in Next Generation I have Multiple Keys.  Why?

Q:  How can I generate a license for each of the 5 or 10 DNS/DHCP Servers that I have purchased?

Q: How can I upgrade my Meta IP product to Next Generation? The User Center will not allow me to do it online.

 

SmallOffice

Can I install Module plus Management on a single machine?

 

 

NG Licensing Installation Guide

 

 

 

 

 

 

Creating your User Center Account

 

 

Q: How do I create a new account in the User Center?

A:  Each company should have one account in the User Center.  Please verify with your coworkers that they have not already created an account before you create a new one.  If they have already created an account, see “How do I get added to my companies current User Center accountbelow.

 

If you need to create a new account for your company, click on the “Create New Account” link on the main User Center page.

 

Step1: Creating a New Account

Enter the e-mail address to be used for this account. This will be the primary contact e-mail address for this account.  Enter a Password for the account (between 6-12 characters).

 

Step2: Modify User Profile for the Account

Complete the contact person profile, and click the “Update” button

 

Step3: Modify Company Profile

Complete your company information and click the “Update” button

 

Step4: Confirm your E-mail Address

Once the above steps have been completed, Check Point sends a case-sensitive confirmation code to the e-mail address provided in Step1. Check your e-mail and obtain the confirmation code sent.  Enter the confirmation code in the box available.

If you do not have access to your e-mail address, resume the registration later after you have obtained the confirmation code by logging into the account you have just created.

 

Q: How do I get my Confirmation Code to create my new account?

A: Please check your incoming mail, the confirmation code was sent to the e-mail address you provided.  In case you fail to receive the code, log back into your account, update the “My Profile” information and the “My Company” information.  Your confirmation code will be resent.  If you have further problems, contact us for help at user_center@checkpoint.com or call US +1 817 606 6600 (Option 7).

 

Q: Is the User Center secured? How?

A: The User Center is secured.  A user is required to provide a Username and Password to access their account, which is the authentication mechanism required for enabling e-business (this method is used in day-to-day secured business practices such as on-line personal banking).  Additionally, an external company has tested the User Center’s security and strength against hacking, DOS attacks, and other types of attacks. The results of the reviews were very high.  The company has tried to attack the site using common and uncommon methods without success.

 

Q: How do I get added to my company’s current User Center account?

A: The administrator for your company must add you to your companies User Center account. The administrator should add you to their account by accessing the “My Company” tab and the “Manage Users” section by adding your e-mail address and modifying the access rights they would like you to have in the boxes provided. If you are a User Center user, you will be added instantly. If you don’t, the administrator can create you as a new user. A password will be sent to you via e-mail.

 

When you are added to the account, the administrator will give you specific rights, see  How can user’s access rights be updated” below.

 

Q: How can all of the administrators for our company see our products in the User Center?

A: You should import your products into the account of the primary administrator. The administrator should add everyone else who needs access to the products to the account. The administrator should click on the "My Company" tab, and the "Manage Users" section. They would enter the e-mail address of each person who needs access to the account.

When you are added to the account, the administrator will also give you specific rights, see  How can user’s access rights be updated” below.

 

 

Q:  How can I, as a partner/reseller/consultant, view my customers account in the User Center?

A:  The customer will need to create an account for their company and add you as a contact to their account in the “Manage Users” section of the “My Company” tab.  When logging into your account, you will see a list of all the companies you are associated with and will be able to choose which account you would like to log into.

 

When you are added to the account, the administrator will also give you specific rights, 

see  How can user’s access rights be updated” below.

 

Q: How can user’s access rights be updated?

 

A: Adding a user to the account must be done by an administrator.

 

     1.  Choose the "My Company" tab at the top of the screen

2.  Choose the "Manage Users" option

3.     Choose the "Add Users" option

4.     Enter the e-mail address listed above that was provided by the user

5.     Give the user ONE of the following accesses:

·        Company Admin - allows a user to add/remove other users for this company

·        Create Licenses - allows a user to license products

·        View Access - allows a user view only access (they cannot generate licenses)

·        Note: you may also select whether the user represents a

              "Support Contact" person and/or a "Reseller"

6.     Click the "Update Users >>" button

 

Return to top

 


Using your User Center account

 

Q: How do I edit my personal or company information after I have created an account?

A: You can edit your information by clicking on the "My Company" or "My Profile" tabs and update the information.

 

To change your e-mail address you should first create a new User Center user.

    

     1.  Choose the "My Company" tab at the top of the screen

2.  Choose the "Manage Users" option

3.     Choose the "Add Users" option

4.     Enter the your new e-mail address

5.     Chose the access right “Company Admin” - allows a user to add/remove other users for this company

6. For the old e-mail address, mark the “Remove Relationship” box

     7. Click the "Update Users >>" button

 

Delete the old e-mail address by checking the box to remove user and updating the records. A new password will be sent to you via e-mail. Next time you log into the User Center, you would use the new e-mail address and password.

 

Q: How do I delete an account that was created by mistake?

A:  The account must be deleted manually.  Please e-mail User_center@checkpoint.com with your request.  Include the company ID of the account to be deleted.  The company ID is in the “My Company” tab of the User Center account.  For the account to be deleted, there must not be any products in the account and the request must come from an account administrator.  If you need to move products to another account, see “How do I move products from one User Center account to another”.

 

Q: How do I recover my password if I have misplaced it?

A: At the login page press the "Forgot Your Password" button. Enter your e-mail address. A temporary password will be sent to you.  When you log into your account, you can reset the password in the “My Profile” tab.

 

Please note: This login information is User Center specific and different then the login used to acquire Service Packs or access SecureKnowledge.  If you have not created an account in the User Center, see Creating your User Center Account.

 

 

Q: How do I add my products to my User Center account?

A: All Products previously registered in the License Center will need to be imported into the User Center.  There are two ways to add your products.

 

  1. Choose the “My Products” tab
  2. Click on the “Add Products” button on the right hand side of the screen
  3. Enter the Certificate key(s) and/or Support ID(s) into the left hand-side column or enter the order key into the column on the right hand-side column

 

The next screen will be a confirmation page indicating if products were added or not added.  If they were not added, please see “Why do I receive the error "Not in Product lists" when I try to add a product to my User Center account?” below.

 

If you receive a “System Exception” error when adding the Order Key, please visit SecureTrak located on the Services page in your User Center Account to open a service request.  If this is not possible, e-mail or call advocacy at: advocate@ts.checkpoint.com or US +1 817/606-6600 option 6.  Please include your Order key and User Center account number.

 

Q: How to move products from one Check Point User Center account to another Check Point User Center account?

A: The administrator must have the user name (e-mail address) and the company ID number (found on the top of the My Company page) of the destination account.

 

Complete the following steps:

1. Administrator must log into the User Center account that contains the certificate key, software subscription ID, and/or technical support ID
2. Select the box(es) to the left of the product(s) to be moved
3. Select the action "Move Products to Another Company" from the pull-down menu, click on "GO"
4. Verify the displayed product(s) to be moved. Enter the company ID number and the user name (e-mail account). Then click on "Continue"
5. Verify the displayed information is correct, click on "Approve>>". The next screen will confirm the transfer is complete, and an e-mail will be sent to the user name (e-mail address) of the destination account. 

 

Q: How do I find the Certificate Key, Software Subscription, Technical Support and/or Order Keys that need to be added to my account?

A: The certificate key is a string of 12 alphanumeric characters. The Software Subscription and Technical Support contracts are typically 7 alphanumeric characters. The Order Key is 12-digit alphanumeric number separated by a dash.

For an evaluation license, your certificate key can be found inside the mini pack you received. For a permanent product, obtain the information from your reseller.

If this is an existing installation on version 4.1 or later, the Certificate Key can be found in the installed license. To view your license string with version 4.1, go to the command line and type “fw printlic”.  To view your license string with version NG, go to the command line and type “cplic print”. The certificate key is located at the end of the string denoted with “CK-xxxxxxxxxxxx”.

 

Q: Why do I receive the error “Not in Product lists” when I try to add a product to my User Center account?

A: Verify that you are typing in the correct Certificate Key.

 

Also, make sure this certificate key has not already been added to the account of someone else within your company.  A Certificate Key can only be imported into one User Center account.

 

If this product has been recently ordered, it might be attached to an order key.  Your reseller will provide you with this order key. 

 

If you continue to receive the same error, send an e-mail to user_center@checkpoint.com with your User Center account ID and the Certificate Key(s) or Order Key you are trying to import.

 

Q: Why am I getting an error message telling me that my product is attached to another account when I try to add it to my product list?

A: A Check Point product can only be imported into one User Center account. If the key you are trying to add is in another account, you will receive this message.

When this message appears, you will be given the option to contact the current "possessor" of the product.  An e-mail will be sent to the possessor with your e-mail address.

 

This situation is sometimes the result of the reseller or another coworker within your company adding the product to their User Center account.  If after contacting these sources you are unable to locate your products, please visit SecureTrak located on the Services page in your User Center Account to open a service request.  If this is not possible, call or e-mail advocacy at: advocate@ts.checkpoint.com or US +1 817/606-6600 option 6.

 

Q: Our administrator has left the company and I need access to the products.  What do I do?

A: To prevent this, there should be more than one person from the company listed as an administrator in the company.

 

If your administrator has left and you need access to the products your company has purchased, draft a letter containing the following details:

 

1. Must be on company letterhead

2. Indicate the previous employee(s) name, e-mail address, and phone number

3. Designate the employee whom the products should be moved to and include

    their name, e-mail address and phone number

4. The letter must be signed by a director level or above (this person

    cannot be the same person designated to have the products moved to)

 

Fax the letter to 817-606-6572, attention "Move Request".

 

*Before sending fax, please visit SecureTrak located on the Services page in your User Center Account to open a service request, then document fax with the Service Request number.  If this is not possible, call or e-mail advocacy at: advocate@ts.checkpoint.com or US +1 817/606-6600 option 6.

 

 

Q: Our Company purchased another company that has Check Point products.  How do we import those into our account?

A: A letter drafted on company letterhead outlining the situation of the sale

of the company and the final purchase should be faxed to 817-606-6572,

attention "Move Request - Company Purchase". Note, the letter must be signed

by a Director level or above at the company.

 

Q: How do I enter a Service Request with Check Point?

