Technical data
Using VSX with Multi-Domain Security Management
Check Point VSX Administration Guide NGX R67 | 73
Limitations of VSX/Domain Management Server Bundle Licenses
Bundle licenses only cover Virtual Systems. If you wish to mix physical devices (Security Gateways,
etc.) and Virtual Systems on one Domain Management Server, you must also add the appropriate
regular Domain Management Server licenses.
Virtual Systems installed on a mixed Domain Management Server do not use any license "slots" from a
regular license. Similarly, physical devices do not use Virtual System license "slots".
Bundle licenses cannot be installed on a system using Multi-Domain Security Management Enterprise
Edition Domain Management Servers.
High Availability Licenses
Multi-Domain Security Management supports management high availability. By installing a High Availability
VSX-Domain Management Server bundle license on a second Multi-Domain Server machine, the specified
number of Virtual Systems can be hosted by secondary Domain Management Servers. The capabilities and
limitations of this license are similar to those of the regular VSX/Domain Management Server bundle.
Upgrading Licenses
The license upgrade procedure can be performed if you have purchased any of the Enterprise Software
Subscription services.
License upgrade fails for products and accounts for which you do not have software subscriptions. To
manage your accounts, licenses, and Enterprise Support Programs coverage (under Support Programs), log
in to: http://usercenter.checkpoint.com. License upgrade is performed by means of a tool that automatically
upgrades both locally and centrally managed licenses.
Using the tool, you can upgrade all licenses in the entire managed system. License upgrade can also be
performed manually, per license, in the User Center. For instructions, refer to the Administration Guide in
the User Center at: https://usercenter.checkpoint.com/pub/usercenter/faq_us.html.
For the latest information and downloads regarding License upgrades, refer to:
http://www.checkpoint.com/downloads/quicklinks/utilities/ngx/license_upgrade.html
The Trial Period
When installing a Check Point product for the first time, users receive a 15 day trial period, during which the
product is fully functional. Once the trial period expires, you must purchase and install the appropriate
permanent product licenses. During the trial period, you can define up to 200 Domain Management Servers
and up to five Virtual Systems per Domain Management Server.
To install a VSX bundle license before the trial license expires, you must first disable the trial license. To do
so, execute the following command: cpstop_util CPSTOP_SepTiCEmias 1.
License Violations
In the event of a license violation, the following may occur:
The system shows an error message
Depending on the type of license violation, you may not be able to connect to the Multi-Domain Server
using the SmartDomain Manager
Alerts appear in the SmartDomain Manager. (An indication regarding the nature of the license violation
also appears on the SmartDomain Manager status bar)
Audit entries are generated in SmartView Tracker stating the nature of the violation
If an Multi-Domain Server is in a license violation state, you cannot define new Domain Management
Servers, VSX gateways, clusters, or virtual devices