Support Center > Search Results > SecureKnowledge Details
Security Management Portal (SMP) FAQ
Solution

The article refers to SMP version 8 for Safe@ and Edge appliances.
 

Click Here to Show the Entire Article

 

  • What is included in the evaluation license?
    SMP evaluation license will let you manage up to 10 gateways for 90 days.


  • How to extend the trial period?
    Contact your Check Point sales administrator to get a new license for your SMP to extend the trial period


  • Do I need additional software to evaluate email scanning and Web Filtering services?
    Yes. To operate the email scanning and Web Filtering services you will need additional 3rd party software.


  • Why do I need to purchase software updates for my SMP?
    A support plan enables a service provider to get:
    • Technical support
    • Latest SMP software and updates
    • Latest firmware files to update managed Safe@Office gateways 


  • Do I still need to purchase a support plan for each gateway I manage?
    Yes. You need to purchase a support plan for each gateway that will get software updates from your SMP.


  • How to download the latest SMP software updates?
    SMP software updates can be downloaded from the Check Point Software Subscription Downloads Center. Access to software downloads requires your SMP software to be under a valid Check Point EBS (Enterprise Based Support) contract. For more information about EBS contact your Check Point reseller.


  • What is the software updates period?
    SMP software updates are provided for 1 year.


  • How to get my SMP license?
    The SMP license is provided as a part of the order confirmation.


  • What information do I need to provide in order to get my SMP license?
    To get the SMP license it is mandatory to provide the following information:
    • Organization name
    • SMP administrator name
    • Email address
    • Telephone number
    • Location 


  • What is included a basic SMP license?
    The basic SMP license allows a service provider to offer the following services to managed Safe@Office gateway:
    • Software updates
    • Dynamic DNS
    • Dynamic VPN services. 

    The SMP needs to be licensed separately for Email Antivirus and Web Filtering services.



  • Does the basic license ever expire?
    No. The basic license is permanent and does not need to be renewed.


  • How do I upgrade my SMP software license?
    To upgrade the SMP license you need to get a new license. The new upgraded licenses is provided as part of the upgrade order confirmation.


  • How do I get a quote for SMP support plan?
    Contact your Check Point sales engineer to get quote for SMP support plan.


  • Do I need to license the SMP to provide the UFP and CVP services?
    Yes. The SMP is the actual enforcement point for the web filtering and email scanning. SMP should be licensed according to the total sum of licenses of the gateways that are provided with each service. As a result, a new SMP license must be ordered and generated to support an additional gateway or change of a gateway license.


  • Does the CVP/UFP software license expire?
    Yes. CVP/UFP portion of SMP license is subscription based and has to be renewed annually. Moreover, the license is based on a stackable model, so each UFP/CVP license ordered has a different expiration date.


  • How does the SMP license look like?
    This is an example of how SMP license may look like:
             Organization=My Organization
             Name=John Smith
             Version=4
             Product.1=SMP,250,permanent
             Product.2=SMP-DVPN,250,permanent
             Product.3=SMP-CVP-5USR,20,subscription,01.07.2004
             Product.4=SMP-CVP-5USR,5,subscription,01.10.2004
             Product.5=SMP-CVP-5USR,10,subscription,01.12.2004
             Product.6=SMP-UFP-5USR,5,subscription,01.08.2004
             Product.7=SMP-UFP-5USR,10,subscription,01.09.2004
             License=b93244-cccecf-1428


    Explanation: here the SMP license reflects different orders made in different points in time. SMP counts the UFP/CVP license in groups of 5 users.
    The line Product.3=SMP-CVP-5USR,20,subscription,01.07.2004 means that CVP will be provided to a total of 100 users (20x5). 100 users can be represented as 1 gateway with unlimited license, 20 gateways with 5 users license, 10 gateways with 10 users license etc. This item will expire on 1.7.2004.


  • How do I know when SMP license items are expired?
    License and expiration information are displayed in the SMC under the System -> license menu.


  • How do I renew my CVP/UFP portion of the SMP license?
    Please contact your Check Point reseller for SMP license renewal and pricing information.


  • Do I need additional software to provide web filtering and email antivirus scanning?
    Yes. To provide Web Filtering and Email antivirus services to managed gateways, a third-party UFP and CVP software must be installed and integrated with the SofaWare SMP infrastructure.
    UFP is an OPSEC API that enables integration of third-party applications to categorize, and control access to, specific URL addresses. Each customer can select from a list of categories that they want blocked.
    CVP is an OPSEC API that enables integration of third-party content security applications, such as antivirus software, with Check Point security products. The UFP and CVP API's have been adopted by a wide variety of content security vendors.


  • What web filtering (UFP) applications are compatible with SMP?
    The 3rd-party UFP software available to integrate with SMP is:
    • Superscout for Check Point Firewall-1 by Surfcontrol. 
    • Websense Enterprise (Web Filter) for Check Point Firewall-1 by Websense.  Supported with SMP 5.0 and subsequent versions only.

