Check Point licensing models. A few words about myself. Agenda. or oops, they did it again

Transcription

1 Check Point licensing models or oops, they did it again A few words about myself Dimension Data Switzerland, Senior Security Consultant CCMA 0019 Before that: 8 years with Check Point Israel Last 2 years Check Point PS valeri.loukine@eu.didata.com for any questions and requests Agenda What is licensing for CP Historical overview Pre-NG NG NGX R70 licensing GW software licensing MGMT software licensing Appliances Summary 1

2 Check Point Licensing One of the ways to sell the products Way to keep customers in line and to track them Personal opinion Check Point is simple except for when it comes to licenses History overview We have seen a number of situations when the licensing model was changed 2

3 Major drivers for change New marketing schemes Field issues New features License breach FW HFA06 License encryption changed to a stronger one Reason CP licenses were hacked Reason of hacking (from unnamed source) CP was not able to provide evaluation licenses By that time CP was selling license per feature. Clear and logical schemes NG new licensing scheme New products, new architecture cpshared is now responsible for license check New SKUs (Stock Keeping Unit), continuously per feature Still relatively clear and workable 3

4 R60 new NGX licensing Major driver: to cut off customers without Software Subscription ALL NG licenses to change Suffering on the field Automatic license upgrade tool R60 license upgrade process Online, connection to User Center account, Offline Collecting licenses Implementing online upgrade on another machine Putting upgraded licenses on target machine R60 license upgrade, cont. Alternative manual relicensing all items on User Center In a few cases NGX license does not correspond to it NG analog 4

5 Software blades R70 licensing How to deal with them Software blades R70 Technologically some new features, but mostly the same set How about licensing and especially the prices? Gateways Software only 5

6 Software gateway licenses High End Medium size Entry level High End GW with all features R65 CPUTM-VUP-U8 VPN-1 UTM Power Multi-core Gateways for 8 cores for Unlimited Users Price $26,000 Features: FW, IPSec VPN, IPS, AVI and anti-spyware, SXL High end GW R70, option one Bundle SG805 $ Buying missing parts AVI and anti-spyware Total of $

7 High end GW R70, option two Container SG801 $ Buying missing parts AVI and anti-spyware $1 500 IPSec VPN $1 500 IPS $3 000 SXL $1 500 Total of $ bad option High End GW R65 vs R70 $ vs $ R70 is about 10% cheaper on the High End Medium range GW R65 CPPWR-VPG-U2 VPN-1 Power Multi-core Gateways for 2 cores for Unlimited Users Price $13,500 FW, VPN, IPS 7

8 Medium range GW R70 Bundle SG203 $8 000 only! Medium range GW R65 vs R70 $ vs $8 000 Software blades are $5 000 cheaper in this case! Entry level UTM-1 GW R65 CPUTM-VUG-25 VPN-1 UTM Gateway for 25 Users Price $2 000 Features: FW, VPN, SmartDefense Service, IPS, web application security, and AVI on an all-in-one platform. 8

9 Entry level R70 GW Bundle SG103 - $4 000 Buying missing parts: Web Security AVI Sum of $7 000 Entry level GW R65 vs R70 $2 000 vs $ $5 000 difference, 2.5 time more expensive??? Are you kidding us?! What is wrong in the calculation??? Entry level looking for a miscalculation R65 25 users R70 An ideal security solution for the small office 1 core system, limited to 50 users and recommended up to 8 ports Let s recalculate 9

10 Entry level GW R65 CPUTM-VUG-50 VPN-1 UTM Gateway for 50 Users Price $3 000 FW, VPN, IPS, web application security, and AVI. Entry level GW r 70 Bundle: SG106 Price $5 000 R70 is still $2 000 more expensive!!! Gateway software licensing review results Medium and High Performance licenses are in general less expensive for R70 Low end licenses can be much more expensive for R70! 10

11 Management Servers Software only Cases to review Entry level management SmartCenter Power-1 for unlimited number of GWs Provider-1 Enterprise largest bundle Entry Level SmartCenter Server Minimal featuring 11

12 Entry level SmartCenter R65 Product: CPUTM-SC-5 Check Point SmartCenter UTM for 5 Sites Price $10,000 Features: SmartDashboard, SmartView Tracker, AVI management. Entry level SmartCenter R70 bundle Bundle SM1003 Price $9 000 Important 10, not 5 GWs to manage Entry level SmartCenter R65 vs R70 10% less for the newest version, 5 more GWs for free. 12

13 Power-1 SmartCenter server Unlimited number of gateways SmartCenter Power-1 R65 Product: CPPWR-SC-U Check Point SmartCenter Power for Unlimited Sites Price $22,000 SmartDashboard, SmartView Tracker, SmartDirectory, SmartMap, SmartUpdate, SpartPortal, Management HA SmartCenter Power-1 R70 Closest match is: SMU007 Price $ Features: Network Policy Management, Endpoint Policy Management, Logging & Status, Monitoring, IPS Event Analysis, Provisioning and User Directory IPS analysis, EPS and Provisioning are added hard to compare. 13

14 SmartCenter power-1 R70 second case Let s add feature by feature Container SMU000 - $ Network Policy Management - $4 000 Logging & Status - $4 000 Monitoring - $4 000 User Directory - $4 000 Total of - $ Ooooops Power-1 SMC case R65 vs. R70 $ vs. at least $ Around 20% more expensive Provider-1 Enterprise bundle How about it? 14

15 Provider-1 R65 Product CPMP-PRE-5 Provider-1 Enterprise Edition for 5 CMAs Price $ Provider-1 R70 Bundle SMV508 Price $ Provider-1 Enterprise for 5 CMAs Provider-1 Enterprise No difference between R65 and R70 Same for 3 or 5 sites Thanks you so much, Check Point! 15

16 Security appliances What about the prices? Case definition R65 pricelist: R-65 appliance UTM-1070 Total security for 1 year Price $ including one year subscription 16

17 R-70 More then one option For the same featuring $16 800, but No MGMT functionality anymore!!! Middle Range R65 UTM $ with 1 year subscription Features: Middle range R70 17

18 Middle Range R65 vs R70 $ full featuring vs $ for 6 blades with no MGMT featuring. High End R65 High End R Gbps throughput, less blades/features 18

19 High End R Same throughput, less features, +$2 500 for subscription Check Point appliances R65 vs. R70 Less features (in some cases) with the same price when move from R65 to R70 Summary New licensing makes our life more exiting! R70 is not more expensive in some cases Low end can be much more expensive, so be careful 19

20 How to deal with licenses Attack your local Check Point offices with your questions and issues regarding licenses. It is their job to support you!!! Double check Build of Materials for your projects Ask someone to audit it even if you are 100% sure Dimension Data, for example Thank you for your time! 20