Академический Документы
Профессиональный Документы
Культура Документы
Licensing Model
January 2011
TABLE OF CONTENTS
SCOPE ..........................................................................................................................................................4
PRODUCTS LICENSING MECHANISM ......................................................................................................4
APPDIRECTOR, LINKPROOF, DEFENSEPRO, CID, APPXCEL, SIP DIRECTOR, WSD, CT100 AND ALTEON
LICENSING MECHANISM ................................................................................................................................. 4
Capabilities license ................................................................................................................................ 4
Throughput license ................................................................................................................................. 5
Hardware license ................................................................................................................................... 5
AppDirector & Alteon Application Acceleration licenses ........................................................................ 5
SIP Director Licenses............................................................................................................................. 5
License Upgrade .................................................................................................................................... 6
License Downgrade ............................................................................................................................... 6
Upgrade from Pre-License Versions ...................................................................................................... 6
Licenses vs. Passwords ......................................................................................................................... 7
APPW ALL LICENSING MECHANISM .................................................................................................................. 7
License Upgrade .................................................................................................................................... 7
APPXML LICENSING MECHANISM ................................................................................................................... 7
License Upgrade .................................................................................................................................... 8
INFLIGHT 5000 ODS LICENSING MECHANISM .................................................................................................. 8
License Upgrade .................................................................................................................................... 8
APSOLUTE INSITE LICENSING ..................................................................................................................9
STANDARD LICENSE....................................................................................................................................... 9
SECURITY LICENSE ...................................................................................................................................... 10
PLUG-IN LICENSE......................................................................................................................................... 10
INSITE MANAGEPRO LICENSES ..................................................................................................................... 11
ManagePro License ............................................................................................................................. 11
Application Performance Management (APM) License ....................................................................... 11
APSolute Insite Stand-Alone Feature Licenses ................................................................................... 11
Insite ManagePro Feature Licenses .................................................................................................... 12
APPENDIX A: LICENSE DESCRIPTIONS ................................................................................................ 13
10 GIG LICENSE .......................................................................................................................................... 13
APPDIRECTOR LICENSES ............................................................................................................................. 13
Additional Options ................................................................................................................................ 13
Throughput Licenses............................................................................................................................ 14
SSL Licenses (AppDirector 2.0 and later)............................................................................................ 14
HTTP Compression (AppDirector 2.0 and later) .................................................................................. 15
SIP DIRECTOR LICENSES ............................................................................................................................. 16
Additional Options ................................................................................................................................ 16
Concurrent Calls License ..................................................................................................................... 16
Advanced SIP Services License .......................................................................................................... 17
CID LICENSES ............................................................................................................................................. 18
Throughput Licenses............................................................................................................................ 18
Additional Options ................................................................................................................................ 18
LINKPROOF LICENSES ................................................................................................................................. 19
Throughput Licenses............................................................................................................................ 19
Additional Options ................................................................................................................................ 20
DEFENSEPRO LICENSES .............................................................................................................................. 20
Page 2
Page 3
Scope
Radware products use the Radware licensing mechanism, designed to simplify changes of
device characteristics and capabilities, such as APSolute OS modules support (SynApps
modules support for pre-APSolute OS versions).
For a complete list of available licenses, refer to Appendix A.
AppDirector, LinkProof, DefensePro, CID, AppXcel, SIP Director, WSD, CT100 and
Alteon Licensing Mechanism
The Radware license is a one-time license, meaning that after this license is changed, the old
license key cannot be re-used. For example, if a license to activate BWM and IPS (SynApps
level II for pre-APSolute OS versions) was given to a customer on a trial basis, but not
purchased by the customer, Radware provides this customer with another license, without BWM
and IPS support, and ensures that the customer cannot re-use the BWM and IPS license again,
by performing license downgrade.
The license is based on the MAC address of the device, and on a license ID that is changed
every time a new license is inserted.
The license ID is kept on the NVRAM (for the pre-file system the license is kept on NVRAM, as
well). Therefore, the NVRAM must never be erased.
There are several types of licenses, discussed below. For a complete list of available licenses,
refer to Appendix A.
Capabilities license
This license is available on all platforms and allows customers to add product specific
capabilities (for example, Global Load Balancing on AppDirector) and APSolute OS capabilities
(BWM and IPS, DoS). For certain products this license is also used to limit throughput on
Application Switch platforms - for example LinkProof 100 and LinkProof 200 on AS1 (both the
100Mbps limitation and upgrade from 100Mbps to 200Mbps is performed via the licensing
mechanism).
This license is accumulative it can both enable a product specific capability and APSolute OS
capability, for example.
Page 4
Throughput license
For OnDemand Switch platforms the throughput limitation and upgrade is implemented via a
separate license. The throughput license upgrade does not require rebooting the device.
Hardware license
For Application Switch platforms that include 10XGE modules (AS3 and AS5). This license is in
addition to the capabilities license.
AppDirector & Alteon Application Acceleration licenses
SSL License
This license defines the SSL offload capacity level and enables a capacity upgrade for
AppDirector (version 2.0 and later) and Alteon (version 27.0 and later). The SSL license
upgrade does not require device rebooting. The SSL capacity measurement was changed in
AppDirector version 2.11.20.
Pre 2.11.20: The SSL license controls the number of HTTPS transactions per second
that the AppDirector SSL acceleration function can process.
Note that in order to optimize performance there are cases where Generic SSL is
automatically selected although the Layer 4 policy is defined as HTTPS, and the
above behavior (TPS 1:1) is enforced.
Post 2.11.20 (2.11.20 and later) on Alteon 27.0 and later: The SSL license controls the
number of new SSL connections per second (new SSL handshakes) that the
AppDirector SSL acceleration function can process.
Page 5
The maximum number of active SIP calls that can be tracked by SIP Director at any
given time.
Order the required license part number. Send with the order the MAC address as well
as the current license ID for the license type you require. This information is available
in the License Upgrade window using APSolute Insite and Web Based Management,
or using the console commands:
2.
3.
Using APSolute Insite (from the Setup window select Device Upgrades, and use the
License Upgrade tab), Web Based Management (Device / License Upgrade), or CLI
(using the command system license), enter the new license string. For capabilities or
hardware license upgrades you will be required to reboot the device. The throughput
license (OnDemand Switch platforms) upgrade does not require reboot.
License Downgrade
To perform a license downgrade:
1.
Send the MAC address and the current license ID of the device to the ordering
department.
2.
Insert the new license received from the ordering department. A screen capture of
the License Upgrade window, or the output of system license get CLI command,
must be sent to Radware to prove the customer is using the new license; Radware is
then assured that the old license cannot be re-used.
Page 6
Installing a software version with the new license mechanism on an old device does not involve
entering a license key. The device uses the old EPROM license. If a software upgrade is
required for an old device first the new software needs to be installed. When the new software
is installed, the device boots and reads the EPROM license. A license ID and a license key are
created.
Licenses vs. Passwords
Licenses must not be confused with passwords.
1. A password is required for software upgrade, and is based on the MAC address of the
device and the version file size. A password is required for a major software version
upgrade. For example, upgrade from AppDirector 2.00 to 2.10 requires password, while
upgrade from 2.10.xx to 2.11.yy does not require a password.
2. A license is required for a product-type upgrade (or downgrade), and is based on the
MAC address and the current license-ID of the device.
2.
Using Web Based Management, set the Cluster manager option to On you will be
prompted to install the new license file.
Page 7
AppXML licenses are provided in the form of a license file, which is bound to the MAC address
of the device on which AppXML is installed. When installed into the product, the license will
enable working with basic and add-on AppXML capabilities according to the license content.
The AppXML license files are not cumulative when a new file is installed, it replaces the
previous one. A license file can however include licenses for multiple add-ons.
The following types of add-ons are available:
Identity Management add-on licenses a set of 7 separate licenses for integrating with
Identity management systems.
Message queuing add-on licenses - a set of 5 separate licenses for integrating with
Message Queuing systems.
Geo location Services Support for geo location service that provides information on the
location of the client according to IP.
Page 8
Standard License
The standard license is APSolute Insites basic license provided without charge with the
purchase of all Radware devices. The standard license provides the user with the following:
The standard management tool for managing single or multiple Radware devices via a
central management tool, through a single unified view.
An intuitive graphic view of all the interconnections between a Radware device and other
network elements (other Radware devices, load balanced elements, and so on) and a
visual indication of the health status of all elements on the map.
An intuitive tree view of the complete logical configurations and logical element
availability of any Radware device in the network.
A comprehensive set of user defined statistics that provide real-time and historical
performance information per device and load balanced elements, including incoming and
outgoing traffic, applications bandwidth consumption, failures, resource management
and client information.
Role based device configuration using a built in User Management module, allowing the
delegation of different configuration rights to different User Groups.
Configuration Auditing all device configurations are logged in a dedicated log file,
allowing the System Administrator to monitor all configuration changes, when they were
done and by whom.
