Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Question about counting of IP address for license purpose

Hello,

currently I have an SG230, obvuioysly with unlimited ip address. Perhaps, for 1 year, I will have to move to UTM 9 software version (for economical reasons). I need some information about the counting of ip address used for licensing purpose.

I launched count_active_ip.plx --showcount command, currently I have 88 active ip addresses. These are my quesitons:

- I noticed the complete absence of Access Point ip addresses and VPN SSL clients. Do you confirm that is correct?

- I noticed that these 88 ip, that I got right now (5pm), are the same that I get this morning. How ofter this table is refreshed? It also seems that some IP shown, was related to yesterday's activity...

- Let's suppose that I buy 100 ip address license, what happens if are logged 101 active ip addresses? Is there any way to reset old connections?

Thanks

F.



This thread was automatically locked due to age.
  • Hello ,

    Thank you for reaching out to the community, IP addresses that exceed the scope of your license are listed separately. If the limit is exceeded you will receive an email notification at regular intervals.  IP addresses not seen for a period of seven days will automatically be removed from the license counter.

    And License usage for Active IP Addresses can be found under:  Management > Licensing > Active IP Addresses

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • Ok, thank you.

    The limit of ip is a blocking feature? Buying 100ip, the 101 can navigate anyway? is there any "grace limit"?

    Thanks

  • You have 10% tolerance upon exceeding then your IPs will be blocked !!

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • Thank you.

    What about the question related to VPN ip? Is it normal that they are excluded from counting? As you may imagine, having 88 ip in a week would be very near to 100 ip license...

  • The list is displayed in scope of licenses used and outside scope of license...

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • You need to follow this license guidelines: https://www.sophos.com/en-us/legal/license-entitlement-and-usage-policy

    You need to purchase a license matching:  UTM is licensed "per User". 

    A User: 3. 'User' means an employee, consultant or other individual who benefits from the Product.
    NOTE: The Product does not have to be physically installed on the User's computer environment in order to provide benefit to the User.

    This means, you need to get a UTM license, which covers all individuals benefiting from UTM protection. 

    __________________________________________________________________________________________________________________

  • Thank you 

    So two licensing models exists, for users and for ip address? This happens for both utg and xg software version? 

  • No it is just the one in legal. IP Addresses is just a helper to decide. But the legal page is the important part of licensing. 

    If you have 100 employees, you need a 100 UTM License. 

    SFOS (Sophos Firewall) license is better to size, as there you purchase only the Cores/RAM GB, not something dynamic like Users. 

    __________________________________________________________________________________________________________________

  • Ok, we are 20 employee but often we have 10-15 guests that joins our network. Currently in total we have 88 active ip addresses with count_active_ip.plx.

    How many licenses do you suggest to buy?

    How can UTM understand when too many users are using the network?

    Thanks 

  • Ciao,

    As you can tell from Tony's post and Vivek's before Tony's, it sounds like you could legally change your topology with an internal router and get a 75-IP or even a 50-IP license (tell me if I'm wrong, guys!).  Remember that you must count the "guests" by at least the maximum present at any one time.  Work-remotely users also count.

    Your Sophos Partner should be able to guide you.  Let us know if you're still having an issue.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA