Managing Licenses

Pay-As-You-Go (PAYG) Licenses

If you are an MSP and wish to use the Check Point Portal for MSSPs to assign a Pay-As-You-Go (PAYG) license to a customer. See Pay-As-You-Go Contracts.

Protected and Licensed Users

Under Policy, you can create policy rules for each protected SaaS application. You can apply a rule to all users or a specific group of users that you define.

• Avanan protects only active user accounts with valid Microsoft / Google licenses and at least one associated mailbox.

  Note:

  For hybrid Microsoft environments, this includes active on-premises mailboxes, even if they are not assigned a cloud mailbox license.

• For every user account with a Microsoft/Google/other license to any protected SaaS application, Avanan consumes a license from the quota.

• If Microsoft and Google SaaS applications are protected from the same Avanan account (tenant) in the Check Point Portal, and if the same user has a Google account and a Microsoft account associated with different email addresses, then Avanan consumes two licenses for that user.

  Note:

  By default, the users assigned with a Microsoft 365 F1 license are not protected and do not consume a license. To enable protection for these users, contact Avanan Support.

• To restrict the list of protected users, see Limiting license consumption and security inspection to a specific group.

• Specific Microsoft entities:

  • Avanan protects group mailboxes, unlicensed shared mailboxes, and other aliases. However, it does not count them for licensing purpose. Do not purchase licenses for these mailboxes.

    Note:

    • To protect licensed shared mailboxes (shared mailboxes that Microsoft bills for), Avanan consumes a license.

    • Avanan supports these groups for group filtering:

      • Assigned Membership:

        • Microsoft 365 Group

        • Mail-enabled Security Group

        • Distribution List

      • Dynamic Membership:

        • Microsoft 365 Group

  • Avanan does not protect Microsoft Public folders, Mail contacts and Mail users.

  • At the moment, users with licenses only for Microsoft Teams will be protected but will not show up as consuming licenses. However, you must purchase licenses for these users.

• Specific Google entities:

  • Avanan does not protect email addresses of Google Groups.

    When a malicious email is sent to the email address of a Google Group, Avanan blocks the email from reaching the group members' mailboxes, as they are protected. However, when you open the group's web page, the email is accessible.

• Avanan sync users every 24 hours with Microsoft and Google accounts. So, deleting or adding a user might take up to 24 hours to affect the license count.