    All software is bound to the third-party vendor license agreement. The 3rd-party vendor software is also responsible for the accuracy and relevance of the virus signature update database.



  • What email antivirus scanning (CVP) applications are compatible with SMP?
    The 3rd-party CVP software available to integrate with SMP is:
    • Interscan VirusWall for Check Point Firewall-1 by TrendMicro. 
    • eSafe Gateway for Check Point Firewall-1 by Aladdin.
    • eTrust Antivirus by CA.
    • SofaWare CVP Server (SCS) - supported only with SMP 5.0 and subsequent versions. The SCS is a free software CVP tool based on CLAM open-source Antivirus. The software is provided on the installation media provided by Check Point when you purchase SMP.

    All software is bound to the third-party vendor license agreement. The third-party vendor software is also responsible for the accuracy and relevance of the virus signature update database.



  • How do I get the CVP/UFP software licenses?
    Check Point will send you the OPSEC software licenses once you start ordering CVP/UFP items from the pricelist. This license is free of any additional charge. There is no need to contact the vendors for any additional licenses.


  • Does the CVP/UFP software license expire?
    Yes. The OPSEC software license is good for one year. It is the SMP administrator’s responsibility to follow up on the license expiration, and request Check Point for a license renewal. All software is bound to the 3rd-party vendor license agreement. The 3rd-party vendor software is also responsible for the accuracy and relevance of the virus signature update database.


  • What directory servers are supported by SMP software?
    SMP software supports iPlanet (SUN ONE Directory Server) and Microsoft Active Directory.


  • Do I need to purchase and license the directory servers?
    Microsoft Active Directory is embedded in the Windows server product family. However, the SUN ONE Directory Server software must be purchase and licensed by SUN. See more information here.


  • Can I use other CVP/UFP software than suggested by Check Point?
    No. Check Point will provide an extended list of additional OPSEC software vendors compatible for integration with SMP in the near future.


  • How do I license SMP to provide Web Filtering and Email Antivirus?
    You must purchase Email Antivirus (CVP) and Web Filtering UFP) licenses in accordance with the number and types of appliances subscribed to the Email Antivirus and Web Filtering service.
    For example, if gateway A has 10 nodes, gateway B has 25 nodes, and both gateways are subscribed to the Email Antivirus service, then you must purchase enough CVP/UFP licenses to provide the service to 35 nodes. CVP/UFP licenses are sold in 5-packs: one pack enables you to provide Email Antivirus and Web Filtering service to five nodes. Therefore, a Safe@Office 105 appliance (which can have up to five nodes) will require one pack, while a Safe@Office 225 appliance (which can have up to 25 nodes) will require five packs. When you purchase a license for Email Antivirus and Web Filtering, SofaWare sends you a new SMP license that includes the CVP/UFP license within it. You must replace the existing SMP license with the new license. The CVP portion of the SMP license is subscription-based and must be renewed annually. 

    Note
    : An unlimited license gateway is counted as 100 nodes by SMP (or twenty "5-packs" units).*
    *Related to SMP 5 and before (In smp 6 and above unlimited license is counted as 50 nodes).


  • Which appliances can be managed by SMP?
    The following appliances are supported by SMP:
    • Nokia IP30
    • Nokia IP40
    • SofaWare S-box
    • Check Point Safe@Office
    • Check Point UTM-1 Edge
    • NEC SecureBlade 


  • How to obtain my upgraded SMP license?
    A new and updated license must be obtained after upgrading SMP version. To get the new license make sure that your SMP product is loaded to the Check Point UserCenter, and that it is under a valid EBS (Enterprise Based Support) contract. Contact your Check Point products reseller/distributor for more information about EBS and UserCenter registration.

    Once you have your SMP under EBS, contact Check Point Support to open a Service request. Request a license for your upgraded SMP and mention your UserCenter account number. A new license will be sent to you within 24 hours.


  • How do I know if the SMP's clam Anti-Virus and spam assassin are updated.
    To know if the spam was updated, you can look at the dates of the .cf files at $SMP_HOME/Perl/site/share/spamassassin and see if any of them gets updated.
    You can see the update time in $SCS_HOME/log/sa_update.log
    To know if the clamd was updated, go to C:\clamav-devel\bin directory and run the freshclam. It should say that the signature files are up-to-date.


  • How to I recover the SMP password.
    Contact Check Point Support. You need to provide RDP access to the server and the administrator password of Windows.


  • How to reset the SMP administrator password (in case I forgot the password).
    No way to reset without recovering it first.


  • How does the cloud URL filtering work? On what port? (For HF3).
    You need to allow HTTP traffic to the UFP server to this address: cws.checkpoint.com


  • From where does SMP download or check the UFP database (For HF3)
    You need to allow HTTP traffic to the UFP server to this address: cws.checkpoint.com. In HF3, we use SmartFilter Update Server.
This solution is about products that are no longer supported and it will not be updated

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment