Introduction

This guide describes the Check Point Metered License solution, which meters:

CPU core usage – for each CloudGuard Network Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources.
License Security Software Blade Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities. Package – as set by the license itself
Hourly/Monthly usage – for each CloudGuard Network Security Gateway

Background

Check Point's CloudGuard Network solution provides comprehensive protection for private and public clouds with the use of multi-layered security architecture. The solution protects against even the most sophisticated attacks to prevent effectively the lateral spread of threats within virtualized environments and private cloud datacenters. The Check Point Metered License solution introduces Pay-As-You-Go (PAYG) pricing models to charge by the actual usage.

To deploy Metered License Solution, do these steps:

Network Architecture

Prerequisites

These are the minimum required settings to use the CloudGuard Metered License solution.

Security Management Server Prerequisites

Prerequisite	R80.20	R80.30	R80.40	R81
Internet Connectivity	Must have an active Internet connection
Open Ports	TCP port 18209. For more information about Check Point software's dedicated ports, see sk52421).
Minimal Jumbo HF installed	Take 117	Take 71	TBA	TBA
*MMLP Hotfix Software package installed on top of the current software version to fix a wrong or undesired behavior, and to add a new behavior.	For more details, see sk173143.
** AutoUpdater minimal version	990180203
Solutions	Any Management or Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS.

*MMLP - Multi Metered License Pool A License Pool is a group of CloudGuard Central Licenses with the same blades and valid contracts. A Security Management Server or Multi-Domain Server can have multiple license pools. Each pool is defined by: - Pool Type - Total Quota - Available Quota - Certificate Keys - Subscribed Security Gateways.

** The minimal AutoUpdater version is verified automatically during the installation.

To update your Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server., see Configuring Security Management Server.

Security Gateway Prerequisites

Prerequisite	Additional Info
Internet Connectivity	Must have an active Internet connection.
Open Ports	TCP port 18208. For more information about Check Point software's dedicated ports, see sk52421).
Check Point version	R80.20 and higher.
Jumbo HF	For R80.20: Take 117.
Solutions	Any CloudGuard Security Gateways deployment on these platforms: AWS Amazon® Web Services. Public cloud platform that offers global compute, storage, database, application and other cloud services., Microsoft Azure Collection of integrated cloud services that developers and IT professionals use to build, deploy, and manage applications through a global network of data centers managed by Microsoft®., GCP Google® Cloud Platform is a suite of products and services that includes hosting, cloud computing, database services and more., OpenStack An open source cloud-computing infrastructure for service providers and enterprises. It includes modules for administration, storage, networking and Virtual Machine deployment and control., VMware ESXi, Hyper-V, and KVM.