Page 9
Security License
The Security License, available at a charge, requires a special license file. The Security License
can be installed over the Standard (basic) APSolute InsIte installation or the APSolute InsIte
Plug-in License. Installation of the Security License requires the use of a special APSolute Insite
installation package which includes a built-in MySQL database.
The Security License is supported for the following products:
DefensePro
SecureFlow
AppDirector
WSD 8.2x
This license provides the following capabilities to system administrators who have installed
APSolute OS Application Security or DoS:
Extensive view of Application Security and DoS Shield statistics with the use of a built-in
MySQL database. These statistics provide real-time and historical information on attacks
and malicious traffic detected and /or blocked by the Radware device. This information
includes most common attacks, attack volume, and so on.
The ability to collect and store attack information for future statistic reporting.
For more info about the APSolute Insite security license see
http://www.radware.com/content/document.asp?_v=about&document=6510.
Plug-in License
The Plug-in License, available at a charge, requires a special license file. The Plug-in License
can be installed either over the Standard (basic) APSolute Insite installation, or over the
APSolute Insite Security License.
This license allows system administrators to integrate APSolute Insite within NOCs which utilize
network management applications from third-party vendors.
The supported third-party network management applications are:
Page 10
Access to Radwares devices using Telnet, SSH, WBM and Secure WBM.
Allows translating of traps sent by Radware devices to CA Unicenter and presenting the
traps on the CA Unicenter map.
Allows translating security traps sent by Radware devices to the Symantec SESA
format.
Traffic Redirection
HMM
BWM
App Sec
Plug-in License
HP OpenView Integration
Security License
Page 11
Standard License
Site Map Alerts
Offline Configuration
Templates
Plug-in License
CA Unicenter Integration
Security License
Security reporting (using
MySQL database)
Performance Statistics
Scheduler
Site Explorer
Device Level User
Management
Auditing
Enhanced Statistics
Insite ManagePro Feature Licenses
Standard License
Basic
Traffic Redirection
HMM
BWM
App Sec
APM
Page 12
Description
Enables use of 10 GB port,
requires 10 GB physical
module
Platform
AS3, AS5
AppDirector Licenses
License
appdirector
Description
Basic AppDirector license
Platform
AS1, AS2, AS4, AS5, ODS
VL, ODS1, ODS2, ODS VL
XL, ODS1 XL, ODS2 XL,
ODS3, ODS3 XL
appdirector-100
AS1
License Keyword
cookie
Description
Cookie persistency license.
Provided automatically for
ROW, only by specific
request to US.
Platform
AS1, AS2, AS4, AS5, ODS
VL, ODS1, ODS2, ODS VL
XL, ODS1 XL, ODS2 XL,
ODS3, ODS3 XL
global
bwm-ips
Additional Options
pre-2.30 versions
dos
bwm
Page 13
Description
Platform
sec
License Keyword
tsl
Description
Throughput limited to 200
Mbps.
Platform
ODS VL, ODS VL XL,
ODS1
500Mbps
1Gbps
Throughput limited to 1
Gbps.
2Gbps
Throughput limited to 2
Gbps.
4Gbps
4 Gbps of throughput.
8Gbps
Throughput limited to 8
Gbps of throughput.
ODS3, ODS3 XL
12Gbps
Throughput limited to 12
Gbps of throughput.
ODS3, ODS3 XL
16Gbps
Throughput limited to 16
Gbps of throughput.
ODS3, ODS3 XL
20Gbps
20 Gbps of throughput
ODS3*, ODS3 XL
Description
Platform
Page 14
License Keyword
appdirector-SSL-500
Description
Platform
Pre 2.11.20: Up to 500 SSL ODS VL, ODS1, ODS2
TPS*
Post 2.11.20: Up to 500
SSL CPS*
appdirector-SSL-25000
ODS3 XL
appdirector-SSL-Unlimited
appdirector-SSL-2000
appdirector-SSL-5000
appdirector-SSL-10000
appdirector-SSL-20000
ODS3 XL
Description
Up to 100 Mbps HTTP
Compression throughput
Platform
ODS VL, ODS1, ODS2,
ODS3*
appdirector-compression-
Page 15
250
License Keyword
Description
Compression throughput
ODS3*
Platform
appdirector-compression500
appdirector-compression750
appdirector-compression1000
appdirector-compressionUnlimited
Maximum HTTP
Compression throughput
available when Hardware
Compression card is
installed automatically
Description
Basic SIP Director license.
Supports SIP over UDP.
Platform
ODS 1
Additional Options
License Keyword
cookie
Description
Cookie persistency license.
Provided automatically for
ROW, only by specific
request to US.
Platform
bwm-ips
ODS 1
dos
ODS 1
ODS 1
Description
Up to 10,000 concurrent
Platform
ODS 1
Page 16
License Keyword
Description
calls and 1 Gbps
throughput.
Platform
sip-cc-30k
Up to 30,000 concurrent
calls and 1 Gbps
throughput.
ODS 1
sip-cc-100k
Up to 100,000 concurrent
calls and 4 Gbps
throughput.
ODS 1
sip-cc-300k
Up to 300,000 concurrent
calls and 4 Gbps
throughput.
ODS 1
sip-cc-1000k
Up to 1,000,000 concurrent
calls and 4 Gbps
throughput.
ODS 1
Description
No advanced SIP services are enabled
Platform
ODS 1
sip-adv-etp
ODS 1
sip-adv-atm
ODS 1
sip-adv-etp-atm
ODS 1
Page 17
CID Licenses
License
CID
Platform
ODS3, AS1, AS2, AS3,
AS4, AS5
License Keyword
8Gbps
Description
Throughput limited to 8
Gbps of throughput.
ODS3
12Gbps
Throughput limited to 12
Gbps of throughput.
ODS3
16Gbps
16 Gbps of throughput.
ODS3
License Keyword
bwm-ips
Description
Support for APSolute OS
modules BWM and IPS. 1
Platform
ODS3, AS1, AS2, AS3,
AS4, AS5
synapps
dos
bwm-ips
synapps
cid
Description
Throughput Licenses
Platform
Additional Options
APSolute OS is supported by FireProof starting with version 3.35.06 and LinkProof starting with version
4.35.06.
Page 18
License Keyword
Description
modules BWM and
Application Security for
pre-APSolute OS versions.
Platform
dos
es
ODS3
mes
ODS3
Description
LinkProof
Platform
ODS2, AS1, AS2, AS3,
AS4
lp-100
AS1
lp-ROW
CAS
lp-25
CAS
lp-JP
CAS
LinkProof Licenses
License
lp
AS1
Throughput Licenses
License Keyword
100Mbps
Description
Throughput limited to 100
Mbps.
200Mbps
ODS VL
1Gbps
Throughput limited to 1
Gbps.
Platform
ODS VL
Page 19
License Keyword
2Gbps
Description
Throughput limited to 2
Gbps.
Platform
ODS VL, ODS2
4Gbps
4 Gbps of throughput.
8Gbps
Throughput limited to 8
Gbps of throughput.
ODS3
12Gbps
Throughput limited to 12
Gbps of throughput.
ODS3
16Gbps
16 Gbps of throughput.
ODS3
License Keyword
bwm-ips
Description
Support for APSolute OS
modules BWM and IPS. 3
Platform
ODS2, CAS, AS1, AS2,
AS3, AS4
synapps
dos
vpn
CAS
cmp
Compression support
Additional Options
DefensePro Licenses
Application Licenses
License
bwm-ips
Description
Support for APSolute OS
Platform
ODS2, CAS, AS1, AS2, AS3,
Page 20
License
Description
modules BWM and IPS.
Platform
3
AS4
dp-ips-bwm
DefensePro standard
license with IPS and BWM
APSolute OS modules. 4
dp
DefensePro standard
license with IPS and BWM
modules for pre-APSolute
OS versions. Error! Bookmark not
defined.
dp-50-ips-bwm
AS1
defined.
dp-50
AS1
dp-doss-bwm
AS3
AS3
Page 21
License
dp-100-ips-bwm-doss-bdos
Description
list only.
DefensePro with 100 MB
bandwidth limitation, with
IPS, BWM, DoS Shield and
Behavioral DoS APSolute
OS modules. Error! Bookmark not
Platform
SP1
defined.
dp-200-ips-bwm-doss-bdos
SP1
defined.
dp-500-ips-bwm-doss-bdos
SP1
defined.
dp-600-ips-bwm
AS4/SME
defined.
dp-1000-ips-bwm
DefensePro with 1 GB
bandwidth limitation, with
IPS and BWM APSolute
OS modules. Error! Bookmark not
AS4/SME
defined.
dp-4000-ips-bwm-dossbdos-ipv6
DefensePro with 4 GB
bandwidth limitation, with
IPS and BWM, DoS Shield,
SYN Protection, Server
Cracking, Behavioral DoS,
HTTP Mitigator APSolute
OS modules
ODS-3S2 IPS
dp-ips-bwm-doss-bdos-ipv6
DefensePro with NO
bandwidth limitation, with
IPS and BWM, DoS Shield,
SYN Protection, Server
Cracking, Behavioral DoS,
HTTP Mitigator APSolute
OS modules
Page 22
License
dp-basic-flood-bwm
Description
DefensePro with BWM,
DoS Shield, SYN
Protection, Server
Cracking, Behavioral DoS,
HTTP Mitigator APSolute
OS modules.
Notes:
Platform
ODS-3S2 IPS, ODS-3S1
Behavioral Protections
Signature Protection
availability is determine by
the existence of the SME
card.
This license is available
starting from version 4.22
Throughput License ODS Platforms
License keyword
Description
Platform
1Gbps
1 Gbps of throughput.
ODS-2
2Gbps
2 Gbps of throughput.
ODS-2
3Gbps
Unlimited throughput.
ODS-2
4Gbps
4 Gbps of throughput.
ODS-3S2
ODS-3S1
8Gbps
Unlimited throughput
ODS-3S2
8Gbps
8 Gbps of throughput.
ODS-3S1
12Gbps
Unlimited throughput
ODS3-S1
Additional Options
License Keyword
Description
Support for DoS Shield and
SYN Protection APSolute
OS module.
Platform
AS1, AS2, AS2/SME,
AS3/SME, AS4/SME,
dos
bdos
doss
IPv6
AS5
AS5
Page 23
License Keyword
Description
license types5
Platform
Page 24
AppXcel Licenses
License
appxcel-300-TPS-1500CEC
Description
AppXcel with up to 300
transactions per second
and up to 1500 concurrent
connections
Platform
appxcel-1000-TPS-3000CEC
appxcel-2000-TPS-10000CEC
appxcel-4000-TPS-20000CEC
appxcel-8000-TPS-50000CEC
appxcel-16000-TPS150000-CEC
XS2
appxcel-32000-TPS150000-CEC
XS3
XS1
XS1
Description
Obsolete
ct100-levelX-Y-concurrentconnections
Platform
CertainT 100
Page 25
License
Description
be changed by license
change and memory
upgrade only. To upgrade
to higher levels hardware
change is required.
Platform
CertainT 100
Alteon Licenses
License
Aas-slb
Description
Global
Bwm
Bandwidth Management
License - Software Option
Itm
Ados
Llb
Platform
Alteon 2208, 2216, 2424,
2424SSL, 3408, ODS VL,
ODS 2, ODS 3, VA
Alteon 2208, 2216, 2424,
2424SSL, 3408, ODS VL,
ODS 2, ODS 3, VA
Alteon 2208, 2216, 2424,
2424SSL, 3408, ODS VL,
ODS 2, ODS 3, VA
Alteon 2208, 2216, 2424,
2424SSL, 3408, ODS VL,
ODS 2, ODS 3, VA
Alteon 2208, 2216, 2424,
2424SSL, 3408, ODS VL,
ODS 2, ODS 3, VA
Alteon 2208, 2216, 2424,
2424SSL, 3408, ODS VL,
ODS 2, ODS 3, VA
Page 26
AppWall Licenses
License
AppWall Gateway
Description
Web Application Firewall
capabilities, Self
management capabilities
and Event Publisher for
integration with Enterprise
Management systems.
AppWall Gateway and
Cluster Manager
capabilities. As a Cluster
Manager the device also
functions as a manager for
a single AppWall cluster
synchronizing polices and
learned data across all the
AppWall gateways in the
cluster.
Platform
AppWall Gateway
AppXML Licenses
License
Identity Management CA
SiteMinder
Description
CA SiteMinder identity adaptor
Identity Management HP
Select Access
Identity Management
Oracle COREid
Identity Management WS
Trust
Page 27
License
Message Queuing Sun
Java
Description
Sun Java Message Queue adaptor
Description
Capacity rated between 250-3000 TPS - Monitor up to
50,000 users
Additional Options
License
Monitored Users (Unlimited)
Description
Capacity increase for number of Monitored users to
Unlimited
JMS Messaging
Coral 8 Stream
StreamBase Pump
Actimize Pump
ArcSight Pump
SeeWhy Pump
Maxmind Enhance
Geolocation
Page 28
North America
Radware Inc.
575 Corporate Drive
Mahwah, NJ 07430
Tel: +1-888-234-5763
International
Radware Ltd.
22 Raoul Wallenberg St.
Tel Aviv 69710, Israel
Tel: 972 3 766 8666
2011 Radware, Ltd. All Rights Reserved. Radware and all other Radware product and service names are registered
trademarks of Radware in the U.S. and other countries. All other trademarks and names are the property of their respective
owners. Printed in the U.S.A
Page 29