Managing Email Security Licenses

Subscription Licenses

To purchase a license, you must create a Check Point User Center account. For instructions, see sk22716.

Once you create a User Center account, contact your Check Point sales representative to purchase a license.

If you have already licensed the product, you can view your current contract (license) information from the Check Point Portal > Global Settings > Services & Contracts page.

Pay-As-You-Go (PAYG) Licenses

If you are an MSP and wish to use the Check Point Portal for MSSPs to assign a Pay-As-You-Go (PAYG) license to a customer. See Pay-As-You-Go Contracts.

Protected and Licensed Users

Under Policy, you can create policy rules for each protected SaaS application. You can apply a rule to all users or a specific group of users that you define.

  • Email Security protects only active user accounts with valid Microsoft / Google licenses and at least one associated mailbox.

    Note:

    For hybrid Microsoft environments, this includes active on-premises mailboxes, even if they are not assigned a cloud mailbox license.

  • For every user account with a Microsoft/Google/other license to any protected SaaS application, Email Security consumes a license from the quota.

  • If Microsoft and Google SaaS applications are protected from the same Email Security account (tenant) in the Check Point Portal, and if the same user has a Google account and a Microsoft account associated with different email addresses, then Email Security consumes two licenses for that user.

    Note:

    By default, the users assigned with a Microsoft 365 F1 license are not protected and do not consume a license. To enable protection for these users, contact Check Point Support.

  • To restrict the list of protected users, see Limiting License Consumption and Security Inspection to a Specific Group.

  • Specific Microsoft entities:

    • Email Security protects group mailboxes, unlicensed shared mailboxes, and other aliases. However, it does not count them for licensing purposes. Do not purchase licenses for these mailboxes.

      Note:

      • To protect licensed shared mailboxes (shared mailboxes that Microsoft bills for), Email Security consumes a license.

      • Email Security supports these groups for group filtering:

        • Assigned Membership:

          • Microsoft 365 Group

          • Mail-enabled Security Group

          • Distribution List

        • Dynamic Membership:

          • Microsoft 365 Group

    • Email Security does not protect Microsoft Public folders, Mail contacts, and Mail users.

    • At the moment, users with licenses only for Microsoft Teams will be protected but will not show up as consuming licenses. However, you must purchase licenses for these users.

  • Specific Google entities:

    • Email Security does not protect email addresses of Google Groups.

      When a malicious email is sent to the email address of a Google Group, Email Security blocks the email from reaching the group members' mailboxes, as they are protected. However, when you open the group's web page, the email is accessible.

  • Email Security syncs users every 24 hours with Microsoft and Google accounts. So, deleting or adding a user might take up to 24 hours to affect the license count.