A:

1.                         Log into your User Center online at https://usercenter.checkpoint.com/ or through Check Point’s main screen at http://www.checkpoint.com/ and click on "My Account" at the top right of the screen.

2.                         Select the User Center account that has your support contract

3.                         Click on the "Services" tab in the selection bar located toward the top of the screen

4.                         Click on the "SecureTrak" link; note that another screen will appear

5.                         Click on the "My Service Requests" link in the bar situated towards the bottom of the screen

6.                         Click on the "New" button in the "My Service Requests" bar

7.                         Select the "Company" from the "Select" button in the middle of the new Service Request form (this is especially pertinent if you are associated with multiple accounts in the User Center)

8.                         Fill out the entry points (note a Service Request number is pre populated on the screen during the time you are filling out the entry points).  Choose the appropriate “Group Name” to handle your request.  Use the “Which Group Name Should I Choose?” link to assist in your choice.  All fields must be filled prior to saving your Service Request and proceeding any further.

9.                         Click on the "Save" button

10.                     To add files, additional notes, click on the applicable Service Request # hyperlink that is now located in the "My Service Requests" section

11.                     Note that at any point in time in all the steps here, if you "take a long time without making keystroke entries" then the User Center may "time out."   Click on the “Save” button often, to avoid having to log back in to the User Center and return to the Service

 

Attachments - There is an "Attachments" section.  To attach files, click the "Add" button, use the "Select" button" and then "Browse" button to obtain and select the correct file name.  Click on the "Add" button again; enter "Comments" (if applicable).  Click on the "Save" button

 

Maximum file size is 5 MB for files to be attached to the Service Request via the User Center path to SecureTrak entry.  If you have larger file(s) to send, you need to go to the Check Point ftp site (ftp.ts.checkpoint.com) and upload the file and then let Check Point know it is there.  The login username is "Anonymous" and the password is your email address.  The file will need to be placed into the "Upload" directory.  Once you have clicked to the ftp.ts.checkpoint.com site, select "File" from the top menu bar and then select the "Login As" and click.  Put a "check mark" in the "Login Anonymously" dialog box, enter your complete email address, and then click the "Login" button.  Now, double click on the "Upload" folder, since this is where the upload file(s) will be placed.  The naming convention for the file(s) is to include the Service Request number and specify what kind of file it is.  Once you have copied the file(s) from your computer to the Check Point FTP "Upload" folder, then go back to the Service Request and add an update to the Service Request documenting the file name, contents, and location so that Check Point can then know it's there.

 

 

Updates to a Service Request - There is an "Updates" section.  Use this section to respond to questions or otherwise provide more information or to ask Check Point questions.  Click on the "Add" button and enter a "Title" to the input, create the "Description" entry (this is where you type the information text).  Click on the "Save" button

 

 

High Severity Situations - Note that if the situation is a Severity 1 or Severity 2 (as defined in the SLA) then you need to call Check Point Technical Services at US +1 (817) 606-660 and talk to Check Point right away on the telephone.

 

Return to top

 

Registering your Products

 

Q: Why does the permanent product I purchased list as an Evaluation version in my User Center Account?

A: When purchasing a new product from a Check Point reseller, the documentation is sent from the reseller to the distributor and then to Check Point.  If your product is still listed as an evaluation copy, the documentation may have not reached Check Point for data entry.  This process usually takes 12 to 15 days to complete.

 

When you purchase your product you are given two 30-day evaluations of the product for you to implement immediately.  If your product is still listed as an evaluation after 20 days, contact your reseller for the second 30-day evaluation license and have them follow up with the distributor to insure there are no issues with the documentation at the distributor level.

 

Q: Why does the software subscription/ technical support contracts show up as generic in my User Center Account?

A: When you purchase a contract from a Check Point reseller, the documentation is sent from the reseller to the distributor and then to Check Point.  If your contract is showing generic, the documentation may have not reached Check Point for data entry.  This process usually takes 12 to 15 days to complete.

 

If your contracts are still listed as generic after 20 days, contact your reseller and have them follow up with the distributor to insure there are no issues with the documentation at the distributor level.

 

Q: How to license a certificate key, software subscription contract, or a technical support contract?

A: To license a certificate key, software subscription contract, or a technical support contract in the User Center choose the “MY PRODUCTS” tab and complete the following steps:


1. Select the box(es) to the left of the product(s)

2. Select the “License/Move IP” option from the pull-down menu select "GO"

3. Continue through the licensing screens to confirmation 

 

If you are unable to attach the software subscription or technical support contract to the product, review the following:

 

 

For assistance with licensing please visit: https://usercenter.checkpoint.com/home2/SummaryLicensing.htm

 

Q: If I change the IP address and/or platform of my firewall, do I need a new license?

A: Yes. Your license is tied to an IP address. If you change the IP address of your firewall, you must re-license your certificate key.  Complete the following steps to obtain a new license string:

 

1. Log into your Check Point User Center Account

2. Go to the "My products" tab

3. Select the box(es) to the left of the product(s) that you wish to re-license

4. Choose from the pull-down menu "License/Move IP"

5.  Proceed through the registration screens to confirmation

Q: What is the process for upgrading my product to a newer version?

A: A valid software subscription contract must be registered to your certificate key to obtain the upgrade. To purchase software subscription, please contact your reseller. If you have a valid software subscription contract follow the below upgrade steps:

 

UPGRADE to Check Point 2000 (version 4.1, SP2): Request a new 4.1 license by registering your existing certificate key.

