About Licenses

For Security Manager to retrieve configurations from your network and security devices, and for access to add-on modules such as Policy Planner or Policy Optimizer, a valid license must be stored in the database. For an MSSP, only one license is required regardless of the number of domains in SIP.

Your product license also specifies how many and which types of devices can be added. Once you have added the total number of devices for that device type, Security Manager or the selected bro will not monitor any additional devices of that type. You can, however, change which devices you want to monitor within each device type. For a list of device types in your SIP license, in the Administration module, click Access > License.

All of the devices that you want to monitor, excluding clusters, must be licensed. (Check Point Cluster Members must be licensed.)

You received your first Security Manager product license file when you purchased SIP or requested your evaluation.

If you have added new devices on your network that you want to monitor with Security Manager, you must upload a new product license. Except for the devices mentioned earlier, Security Manager will not monitor devices that are not part of the SIP product license. Please contact the Sales Team at sales@firemon.com to request a new SIP product license.

Example of license use

Assume that your Security Manager license allows you to monitor the following device types: one Security Device Manager (SDM) and three firewalls. You add a Juniper NSM, which is an "SDM" device type. At this point, the total number of SDMs allowed by your license has been met. Then you add three Juniper NetScreen devices, which are "firewall" device types. At this point, the total number of firewalls allowed by your license has been met. If you create a fourth NetScreen firewall in Security Manager, it will not be monitored until you unlicense one of the three firewalls, or until you generate and upload a new license to accommodate the fourth firewall.

Permission Requirements

A user will need to be a member of a user group with the following minimum permissions granted:

  • Administration: Server Licenses

  • Module: Administration