Support Center > Search Results > SecureKnowledge Details
Endpoint Security Licensing for E80.x
Solution

In October 2016, Check Point released the new Next Generation Security Management licensing (NGSM). Also included in this release were Next Generation Endpoint products (NGEP), redesigned to simplify licensing and pricing. This article focuses on the legacy products that were released prior to the NGEP licensing.

For more information about the new Next Generation Endpoint Security packaging, please see Next Generation Endpoint Security (sk116598).

 

 

Endpoint Security Licensing Requirements

Check Point Endpoint Security E80 (and higher) requires the installation of three types of licenses, with one optional license:

  1. Endpoint Security Management
  2. Endpoint Security Software Container
  3. Endpoint Security Software Blade(s)
  4. Endpoint Security Policy Server (optional - for use only with E80.20 or higher)

 

Endpoint Security Management

Endpoint Security E80 introduces a new Single Agent Unified Management station for all Endpoint Security components.
The management server can be deployed on any management server which includes the Endpoint Policy Management software blade (including Smart-1 appliances).

Dedicated open server management solutions require the installation of one of the following Endpoint Security Management licenses:

Product Description
CPSM-NGSM5 / Smart-1 5 / Smart-1 205 / Smart-1 405 Endpoint Management package for up to 500 Endpoints
CPSM-P1003-E / CPSM-NGSM10 / Smart-1 210 / Smart-1 410 Endpoint Management package for up to 1,000 Endpoints
CPSM-P2503-E / CPSM-NGSM25 / Smart-1 25 / Smart-1 225 / Smart-1 525 Smart-1 Appliance package for 2,500 Endpoints and below
CPSM-NGSM50 / Smart-1 50 / Smart-1 3050 / Smart-1 5050 Smart-1 Appliance package for 5,000 Endpoints and below
CPSM-NGSM150 / Smart-1 150 / Smart-1 3150 / Smart-1 5150 Smart-1 Appliance package for unlimited Endpoints
CPSM-PU003-E Endpoint Management package for unlimited Endpoints

Each of these solutions includes the following Management Software Blades:

  • Endpoint Policy Management
  • User Directory
  • Logging & Status

 

Endpoint Security Container

The Check Point Software Blade Licensing model is based on the concept of a Software Container and Software Blades.
The Endpoint Security Container is the base license required in order to use any of the Endpoint Security Software Blades.
The purchase of all Endpoint Security Containers includes the Endpoint Firewall & Security Compliance Verification Software Blade, at no additional cost:

SKU Description
CPEP-C1-1TO100,
CPSB-EP-FW
Check Point Endpoint container and Firewall blade for 1 to 100 endpoints
CPEP-C1-101TO1000,
CPSB-EP-FW
Check Point Endpoint container and Firewall blade for 101 to 1000 endpoints
CPEP-C1-1001TO2500,
CPSB-EP-FW
Check Point Endpoint container and Firewall blade for 1001 to 2500 endpoints
CPEP-C1-2501TOU,
CPSB-EP-FW
Check Point Endpoint container and Firewall blade for 2501 endpoints and above

Note: CPSB-EP-FW will not appear as a separate line item in the User Center. The features of this license will be visible when the license for the Endpoint Container is installed on the server.

 

Additional Endpoint Security Software Blades

In addition to the Endpoint Firewall & Security Compliance Verification Software Blade, Check Point offers many additional Endpoint Security products.
Many of these products are available as perpetual licenses, or as annual licenses.

Check Point offers the following Endpoint Security products as perpetual licenses:

SKU Description
CPSB-EP-FDE-P Check Point Endpoint Full Disk Encryption blade
CPSB-EP-ME-P Check Point Endpoint Media Encryption blade
CPSB-EP-VPN-P Check Point Endpoint Remote Access (VPN) blade
CPSB-EP-TS-P
(see Notes section)
Check Point Total Endpoint Security package

Note: The VPN license has to be put on the Network Security Management and not on the Endpoint Security Management.

Check Point offers the following Endpoint Security products as annual licenses:

SKU Description
CPSB-EP-FDE Check Point Endpoint Full Disk Encryption blade for 1 year
CPSB-EP-ME Check Point Endpoint Media Encryption blade for 1 year
CPSB-EP-VPN Check Point Endpoint Remote Access (VPN) blade for 1 year
CPSB-EP-AM Check Point Endpoint Anti Malware and Program Control blade for 1 year
CPSB-EP-TS
(see Notes section)
Check Point Total Endpoint Security package for 1 year

 

Endpoint Security Policy Server (optional - for use with E80.20 or higher only)

Beginning with E80.20, Check Point has introduced Endpoint Policy Servers for remote locations.
These will provide a point of connection for remote offices without the need for an additional Endpoint Security Management Server.
The SKU for a single Endpoint Security Policy Server is CPSM-CONP-E.
A customer is able to use a number of Policy Servers based on the size of the Endpoint Security Management license in use:

Endpoint Security Management SKU Number of Policy Servers Allowed
CPSM-P1003-E 1
CPSM-P2503-E Up to Two (2)
CPSM-PU003-E Unlimited
Smart-1 5 / Smart-1 205 / Smart-1 210 / Smart-1 405 / Smart-1 410  Up to One (1)
Smart-1 25 / Smart-1 225 / Smart-1 525 Up to Two (2)
Smart-1 50 / Smart-1 3050 / Smart-1 5050 Up to Five (5)
Smart-1 150 / Smart-1 3150 / Smart-1 5150 Unlimited

Policy Server licenses are issued on a case by case basis. To inquire about, or to request a Policy Server license, contact Check Point Account Services:

  • by using Live Chat
  • by completing an Online Form
  • by phone: Americas: +1-972-444-6600 option 5, or International: +972-3-611-5100 option 5

For more information about Endpoint Security Policy Servers, refer to the Endpoint Security Release Notes (E80.20, E80.32, E80.40, E80.60, E80.61 on R77.20.01, E80.62 and R77.30.01, E80.64 and R77.30.02).

 

Notes

  1. The Endpoint Firewall & Security Compliance Verification Software Blade included with the Endpoint Security Container is available as a perpetual license only.

  2. The perpetual Total Endpoint Security package includes the perpetual Full Disk Encyption, Medit Encryption, VPN, and WebCheck Software Blades.

  3. The annual Total Endpoint Security package includes the annual Full Disk Encyption, Medit Encryption, VPN, Full Disk Encyption, Medit Encryption, VPN, and Anti-Malware Software Blades.

  4. For more information about how to license your Endpoint Security licenses, refer to sk61181 - Endpoint Security License and Contract Installation Instructions for E80 / E80.x.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment