Check Point VPN-1/FireWall-1

Please be aware that the license is bundled and therefore dependent on the Appliance itself! If an Appliance with bundled Service Blades is bought, the continuous subscription of the integrated services (e.g. IPS, AV) is mandatory. 
Further on, please be aware that licensing in R70 is per Gateway (system) and no longer per Site. So a cluster consisting of two members (NGX R65: 1 Site) requires a management license for two Gateways!

Since the acquisition of the security appliance business of Nokia, there are now six appliance families available: 

- UTM-1 Appliances: Firewall and Management
- IP Appliances: Firewall 
- Power-1 Appliance: Firewall
- IAS Appliances: Firewall
- VSX-1 Appliances: Firewall
- Smart-1 Management Appliances: Management

This page refers to Software Blades of Check Point R70 described here. The knowledge of the official abbreviations is assumed. 

UTM-1 Appliances always include a Management Server and a Gateway / Firewall. 
Based on the target customers, a UTM-1 Appliance also offers Content Control (Web, Anti Virus, etc.). There are some bundles available, also including a different number of Software Blades. If necessary, further Software Blades or Service Blades can be licensed. 
When the UTM-1 Appliances are going to be centrally managed, please select this option in the first installation steps. When needed, the integrated Management Server can be disabled. There are no licenses for Firewall only, in UTM-1 the Management on the Appliance is always licensed. 
Currently all appliances are delivered with two images: NGX R65 and R70.
Each appliance is for an unlimited number of users. 
All information about throughput is based on Check Point information. 

IP Appliances follow up Nokia appliances. They include the license for one Gateway / Firewall. The number of users is unlimited. A Management is never included. 
These appliances are bundled with Software Blades. If necessary, further Software Blades or Service Blades can be licensed. 
Currently all IP Appliances are delivered with two images: NGX R65 and R70.
All information about throughput is based on Check Point information. 

Power-1 Appliances include the license for one Gateway / Firewall. The number of users is unlimited. A Management is never included. 
Based on the target customers, throughput and performance are the key features of these Appliances. There are some bundles available, also including a different number of Software Blades. If necessary, further Software Blades or Service Blades can be licensed. 
Currently the appliances 5075 and 9075 are delivered with two images: NGX R65 and R70. All others are deliverd with R70 only. 
All information about throughput is based on Check Point information. 

IAS Appliances mean "Integrated Appliance Solutions". They include the license for one Gateway / Firewall. The number of users is unlimited. A Management is not included. There are some bundles available, also including a different number of Software Blades for R70. If necessary, further Software Blades or Service Blades can be licensed. 
IAS Appliances can be used with both supported versions: NGX R65 and R70. 
All information about throughput is based on Check Point information. 

VSX-1 Appliances include the license for a number of Virtual Systems. The number of users is unlimited. A Management is never included. 
Currently all VSX-1 Appliances are delivered with NGX R65. 
All information about throughput is based on Check Point information. 

Smart-1 Appliances are for managing Firewalls. These appliances do not include a Firewall, but the possibility to manage a number of them. 
They are delivered in R70, so managing Gateways in NGX R65 and R70 is possible. Depending on the Appliance, some Software Blades are bundled. Ordering further Software Blades is possible.