SMP software updates can be downloaded from the Check Point Software Subscription Downloads Center. Access to software downloads requires your SMP software to be under a valid Check Point EBS (Enterprise Based Support) contract. For more information about EBS contact your Check Point reseller.
Yes. The SMP is the actual enforcement point for the web filtering and email scanning. SMP should be licensed according to the total sum of licenses of the gateways that are provided with each service. As a result, a new SMP license must be ordered and generated to support an additional gateway or change of a gateway license.
Yes. CVP/UFP portion of SMP license is subscription based and has to be renewed annually. Moreover, the license is based on a stackable model, so each UFP/CVP license ordered has a different expiration date.
This is an example of how SMP license may look like: Organization=My Organization Name=John Smith Version=4 Product.1=SMP,250,permanent Product.2=SMP-DVPN,250,permanent Product.3=SMP-CVP-5USR,20,subscription,01.07.2004 Product.4=SMP-CVP-5USR,5,subscription,01.10.2004 Product.5=SMP-CVP-5USR,10,subscription,01.12.2004 Product.6=SMP-UFP-5USR,5,subscription,01.08.2004 Product.7=SMP-UFP-5USR,10,subscription,01.09.2004 License=b93244-cccecf-1428
Explanation: here the SMP license reflects different orders made in different points in time. SMP counts the UFP/CVP license in groups of 5 users. The line Product.3=SMP-CVP-5USR,20,subscription,01.07.2004 means that CVP will be provided to a total of 100 users (20x5). 100 users can be represented as 1 gateway with unlimited license, 20 gateways with 5 users license, 10 gateways with 10 users license etc. This item will expire on 1.7.2004.
Yes. To provide Web Filtering and Email antivirus services to managed gateways, a third-party UFP and CVP software must be installed and integrated with the SofaWare SMP infrastructure. UFP is an OPSEC API that enables integration of third-party applications to categorize, and control access to, specific URL addresses. Each customer can select from a list of categories that they want blocked. CVP is an OPSEC API that enables integration of third-party content security applications, such as antivirus software, with Check Point security products. The UFP and CVP API's have been adopted by a wide variety of content security vendors.
The 3rd-party UFP software available to integrate with SMP is:
Superscout for Check Point Firewall-1 by Surfcontrol.
Websense Enterprise (Web Filter) for Check Point Firewall-1 by Websense. Supported with SMP 5.0 and subsequent versions only.
All software is bound to the third-party vendor license agreement. The 3rd-party vendor software is also responsible for the accuracy and relevance of the virus signature update database.
SofaWare CVP Server (SCS) - supported only with SMP 5.0 and subsequent versions. The SCS is a free software CVP tool based on CLAM open-source Antivirus. The software is provided on the installation media provided by Check Point when you purchase SMP.
All software is bound to the third-party vendor license agreement. The third-party vendor software is also responsible for the accuracy and relevance of the virus signature update database.
Check Point will send you the OPSEC software licenses once you start ordering CVP/UFP items from the pricelist. This license is free of any additional charge. There is no need to contact the vendors for any additional licenses.
Yes. The OPSEC software license is good for one year. It is the SMP administrators responsibility to follow up on the license expiration, and request Check Point for a license renewal. All software is bound to the 3rd-party vendor license agreement. The 3rd-party vendor software is also responsible for the accuracy and relevance of the virus signature update database.
Microsoft Active Directory is embedded in the Windows server product family. However, the SUN ONE Directory Server software must be purchase and licensed by SUN. See more information here.
You must purchase Email Antivirus (CVP) and Web Filtering UFP) licenses in accordance with the number and types of appliances subscribed to the Email Antivirus and Web Filtering service. For example, if gateway A has 10 nodes, gateway B has 25 nodes, and both gateways are subscribed to the Email Antivirus service, then you must purchase enough CVP/UFP licenses to provide the service to 35 nodes. CVP/UFP licenses are sold in 5-packs: one pack enables you to provide Email Antivirus and Web Filtering service to five nodes. Therefore, a Safe@Office 105 appliance (which can have up to five nodes) will require one pack, while a Safe@Office 225 appliance (which can have up to 25 nodes) will require five packs. When you purchase a license for Email Antivirus and Web Filtering, SofaWare sends you a new SMP license that includes the CVP/UFP license within it. You must replace the existing SMP license with the new license. The CVP portion of the SMP license is subscription-based and must be renewed annually. Note: An unlimited license gateway is counted as 100 nodes by SMP (or twenty "5-packs" units).* *Related to SMP 5 and before (In smp 6 and above unlimited license is counted as 50 nodes).
A new and updated license must be obtained after upgrading SMP version. To get the new license make sure that your SMP product is loaded to the Check Point UserCenter, and that it is under a valid EBS (Enterprise Based Support) contract. Contact your Check Point products reseller/distributor for more information about EBS and UserCenter registration.
Once you have your SMP under EBS, contact Check Point Support to open a Service request. Request a license for your upgraded SMP and mention your UserCenter account number. A new license will be sent to you within 24 hours.
To know if the spam was updated, you can look at the dates of the .cf files at $SMP_HOME/Perl/site/share/spamassassin and see if any of them gets updated. You can see the update time in $SCS_HOME/log/sa_update.log To know if the clamd was updated, go to C:\clamav-devel\bin directory and run the freshclam. It should say that the signature files are up-to-date.
