> Source: [sk116598](https://support.checkpoint.com/results/sk/sk116598) # sk116598 - Endpoint Security Products Licensing | Property | Value | |----------|-------| | Solution ID | sk116598 | | Date Created | 2017-03-29 | | Last Modified | 2026-08-17 | | Technical Level | General | | Products | Endpoint Security | | Versions | R82, R81.20, R81.10 (EOS), R81 (EOS) | | OS | Windows, Gaia | ## Solution In October 2016, Check Point released the new Next Generation Security Management licensing (NGSM). Also included in this release were Next Generation Endpoint products (NGEP), redesigned to simplify licensing and pricing. This article focuses on the Endpoint Security products currently available for purchase in the Check Point Product Catalog. For more information about the legacy Endpoint Security Software Blade licensing, please see [Endpoint Security Licensing for E80.x (sk61832)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk61832&partition=General&product=Licensing). ### Endpoint Security Licensing Requirements Endpoint Security requires the installation of two types of licenses, with one optional license: 1. Endpoint Security Management 2. Endpoint Security packages (includes Endpoint Container\*) 3. Endpoint Security Policy Server (optional - for use only with E80.20 or higher) **\* Endpoint containers no longer require a separate purchase. An equivalent number of Endpoint container seats are included in the new Endpoint Packages.** ### Endpoint Security Management Endpoint Security E80 introduced a new Single Agent Unified Management station for all Endpoint Security components which remains unchanged for Endpoint solutions. Management for Endpoint products can be deployed on any management server which includes Check Point Endpoint Management (EPM) license. **This includes Smart-1 appliances.** For information about the number of endpoints that can be managed by Endpoint Security on a Smart?1 Appliance, see [appliance capacity](#capacity). |----------------------------|------------------------------------------------------------------| | **Product** | **Description** | | CPSM-NGSM5 / Smart-1 205 | Endpoint Management license for up to 500 Endpoints | | CPSM-P1003-E / CPSM-NGSM10 | Endpoint Management license for up to 1000 Endpoints | | CPSM-P2503-E / CPSM-NGSM25 | Endpoint Management license for up to 2500 Endpoints | | CPSM-NGSM50 | Endpoint Management license for up to 5000 Endpoints | | CPSM-NGSM150 | Endpoint Management license for up to 15000 Endpoints. | | CPSM-PU003-E | Endpoint Management package for an unlimited number of Endpoints | **Notes:** Endpoint products that are managed in the Check Point Infinity Portal do not require a license for the management of the endpoints. The Endpoint Management license is built into Endpoint Management as a Service Server. The Endpoint Management license is needed for On Premises management of endpoints. #### Smart?1 Appliance capacity and Endpoint Security {#capacity} The number of endpoints that can be managed by Endpoint Security on a Smart?1 Appliance is derived from the number of gateway licenses available on the appliance. As a general rule, one gateway license can be used to manage up to 100 Endpoint Security seats. **Example** : A Smart?1 6000?XL Base appliance includes 75 gateway licenses. This allows Endpoint Security to be used for up to 7500 endpoints (75 gateways � 100) Actual capacity depends on the installed license (Base or Plus) and on any extended gateway licensing. For authoritative and up?to?date licensing limits, refer to the [Check Point Product Catalog](https://catalog.checkpoint.com/). ### New Endpoint Security Packages To simplify the pricing and licensing for Endpoint products and align with Check Point licensing, Endpoint Security Blades have been consolidated into new packages. Currently only Annual license packages are offered for new license purchases. #### Annual Packages Check Point offers annual packages for the following products for one through five years. The duration of the license is indicated by adding -1Y - 5Y for the SKUs below, for example CPEP-ACCESS-1Y for one year, CPEP-ACCESS-2Y for two years, CPEP-ACCESS-5Y for five years, etc. |------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | **SKU** | **Description** | | CPEP-ACCESS | Harmony Endpoint Access Control annual package includes endpoint Firewall and VPN Remote Access and Application Control for remotely connecting to corporate resources. | | CP-HAR-EP-DATA | Harmony Endpoint Data Protection annual package includes Harmony Disk and Media Encryption | | CP-HAR-EP-PREVENT | Harmony Endpoint Prevent- Including Attack Investigation (Without Threat Hunting), Threat Prevention, Access Control and Threat Intelligence | | CP-HAR-EP-BASIC | Harmony Endpoint Basic- Including Web Protection, Attack Investigation, Threat Prevention, Access Control and Threat Intelligence | | CP-HAR-EP-ADVANCED | Harmony Endpoint Advanced- Including Sandboxing, Web Protection, Attack Investigation, Threat Prevention, Access Control and Threat Intelligence | | CP-HAR-EP-COMPLETE | Harmony Endpoint Complete - Including Data Protection, Sandboxing, Web Protection, Attack Investigation, Threat Prevention, Access Control and Threat Intelligence | | CP-HAR-EP-ELITE | Harmony Endpoint Elite - Including Posture Management, DLP, GenAI Security (Preview), Infinity XPR for Endpoint, Infinity PlayBlocks, Data Protection, Sandboxing, Browser Security, Attack Investigation, Threat Prevention. and Access Control. | | CP-HAR-BROWSE | Harmony Browse Basic - Including Zero-Phishing, Sandboxing \& CDR, URL Filtering, Corporate Password Reuse, and Safe Search. | | CP-HAR-BROWSE-ADVANCED | Harmony Browse Advanced - Including Browser-Based DLP, GenAI Security (Preview), Zero-Phishing, Sandboxing \& CDR, URL Filtering, Corporate Password Reuse, and Safe Search. | | CP-HAR-EP-DLP | Browser-Based DLP for Harmony Endpoint. | | CP-HAR-EP-VM | Vulnerability Management for Harmony Endpoint | | CP-HAR-EP-PM | Vulnerability and Patch Management for Harmony Endpoint | | CPEP-SBA-THRET1Y | Harmony Endpoint Threat Hunting provides a robust investigation tool, collecting all events from the endpoint including malicious, suspicious and raw events. This data has a default retention of 30 days Extends data retention to 12 months | ### Endpoint Security Policy Server (optional - for use with E80.20 or higher only) Beginning with E80.20, Check Point has introduced Endpoint Policy Servers for remote locations. These will provide a point of connection for remote offices without the need for an additional Endpoint Security Management Server. The SKU for a single Endpoint Security Policy Server is CPSM-CONP-E. No changes were made to the licensing for Policy Servers. A customer is able to use a number of Policy Servers based on the size of the Endpoint Security Management license in use: |------------------------------------------------------------------------------------------|--------------------------------------| | **Endpoint Security Management SKU** | **Number of Policy Servers Allowed** | | CPSM-NGSM5 / CPSM-NGSM10 / CPSM-P1003-E | One (1) | | CPSM-NGSM25 / CPSM-P2503-E | Up to Two (2) | | CPSM-NGSM50 | Up to Five (5) | | CPSM-NGSM150 / CPSM-PU003-E | Unlimited | | Smart-1 205 / Smart-1 210 / Smart-1 405 Smart-1 410 / Smart-1 600S Base \& Plus | One (1) | | Smart-1 225 / Smart-1 625 / Smart-1 600M Base | Up to Two (2) | | Smart-1 3050 \& 5050 / Smart-1 NGSM5050 Smart-1 600M Plus | Up to Five (5) | | Smart-1 3150 \& 5150 / Smart-1 NGSM5150 Smart-1 6000L Base \& Plus / 6000XL Base \& Plus | Unlimited | Policy Server licenses are issued on a case by case basis. To inquire about or to request a Policy Server license, contact Check Point Account Services in one of these ways: * by creating a [Non-Technical Service Request](https://help.checkpoint.com/) * by phone: * Americas: +1-972-444-6600 - option 3 - option 5 * International: +972-3-611-5100 - option 3 - option 5 In your request, provide the Certificate Key or MAC of the Management product and the number of policy server licenses requested. For more information about Endpoint Security Policy Servers, refer to the Endpoint Security Release Notes ([E80.40 Endpoint Security Release Notes](http://downloads.checkpoint.com/dc/download.htm?ID=17164), [E80.60 Endpoint Security Release Notes](http://downloads.checkpoint.com/dc/download.htm?ID=36189), [E80.61 and R77.20.01 Release Notes](http://downloads.checkpoint.com/dc/download.htm?ID=40515), [E80.62 and R77.30.01 Release Notes](http://downloads.checkpoint.com/dc/download.htm?ID=45331), [E80.64 and R77.30.02 Release Notes](http://downloads.checkpoint.com/dc/download.htm?ID=51163), [E80.65 and R77.30.03 Release Notes](http://downloads.checkpoint.com/dc/download.htm?ID=53790)). ### NGEP Licensing FAQ Show All in this section * #### Are older Endpoint Security Blade products still supported if I want to upgrade to a latest version of Endpoint Security? > * Yes the older Endpoint Security Blade SKUS are still supported and use the same blade licensing features as the new NGEP licenses. There is no change to the underlying blade license architecture. > > > * #### Are the old EndPoint products still available for purchase? > * No, the old EndPoint Blade SKUs are no longer available for new orders, but can be renewed. > * New seats should be ordered using the new packages * #### Can I convert my old licenses to the new SKUS? > * There is no direct functionality upgrade because of the different packaging; however, you can purchase new annual products instead of renewing the old annual products or ask your account manager about trade-in options if you have older perpetual licensing. * #### I have older Endpoint Blade licenses with Endpoint Containers, but the new price list says there is no requirement for an endpoint container license. Do I still need to renew the support for the container and install the Endpoint container licenses on my Endpoint Security Server? > * Provided you are still using Endpoint Blades licenses, yes, you still need to renew support for Endpoint Containers and install the container licenses for the equivalent number of seats. > * Although Endpoint Containers are no longer sold as a separate products with the new packages, the pricing and licenses functionality were consolidated into the new packages so the container license still must be installed to properly enable the functionality, > * As older Endpoint Blades seats are removed and replaced by the new licenses, the related containers can then be removed. * #### Is Legacy Endpoint URL Filtering part of the new Endpoint offering? > * No Legacy Endpoint URL filtering is not included in any of the standard Endpoint Packages currently, including Endpoint Complete. > * This is currently only available as standalone product that must be specially order through the Sales Solution Center. Customers interested in purchasing Legacy Endpoint URL Filtering should contact their reseller or account manager for a quote. --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content