 

UPGRADE to Check Point Next Generation: An upgrade to Next Generation is processed in your User Center account. When viewing the "My Products" page, you will be able to determine which products are valid for the Next Generation upgrade by the “U” flags to the left of your screen.

If your product is valid for the Next Generation upgrade, upgrade the key by selecting the product and choosing "Upgrade/Upgrade Packs" action from the pull down menu at the top of the page.  This may have to be manually handled, but system will indicate the next required step.

For questions on the upgrade process, refer to https://usercenter.checkpoint.com/ucdocs/NgUpgrade.html.

 

Q: How to Generate a 4.1 License When Product is at Next Generation?

A: Follow the steps below to generate a version 4.1 license in the User Center:

1.     Select the products to be licensed by checking the box to the left of the product(s)

2.     Choose the action “License/Move IP” from the pull down menu, press “GO”

3.     Choose “Local Licensing”

4.     On the next screen choose “4.1” from the pull down menu

5.     Continue through the licensing screens to confirmation

 

The product description SKU on the “My Products” page will remain NG.

 

*Note: If product was purchased at an NG, or the product does not give you the option to downgrade to 4.1, visit SecureTrak located on the Services page in your User Center Account to open a service request.  If this is not possible, e-mail or call advocacy at: advocate@ts.checkpoint.com or US +1 817/606-6600 option 6.

 

Q: How do I edit the custom label field?

A: Follow the steps below to change the custom label or OS and HW Platform:

1.     Select the products to be licensed, by checking the box to the left of the product(s)

2.     Choose the “Change Custom Label or OS and HW Platform” action from the pull down menu, press “GO”

3.     Follow the steps to confirmation

 

Q: Why am I getting the error "Support ID does not match product" when I try to register my Software Subscription or Technical Support contract?

A: Please verify that you and your reseller purchased a software subscription contract and technical support contract which matches your specific product SKU.  If they do not match (CPVP-VIG-50-3DES-V41 will not attach to a SS-CPFW-FIG-250), you need to contact your reseller to obtain the correct software subscription contract and technical support contract.

 

*Otherwise, please visit SecureTrak located on the Services page in your User Center Account to open a service request.  If this is not possible, e-mail or call advocacy at: advocate@ts.checkpoint.com or US +1 817/606-6600 option 6.

 

 

 

Q: Why am I getting the error “Certificate Key has a starting date which is older then 12 months” when I try to license my Software Subscription?
A: Check Point requires that a certificate key have continuous software subscription to be eligible for all service packs/upgrades released for the product.  If software subscription is being licensed within 12 months of the expiration date of the last software subscription contract, it will have a start date automatically back dated to cover that time frame. If software subscription is being licensed outside of the 12 months, contact your reseller to review the Legacy support contract option.

 

Q: Why did I not receive a Username and Password for the download website and/or SecureKnowledge when I registered my Software Subscription/Technical Support contract?

A: To obtain a username and password for the Check Point website, you will need to fill
out the form found at www.checkpoint.com/techsupport/access_request.html.

 

Note that federal encryption laws restrict the e-mail addresses we can issue username and passwords to.  Please make sure that the e-mail address you list when filling out the above form is both person and company specific.  Also, the company name in the e-mail address must match the company name listed for the certificate key in the User Center.

 

If you have any questions or concerns on this restriction, visit SecureTrak located on the Services page in your User Center Account to open a service request.  If this is not possible, e-mail or call advocacy at: advocate@ts.checkpoint.com or US +1 817/606-6600 option 6.

 

Q: I have lost/forgotten my Username and Password for the download site/SecureKnowledge.  How can I obtain it?

A: Please visit https://support.checkpoint.com/PasswordChange/

 

1. Fill out the form. The form will request the e-mail address and a

temporary clue.

2. After the form is submitted, you will receive an e-mail immediately

sending a link to change the password (enter the temporary clue here).

 

If you do not yet have a username, a screen will appear providing a link to

the Access Request form.

 

 

 

 

 

 

 

Q: I purchased my Software Subscription/Technical Support Contract for a specific number of days so that all my contracts end at the same time.  How can I know if the Support ID I have is for the right number of months?

A: Import the software subscription contract and/or technical support contract

id number in the User Center account.

 

1. Chose the "My products" tab

2. Press the "Add products" button on the right side of the screen

3. Enter the id and press "Continue"

4. Return to the "My products" tab

5. Click on the blue link with the product SKU for the contract

6. Review the details in the "Predefined Dates"

 

If the contract is valid for 1 year, there will not be any dates listed.

 

Q: What is the difference between Central and Local Licensing for version Next Generation?

A: Central licensing allows all licenses (for Modules and a Management Server) to be licensed with the IP address of the Management Station. This simplifies the licensing process and provides greater flexibility in license management. In the Local license scheme, a license is licensed with the IP address of the machine to which the license will be applied. For example, a license for a VPN/FireWall Module in the Central scheme is generated to the IP address of the Management Station, and in the Local scheme it is generated to the IP address of the Module.  Centralized and Local Licensing can be used together.

 

Q: How do I make changes to the contacts that are entitled to call in for technical support?

A: In the User Center, contacts for technical support are designated in the "My Company" tab under Manage Users. Add all valid contacts for the account in this area by checking the box "Support Contact" and press “Update Users.”

Refer to your SLA for the number of valid contacts you may specify and any technical certification prerequisites. Gold, Gold Plus, and Platinum support contracts are limited to 5 authorized contacts. 

**All support contracts must also have a current registered software subscription in order to call in for support.

 

Return to top

 

 

General Licensing

 

Q: Why am I getting the error “Failed to install License” or “ Invalid License” when trying to install the license?

 

A: Here are some tips that may assist you in installing your license.

 

1.     Please make sure that the license is generated to the correct IP address or Host ID.  If the machine you are attempting to install the license on has a different address, the license will not install.

2.     The license string you are installing must match the version of the software you have installed.  The version of the license will be listed on the confirmation of registration you received from the license center.  You can obtain the version of software installed by typing ‘fw ver’ at the command prompt of your firewall bin directory.

3.     The license string is case sensitive.  Please make sure that you are inputting the license exactly as shown.  If you are installing a 4.1 license, please make sure you include the expiration date.  If you have a permanent license, the expiration date is ‘never’.  Otherwise, check your license confirmation to determine when your license will expire.  The expiration date must be in the format of ddMmmyyyy.  For example, April 28,2000 must be in the form of 28Apr2000.

4.     If you have been unsuccessful in installing the license using the configuration tool, please install the license using the command prompt.

 

Q: Why am I getting the error “No license for User Interface”?

A: If your FireWall-1 product is installed on NT, this message might come up if you did not stop and start the firewall service after installing your license.  To resolve this, please stop and start the FireWall-1 Service.  If your product is on a UNIX platform, the error usually means that you are missing the “MOTIF” product.  Please contact your reseller to confirm that “MOTIF” was ordered for your product.  You should receive a different certificate key and go through the licensing process.  This error also occurs when there is no management product available to your Firewall-1 product.  Please contact your reseller directly to confirm that you have ordered the appropriate product(s).

 

Q: Why am I getting the error “No license for FWM” when I try to open the GUI client?
A: This error usually relates to not having the "motif" feature in your license string. This feature is required when you are trying to use the Motif GUI on a UNIX box.
If this error is occurring with NT, please check that you have a control feature available in your license(s).

 

Q:  Why am I getting the error “Failed to add License – No Such Feature”.

A:  You will get this error if you are installing a license for a different version of the product then your media.  If you are trying to install the version 4.1 licenses, please verify that you have version 4.1 media installed. To verify this, you can run ‘fw ver’ on your firewall.

 

Q: What do I do if my license doesn’t work?
A:
Please visit SecureTrak located on the Services page in your User Center Account to open a service request.  If this is not possible, e-mail or call advocacy at: advocate@ts.checkpoint.com or US +1 817/606-6600 option 6.

 

 

If you require technical assistance and have a direct and valid support agreement with Check Point and you are an authorized contact, you can contact Check Point Support center at support@ts.checkpoint.com.  Otherwise, please contact your reseller directly as your first line of support. In the unlikely event that your reseller is unable to solve your issue, they will contact Check Point on your behalf to resolve the problem in a timely manner.

 

Return to top

 

Management Stations

 

Q: Do Management stations support management of clusters?

A: Yes, three management stations exist: I. SMC-250: A management console for a single cluster of modules each protecting up to 250 hosts; II. SMC-U: A management console for a single cluster of modules each protecting an unlimited number of hosts; III. EMC-U: A management console for an unlimited number of clusters, each module in a cluster protects an unlimited number of hosts.

 

VPN Clients

 

Q: I already have a license, now I want to use SecuRemote.  How can I get that added to my license?

A: SecuRemote is a separate product that will have a separate certificate key.  Please contact your reseller to obtain a certificate key for this product.

 

Q: Why am I getting the error “Site not licensed to perform the requested action” when I try to use my VPN Client product?

A:  If you are trying to use SecuRemote, make sure you have a SecuRemote license installed.  The SecuRemote license is separate from your Firewall-1/VPN-1 license. You must obtain the certificate key for this product from your reseller.

If you are trying to use Secure Client, please upgrade to at least 4.1 SP3 or contact your reseller to get a separate SecuRemote license to add to your Secure Client license.

 

Return to top

 

SecureUpdate

Q: How is SecureUpdate licensed?

A: SecureUpdate allows for the remote application of licenses, and software updates. There is no charge for the license management capability, but each machine that will receive software updates needs to be included in the license count.

Q:  SecureUpdate is licensed for a specified numbers of machines. What is the definition of machine?

A: A machine is a device that is running one or more Check Point or OPSEC products to which you want to apply software.

Q: What SecureUpdate capabilities are provided in the standard Enterprise Management Station

A:  The Enterprise Management Station provides SecureUpdate license management for an unlimited number of machines.

 

Return to top

 

High Availability

Q:  What do I get when I purchase Management High Availability

A:  Management High Availability provides the ability to replicate and synchronize information across multiple Management Servers. Additional Management Servers must be purchase separately.

Q:  How do I license a High Availability Module for two VPN/FireWall Modules?

A:  When implementing an HA configuration for two VPN/FireWall Modules, obtain an HA Module license (Part Number CPCP-HA-DUAL). Two strings will be generated. Apply one to each VPN/FireWall Module.

Note: This applies to both Check Point NG and to Check Point 2000.

Q: How do I license the HA Module under the Central and Local licensing schemes?

A:  Under the Central scheme the licenses should be generated to the IP address of the Management Server. Under the Local scheme, the IP addresses should be the unique addresses of the VPN/FireWall Modules in the cluster.

 

Return to top

 

UserAuthority

Q:  How is UserAuthority licensed? Are licenses needed for both UserAuthority Server and UserAuthority User?

A:  For a UserAuthority configuration, both the Server and User licenses are required. The UserAuthority Server can be installed on a gateway of any size. The User licenses are counted per Management Station and represent the total number of users (internal and external) using UserAuthority services.

Q:  If I need only authenticated QoS, do I need both a UserAuthority Server (UAS) license and a UserAuthority User (UAU) license?

A:  For authenticated bandwidth for SecuRemote/SecureClient users, a UAS license is not needed. When FloodGate-1 and UAS are installed on the same machine, a UAS license is included in the FloodGate-1 license.

 

Note that the UAS license included in the FloodGate-1 license does not provide authenticated bandwidth for LAN users, SSO functionality of the web plug-in, or other UA features for third-party applications. To use these features, both UAS and UAU licenses are required

Q:  What are the differences between the UserAuthority included in VPN-1/FireWall-1 SecureServer and the standalone UserAuthority Server?

A:  The capabilities are the same. However, the underlying products are not. Since SecureServer protects a single server, Check Point included the UserAuthority Server capabilities at no additional cost. An appropriate number of UserAuthority User Licenses are still required.

Note: This applies to both Check Point NG and to Check Point 2000.

Q:  If I have 100 SecureClient users, and 100 SecuRemote users (I want them to use UserAuthority), will I have to buy a 500 UA User License?

A:  You will have to purchase one UserAuthority Server and two UserAuthority User Licenses for each 100 users. UserAuthority User Licenses are additive.

 

Q:  If I want to utilize only Management and DNS for licensing is that possible?

A:  Yes, you can license DNS only if desired without using DHCP or a client license.  You need to license a minimum of one Meta IP Manager Service (CPMI-MSM-1) and one Meta IP DNS server (CPMI-DNS-1).  Multiple DNS modules can be managed with one Manager service for large deployments.

 

Q:  If I want redundancy for all services what do I need to license?

A:  You need to license additional modules for each service.  For example, implementing DHCP fail-over requires the licensing of one Meta IP DHCP Server (CPMI-DHCP-1) and the additional Meta IP DHCP Server (CPMI-DHCP-1) for failover (Note: as Meta IP NG DHCP uses many-to-one failover one additional DHCP module for fail-over can suffice for multiple primary Meta IP NG DHCP modules).

 

Return to top

 

Meta IP

 

Q: In Version 4.1, I only had 1 Certificate Key for my Meta IP product, in Next Generation I have Multiple Keys.  Why?

 

A: The licensing module for Check Point Meta IP went through some major

modifications in the transition from the 4.1 to Next Generation.  Depending

on the product you had in 4.1, you will have a combination of the below

products:

 

          This was previously known as the Admin Server

 

          Can be purchased in groups of 1,5,10, or Unlimited (U) Servers

 

          Can be purchased in groups of 1,5,10, or Unlimited (U) Servers

 

          Purchased in groups of 500, 1000, 5000, 10000, and 50000 clients

 

 

          Purchased in groups of 100, 500, 1000, 5000, 10000

 

Note: If you had a product in 4.1 that was for a different number of clients then we offer in Next Generation, we will break up the number of clients on multiple certificate keys to give you a total equal to or greater then the number of clients you had in 4.1.

 

Q:  How can I generate a license for each of the 5 or 10 DNS/DHCP Servers that I have purchased?

A: You will need an IP Specific license for each of the Servers.  You should license the certificate key to the first server and then go through the licensing process again for each server up to the limit of you license.

 

Q: How can I upgrade my Meta IP product to Next Generation? The User Center will not allow me to do it online.

A: Because of the changes in the product between 4.1 and Next Generation, Meta IP products must be upgraded manually. Please request an upgrade at http://license.checkpoint.com/requestForm.html. 

Note: You must have current Software Subscription to be valid for an upgrade to Next Generation.

Return to top

 

SmallOffice

Q:  Can I install Module plus Management on a single machine?

A:  Yes, for machines running Linux, Windows and Solaris with appropriate hardware (RAM and disk).

Note:   This applies to both Check Point NG and to Check Point 2000

 

Return to top

 

Check Point NG Licensing Guide

 

Product Description

SKU prefix

Is licensing additive1?

Number of strings generated by User Center

License applied to…

Additional licenses required for gateway or management HA2 implementations

SmartCenters

SmartCenter Pro - Centralized management of policies which can be deployed to an unlimited number of Check Point clustered gateways, each protecting an unlimited number of nodes

CPMP-SCP

No

1

Management station

Management HA:

·          SmartCenterPro licenses as required

SmartCenter - Centralized management of policies that can be deployed to an unlimited number of Check Point clustered gateways, each protecting an unlimited number of nodes.

CPMP-SCT

No

1

Management station

Management HA:

·          SmartCenters as required

·          1 MGM-HA

SmartCenter - Centralized management of policies that are deployed to a single Check Point gateway.

CPMP-SMC

No

1

Management station

Management HA:

·          SmartCenters as required

·          1 MGM-HA

Enterprise Bundles of Gateways plus SmartCenter or SmartCenter Pro

FireWall-1 Enterprise Center - FireWall-1 unlimited gateway and SmartCenter for an unlimited number or security enforcement points.

CPVP-EPC

No

2

Distributed – Applied to the respective machines

Standalone – Applied to the management

Management HA:

·          SmartCenters as required

·          1 MGM-HA

Gateway HA:

·          1 CXL-HA-1

·          FM-U as required

VPN-1 Enterprise Center - VPN-1 Pro unlimited gateway and SmartCenter for an unlimited number or security enforcement points.

CPVP-VEE

No

2

Distributed – Applied to the respective machines

Standalone – Applied to the management

Management HA:

·          1 MGM-HA

·          SCT-U as required

For Gateway HA

·          1 CXL-HA-1

·          VFM-U as required

SVN Smart Enterprise Bundle - VPN-1 Pro and FloodGate-1 unlimited gateway and SmartCenter Pro for an unlimited number or security enforcement points.

CPVP-VFE

No

2

Distributed – Applied to the respective machines

Standalone – Applied to the management

Management HA:

·          1 SCP-U (SmartCenter Pro)

For Gateway HA:

·          1 CXL-HA-1

·          VFF-U as required

Security Gateways

FireWall-1 Module – FireWall-1 security enforcement point that protects a specified number of IP addresses.

CPFW-FM

No

1

The enforcement point

In NG:

For Gateway HA:

·          1 CXL-HA

·          FM as required

In V41:
For Gateway HA:

·          1 HA-DUAL

·          FM as required

·          HA-ADDL for every additional gateway after the second one.

VPN-1 Pro – VPN-1 Pro enforcement point that protects a specified number of IP addresses.

CPFW-VFM

No

1

The enforcement point

In NG:

For Gateway HA:

·          1 CXL-HA

·          VFM as required

In V41:
For Gateway HA:

·          1 HA-DUAL

·          VFM as required

·          HA-ADDL for every additional gateway after the second one.

VPN-1 & FloodGate-1 Module - VPN-1 Pro & FloodGate-1 Modules that protect a specified number of IP addresses.

CPMP-VFF

No

1

The enforcement point

In NG:

For Gateway HA:

·          ·          1 CXL-HA

·          ·          VFF as required

In V41:
For Gateway HA:

·          ·          1 HA-DUAL

·          ·          VFF as required

·          ·          HA-ADDL for every additional gateway after the second one.

Bundles of Security Gateway plus SmartCenter

FireWall-1 Internet Gateway - FireWall-1 gateway and SmartCenter for a single security enforcement point that protects a specified number of IP addresses

CPFW-FIG

No

1

A single machine that serves both as the management station and as the enforcement point.

An HA configuration is not available for this product

VPN-1 Internet Gateway - VPN-1 Pro and SmartCenter for a single security enforcement point that protects a specified number of IP addresses

CPVP-VIG

No

1

A single machine that serves both as the management station and as the enforcement point.

An HA configuration is not available for this product

VPN-1 & FloodGate-1 Internet Gateway - VPN-1 Pro & FloodGate-1 Modules plus SmartCenter for a single security enforcement point that protects a specified number of IP addresses

CPMP-VFG

No

1

A single machine that serves both as the management station and as the enforcement point.

An HA configuration is not available for this product

Virtual Systems Extension (VSX)

VSX - Enforces VPN-1 and FireWall-1 security policies for up to 100 discrete customers on a single machine.

CPVP-VSX

Yes

1

The enforcement point.

For Gateway HA:

·          1 CXL-HA

·          VSX as required

High Availability Security Gateways

FireWall-1 Module – High Availability Bundle - Two FireWall-1 gateways for High Availability implementations

 

CPFW-HFM

No

2

Two gateways

For Gateway HA:

·          1 CXL-HA

VPN-1 Module – High Availability Bundle - Two VPN-1 gateways for High Availability implementations

CPVP-HVM

No

2

Two gateways

For Gateway HA:

·          1 CXL-HA

VPN-1 & FloodGate-1 Module – High Availability Bundle - Two VPN-1 Pro and FloodGate-1 gateways for High Availability implementations

CPMP-HVG

No

2

Two gateways

For Gateway HA:

·          1 CXL-HA

SmallOffice Gateways

VPN-1/FireWall-1 SmallOffice - FireWall-1 or VPN-1 SmallOffice Module that protects a specified number of IP addresses.

CPVP-VSO, CPFW-FSO

No

1, when a SmartCenter manages the enforcement point from remote or when managed by the Web User Interface.
2, when the enforcement point is managed locally by a SmartCenter console

When managed by a SmartCenter from the Enterprise or locally by a Web User Interface, only the module license should be applied to its machine. When managed locally, each license should be applied to its respective machine

·          Not available

VPN-1 Net

VPN-1 Net - Provides a complete Virtual Private Network gateway solution, and contains all NG-based VPN features. Licensed by number of concurrent VPN tunnels.

CPVP-VNT

Yes

1

Encrypting machine that can be either locally managed or managed from a SmartCenter management for a stand-alone box

·          Not available

Client Licenses

VPN-1 SecureClient - Network security protection, consisting of access controls and security configuration verification, for client desktops.

CPVP-VSC

Yes

1

The management station.

In NG:

Management HA:

·          VSC license on every management station in the cluster

For Gateway HA:

·          No additional license is required.

In V41:

For Management HA:

·          Not available

For Gateway HA:

A VSC license is required on every gateway in the cluster

VPN-1 SecuRemote - Transparently encrypts and authenticates critical data from mobile clients to protect against eavesdropping and malicious data tampering. Note: Product is provided at no charge but must be ordered and licensed to obtain functionality.

CPVP-VSR

No

1

Applied to where the topology server resides

In NG:

For Management HA:

·          1 VSR on the management station

Gateway HA:

·          Additional VSR on the gateway or on the management

In V41:

For Management HA:

·          Not available

Gateway HA:

·          Additional VSR on the gateway or on the management

 

VPN-1 Client for Macintosh - Provides secure VPN access for Macintosh
users

CPVP-VMC

No

1

Applied to where the topology server resides

For Management HA:

·          1 VMC on the management station

Gateway HA:

·          1 VSR on the gateway

UserAuthority User License - Provides Authentication and Authorization (WebAccess) services for LAN and REMOTE users using SR/SC, Windows Clients, Browsers (incl. SSL).

CPUA-UAU

Yes

1

Applied to the Management Station

NG FP0/FP1:

For Management HA:

·          1 UAS on the management station

·          1 UAU on the management station

NG FP2 and higher:

For Management HA:

·          1 UAU

Management Tools, Reporting and Monitoring Modules and Gateway Add-ons

Motif GUI - GUI for Solaris for Management Consoles or gateway bundles

CPMP-MOTIF

No

1

The Management Station

For Management HA:

·          1 MOTIF

Real-time Monitoring - Provides traffic and performance monitoring per VPN-1/FireWall-1 gateway.

CPIN-RTM

Yes

1

To the enforcement point.

For Gateway HA:

·          1 RTM

SecureUpdate - Provides centralized software management and licensing for Check Point products. The installation of service packs and addition of new products can be performed from a central GUI

CPMP-SUP (note: included in SmartCenter Pro and SVN Enterprise bundle)

Yes

1

To the Management Station

For Management HA:

·          1 SUP

Visual Policy Editor – Provides visualization and editing of security policies and objects through an automatically generated topological view of the network

CPMP-VPE (note: included in SmartCenter Pro and SVN Enterprise bundle)

No

1

To the Management Station

For Management HA:

·          1 VPE

Customer Log Module - Enables real-time log accumulation, tracking and management

CPMP-CLM

No

1

To the Management Station

For Gateway HA:

·          1 CLM

Open Security Extension - OSE manages packet filters and access lists of third-party routers and security devices.

CPMP-OSE

Yes

1

To the Management Station

For Management HA:

·          1 OSE

Reporting Module - Consolidate and filter log entries from Check Point log files, generate textual and graphical reports, and distribute reports automatically to various targets such as email, web server, printer, etc

CPIN-RM

Yes

1

To the Management Station

For Management HA:

·          1 RM

Account Management Module - Storage and retrieval of VPN-1/FireWall-1 user attributes on LDAP server

CPFW-AM

Yes

1

To the Management Station

For Management HA:

·          1 AM

Meta IP Manager Service - Manages the purchased number of Meta IP DNS and DHCP services for a specified IP Address count

CPMI-MSM

No

1

To the Management Station

For Management HA:

·          1 MSM

·          DHCP and/or DNS server license

Meta IP DNS and DHCP – DNS and DHCP engines

CPMI-DNS, CPMI-DHCP

Yes

1

To the Management Station

For Management HA:

·          1 MSM

·          DHCP and/or DNS server license

Meta IP Client License – Client licenses for DHCP and DNS services

CPMI-IP

Yes

1

To the gateway

For Gateway HA:

·          1 CPMI-IP

ConnectControl Module - Enable increased quality of service via automatic application server load balancing

CPFW-CC

No

1

To the gateway

For Gateway HA:

·          1 CC

Multi CPU Support - Enables the use of VPN-1/FireWall-1 with multi processor systems

CPMP-MPU (note: included with every unlimited enforcement point)

No

1

To the gateway enforcement point

For Gateway HA:

·          1 MPU

ClusterXL (HA and Load Sharing) - High Availability software for VPN-1/FireWall-1. Enables load sharing and transparent fail over across a series of modules in a cluster

In NG: CPMP-CXL

In V41:
CPFW-HA

No

NG FP2 and higher: 1

NG FP1 and lower: 2

NG FP2 and higher:
To the management station

NG FP1 and lower:
to every module in a cluster

 

 

Management Station High Availability - Enables automatic synchronization of backup management stations ensuring constant availability

CPMP-MGM-HA

No

1

Applied to the primary Management Station

 

 

 

 

1.       Additive licensing is when separate licenses on the same machine supply the sum of nodes/users granted by the individual licenses.

2.       A configuration of Management HA is available only in version NG.

Return to top