SKU prefix

Is licensing additive *?

Number of strings generated by User Center

License should be applied to…

VPN-1 & FloodGate-1 Internet Gateway

CPMP-VFG

No

1

Applied to a single machine that serves as a Management Station and as an enforcement point

VPN-1 & FloodGate-1 Enterprise VPN Center

CPMP-VFE

No

2

Applied to either one or two machines

VPN-1 & FloodGate-1 Module

CPMP-VFF

No

1

Applied to a single machine that serves as the enforcement point

VPN-1/FireWall-1 SecureServer

CPVP-VSS, CPFW-FSS

No

1

Applied to a single machine that serves as the enforcement point

VPN-1 SecureClient

CPVP-VSC

Yes

2

The user string (CPVP-VSC-XX) is applied to the Management, the Policy Server string (CPVP-VPS-1) is applied to the Module

SecureClient Policy Servers

CPVP-VPS

No

1

Applied to the Module

VPN-1 SecuRemote

CPVP-VSR

No

1

Applied to where the topology server resides

VPN-1 Client for Macintosh

CPVP-VMC

No

1

Applied to where the topology server resides

Enterprise Management Station

CPMP-ESC

No

1

Applied to the Management Station

Motif GUI

CPMP-MOTIF

No

1

Applied to the Management Station

Real-Time Monitoring

CPIN-RTM

Yes

1

One string (CPIN-RTM-1-Module-NG) is applied to the enforcement point.

SecureUpdate

CPMP-SUP

Yes

1

Applied to the Management Station

Visual Policy Editor

CPMP-VPE

No

1

Applied to the Management Station

Customer Log Module

CPMP-CLM

No

1

Applied to the Management Station

Open Security Extension

CPMP-OSE

Yes

1

Applied to the Management Station

Reporting Module

CPIN-RM

Yes

1

Applied to the Management Station

Account Management Module

CPFW-AM

Yes

1

Applied to the Management Station

Meta IP Manager Service

CPMI-MSM

No

1

Applied to the Management Station

Meta IP DNS and DHCP

CPMI-DNS, CPMI-DHCP

Yes

1

Applied to the Management Station

Meta IP Client License

CPMI-IP

Yes

1

Applied to the Module

VPN-1 Internet Gateway

CPVP-VIG

No

1

Applied to a single machine that serves as a Management Station and as an enforcement point

VPN-1 Enterprise Center

CPVP-VEE

No

2

Applied to either one or two machines

VPN-1 Module

CPVP-VFM

No

1

Applied to a single machine that serves as the enforcement point

UserAuthority Server

CPUA-UAG

No

1

Applied to the Module station

UserAuthority User License

CPUA-UAS

Yes

1

Applied to the Management Station

FireWall-1 Internet Gateway

CPFW-FIG

No

1

Applied to a single machine that serves as a Management Station and as an enforcement point

FireWall-1 Enterprise Center

CPFW-EPC

No

2

Applied to either one or two machines

FireWall-1 Module

CPFW-FM

No

1

Applied to a single machine that serves as the enforcement point

ConnectControl Module

CPFW-CC

No

1

Applied to a single machine that serves as the enforcement point

Multi CPU Support

CPMP-MPU

No

1

Applied to a single machine that serves as the enforcement point

ClusterXL (HA and Load Sharing)

CPMP-CXL

Yes

1

Applied to the management module

Management Station High Availability

CPMP-MGM-HA

No

1

Applied to the primary Management Station

VPN-1 & FloodGate-1 Module – High Availability Bundle

CPMP-HVG

No

2

Applied to two Modules

VPN-1 Module – High Availability Bundle

CPVP-HVM

No

2

Applied to two Modules

FireWall-1 Module – High Availability Bundle

CPFW-HFM

No

2

Applied to two Modules

Extranet Manager

CPVP-EMI

Yes

1

Applied to the Management Station

VPN-1/FireWall-1 SmallOffice

CPVP-VSO, CPFW-FSO

No

1, when an Enterprise Management Console manages the enforcement point. 2, when the enforcement point is managed locally

For Nokia IP51 and IP55 all the licenses are installed on the Management Server.

For other appliances and Operating Systems, Module and Management licenses can be either installed on the same machine or on two separate ones.