Virtual / Software Licensing

Last updated on 2023-07-21 03:39:20

Virtual Firewall Cloud models VFC1-VFC48 are licensed by the total number of supported CPU cores (including hyper-threading), which is indicated by the model name number. There are no further limitations on protected firewall IPs, SSL VPN users, VPN users, or HTTP Proxy users (Virus Scanner and Web Filter). VFC models follow service-oriented licensing, and to use any service (Firewall, VPN, etc...), you must have an active Energize Updates (EU) subscription.

There is no difference between Base and EU license. All Base functionality is incorporated in the EU subscription. Without a valid Energize Updates subscription, the firewall can only operate in demo mode.

If you cannot adjust the number of CPU cores in your hypervisor, it might be necessary to configure the bootloader to use the number of licensed CPU cores.

The following table displays the capacity and the number of CPU cores for each CloudGen Firewall VFC. Performance differs from the underlaying host system:

Model	Recommended sizing	Licensed number of CPU cores
VFC1	up to 50	1
VFC2	up to 300	2
VFC4	up to 2000	4
VFC8	up to 7000	8
VFC16	up to 10000	16
VFC48	10000+	48

There might be limitations to the number of network interfaces you can connect to your virtual host, depending on the license of your virtualization platform. Please check with your platform vendor.

Virtual firewall models VF10-VF8000 are classified by a "capacity" number in the model name, which defines the number of protected firewall IPs, SSL VPN users, VPN users, and HTTP Proxy users (Virus Scanner and Web Filter). This number is enforced for all smaller models of the virtual appliance (CloudGen Firewall VF10 - VF500). CloudGen Firewall VF1000 to VF8000 do not set a software limit to the number of protected IP addresses; the capacity number still applies as a sizing recommendation. Depending on the model number, they are also limited by the number of CPU cores that can be used. You must assign the correct number of CPU to your CloudGen Firewall Vx. If you assign more CPU cores than covered by the license, the license state will be displayed as expired.

Legacy phion licenses do not distinguish between virtual and hardware licenses and also differ from Barracuda VFC licenses. Users behind the HTTP Proxy service and client-to-site VPN users are not factored into the capacity number. Legacy phion licenses require an additional license for client-to-site VPN.

If you cannot adjust the number of CPU cores in your hypervisor, it might be necessary to configure the bootloader to use the number of licensed CPU cores.

The following table displays the capacity and the number of CPU cores for each CloudGen Firewall VF:

Model	Capacity (Protected IPs)	Number of Supported CPU Cores
Model	Capacity (Protected IPs)	VF	TSF
VF10, TSF10	10*	1	1
VF25, TSF25	25*	2	4
VF50, TSF50	50*	2	4
VF100, TSF100	100*	2	4
VF250, TSF250	250*	2	4
VF500, TSF500	500*	2	4
VF1000, TSF1000	Unlimited*	2	4
VF2000, TSF2000	Unlimited*	4	8
VF4000, TSF4000	Unlimited*	8	12
VF8000, TSF8000	Unlimited*	16	24

* Number of protected FW IPs, SSL VPN users, VPN users, and proxy users (AV + Web Filter)

The number of network interfaces is limited only by the number supported by the hypervisor.

For information on how to install and activate licenses on Barracuda CloudGen Firewall virtual and software models, see the Licensing section in the CloudGen Firewall documentation.

Previous Article Next Article