Arrow ECS Internet Security AGlicensing.arrowecs.at/wp-uploads/2016/09/Check-Point-Neues-Softw… · SandBlast Agent for Browsers browser extension with cloud management Threat Emulation

Arrow ECS Internet Security AG

Rainer Hornacek Gerald Schranz

Channel- / Partnerdevelopment Sales Manager Check Point, Arrow ECS

Arrow Webinarreihe: Neues Check Point Software Bundeling

©2016 Check Point Software Technologies Ltd. 2[Confidential] For designated groups and individuals

SIMPLICITY

©2016 Check Point Software Technologies Ltd. 3

Complex pricing made simple!

[Confidential] For designated groups and individuals

• Improving the following pricing models:

Next Generation Security Management

End Point Security pricing

SandBlast™ appliance

Open Server

All Introduced in July – Available in September


Pricing simplicity Components


• Reduce number of SKUs

• Simplify quotations Less lines per quote. Easier to

understand.

• Eliminate Containers

• Solve licensing anomalies Align packages between SW-only

and HW bundles

• Reduce steps in ordering process


S E C U R I T Y M A N A G E M E N T

N E W P R I C I N G


CHANGE THE WAY

YOU MANAGE SECURITY


NEXT GENERATION SECURITY MANAGEMENT

THE BEST JUST GOT BETTER

WITH R80

23 YEARS OF LEADERSHIP

Best security, best visibility,

more insight and much simpler

Innovative, efficient,

customized & unified


Flexible & SimpleUnified

Introducing Simplified Pricing

for Check Point Security Management




EVERYTHING YOU NEED

Unified Security Management

Policies

Automation

Insight

Visibility

Efficiency

Security Management

Everything included:

Network Policy Management

Logging & Status

SmartEvent (1 year)

Compliance (1 year)

Endpoint Policy Management

User Directory

Management Portal

Monitoring

SmartWorkflow

SmartProvisioning

Available on

Smart-1 & Software

(open server)




Price per number of

managed gateways 5, 10, 25, 50, 150**additional gateways by increases of 50

All Platforms

Smart-1 Appliance Software-only (Open Server}

One Price – Everything Included

DomainsSplit gateways between multiple domains

(no limit # of gateways per domain) 5, 10, 25, 50, 100

1

2

3




All in one

Available on Smart-1 & Open Server

Unified Security Management

Dedicated

SmartEvent

events, correlation & reporting system

Dedicated

Log Server

scalable for large environments

Security

Management

Everything you need


Select PlatformSecurity Management

Smart-1 or Software



Unified, Flexible & Simple

Simple to build your solution:Customer

Quote

Smart-1 3050

with 5 domains

One $Price

All functionality

included

Single SKU

Add Gateways

5, 10, 25, 50, 150+50 gateways extension

Add Domains

Domains packages of

5, 10, 25, 50, 100

Security management

on a Smart-1 applianceCentrally manage 50

gatewaysWith 5 domains

Exa

mple


FREQUENTLY ASKED QUESTIONS




AWhen will the new licensing model apply?

Starting Q4/2016

BWill quotes with old pricing be accepted?

Quotes with the old pricing will be accepted until October 30th

CTo which quotes does the new pricing apply?

All new management deals should use the new pricing model




I would like to add to an existing customer – how should I quote?

EWhat about existing Multi-domain customers?

Existing Multi-domain customers wishing to grow can still buy the

old domain blades

Software License Conversion Plan

100% credit of the existing product value

and up to 90% of the new product value

DMy customer has open server license and would like to add more

gateways or functionalityExisting open server customers wishing to add new functionality

should use the new software license conversion plan


PartnerMAP:

Presentations, Sales Guide, FAQ and more..

For more information…


NEW NGSM Catalog Home Page (simulation)


Choose Appliance &

domains number

Choose between Smart-1

to Open Server


Detailed Product Page (simulation)


Choose between Smart-1,

SmartEvent or SmartLog

Platform spec info including:

storage, memory, domains etc.


O P E N S E R V E R N E W P R I C I N G


New pricing objectives

• Align with the appliances offering

NGTP and NGTX packaging

• Simplify model

Remove containers

Reduce number of SKUs

Offer higher core support



New Pricing and Guidelines


• FW-only is offered for 2 cores only

• Number of cores must match the number of HW platform cores or higher e.g: 8 core server can install only 8

core SW ; 12 core server must install 16 core license

Max support of 32 cores

• Only one license per platform e.g: combination of 2 licenses on

same platform is not permitted

SizeRenewal

sizeNGTP pricing

2 cores –

FW onlyS $5.5K

2 cores S $9.9K

4 cores M $19K

8 cores L $29K

16 cores XL $48K

24 cores X2L $70K

32 cores X2L $90K


S a n d B l a s t A p p l i a n c e P r i c i n g


WHAT IS SANDBLAST



A Family of Advanced Threat Prevention TECHNOLOGIES

CPU-Level and OS-Level evasion

resistantsandbox

THREAT EMULATION

Proactively eliminate

malware vehicles of delivery

THREAT EXTRACTION


Rapid understanding for better

response and remediation

ENDPOINT FORENSICS


PRODUCT FAMILY

NGTX Gateways

Perimeter and segments protection

SandBlast Agent

Endpoint and browsers protection

SandBlast API

Custom applications protection

SandBlast for Cloud

Cloud applications protection



EMULATION AND EXTRACTION SERVICE

SandBlast Cloud Service

CHECK POINT CLOUD

SandBlast TE Appliance

HOSTED ON PREMISE



SANDBLAST APPLIANCE

PRICING & PACKAGING


THE NEW SANDBLAST LICENSING MODEL


A SINGLE LICENSING RULE

Gateways require NGTX to use SandBlast

regardless of whether the service is hosted on premise or in the cloud


• NGTX required for gateways to send files

• No software renewal for SandBlast TE Appliance

DEPLOYMENT MODES & LICENSINGCLOUD MODEGateways + SandBlast Service

DISTRIBUTED MODEGateways + SandBlast TE Appliance

Security Gateway


NGTPNGTX

TE Renewal

STANDALONE MODEInline SandBlast Service Appliance


TERenewalNGTX

NO CHANGEsame licensing as today

• NGTX required for the SandBlast Appliance

Current license requirementNew license

requirement

Recommendation

SandBlast TE Appliance deployed:

• Inline

• Span / TAP

• As MTA

• As ICAP server

Current license requirement

Security Gateway

SandBlast Service

NGTX



NEW MODEL BENEFITS


• Simplicity: Single license for sandblast on the network - NGTX

• Streamlined licensing Threat Extraction license on gateway when connecting to a TE appliance

Hybrid mode – emulated files split between Cloud and Appliance

Enables MSSPs to create their own SandBlast cloud service

• All NGTX blades available for SandBlast TE Appliance deployed inline

• Future proof: flexibility to implement new SandBlast technologies on gateways (e.g. Zero Phishing) – regardless of emulation location


NEW TE APPLIANCE PRICING

Model Previous SKU

Previous Renewal Package

New SKUs and prices

NGTX Package

TE100X $27,000CPAP-TE100X-4VM

$3,200CPSB-TE-100-1Y

$27,000CPAP-SBTE100-4VM

$6,800CPSB-NGTX-SBTE100-1Y

TE250X $59,000CPAP-TE250X-8VM

$6,600CPSB-TE-250-1Y

$59,000CPAP-SBTE250-8VM


TE1000X $122,000CPAP-TE1000X-28VM

$12,000CPSB-TE-1000-1Y

$122,000CPAP-SBTE1000-28VM


TE2000X $179,000CPAP-TE2000X-40VM

$17,000CPSB-TE-2000-40VM-1Y

$179,000CPAP-SBTE2000-40VM


TE2000X HPP

$212,000CPAP-TE2000X-56VM-

HPP

$17,000CPSB-TE-2000-56VM-1Y

$212,000CPAP-SBTE2000-56VM-HPP

$30,500CPSB-NGTX-SBTE2000-HPP-

1Y

Required only when TE appliance is deployed inline



NEW TE APPLIANCE LICENSE - NOTES


• No impact on existing customers Keep old license and renewal

• Inline TE appliance can use all NGTX blades

• Inline TE appliance can send files to the SandBlast Service in the cloud

• New licenses work with all product versions


ENDPOINT and SANDBLAST AGENT

PRICING & PACKAGING


OBJECTIVE FOR CHANGE


• Simple and consistent selling options

• Competitive combining Endpoint and SandBlast Agent

• Competitive on small endpoint deals

• Focus on selling products (not containers)


NEW ENDPOINT PACKAGES


Access Control FWRemote Access

$9/Yannual

$25perpetual

ORCPEP-ACCESS-1Y

CPEP-ACCESS-RENEWAL-1Y

CPEP-ACCESS-P

Data Protection FDEMedia

Encryption$29/Y

annual$76

perpetualOR

CPEP-DATA-1Y

CPEP-DATA-RENEWAL-1Y

CPEP-DATA-P

Anti-Virus AV $6/Yannual

CPEP-AV-1Y

CPEP-AV-RENEWAL-1Y

SandBlast AgentSKU and price unchanged

$35/Yannual

Threat Emulation

Anti Bot ForensicsThreat

Extraction

CPEP-SBA-1Y

CPEP-SBA-RENEWAL-1Y

SandBlast Agentfor Browsersbrowser extension with cloud management

Threat Emulation

Zero Phishing

Threat Extraction

CPEP-BRWSR-1Y

CPEP-BRWSR-RENEWAL-1Y$15/Y

annual

CPEP-COMPLETE-1Y

CPEP-COMPLETE-RENEWAL-1YComplete Security $55/Y

annual

E V E R Y T H I N GAccess Control Data Protection Anti-Virus SandBlast Agent

* Endpoint management is included with Smart-1 and with software management packages


NEW ENDPOINT LICENSE - NOTES


• Existing customers No impact on renewal - keep old license and renewal Adding additional seats – new license

• Support cost for annual packages Standard support: included in package price Premium support: +5% for coop, +7% for direct

• New licenses work with all product versions

• Seats counted per package

• Compliance “blade” is included with all packages


T i m e l i n e a n d N e x t S t e p s


Timeline


• 27th July – Field/Sales Webinar - Completed

• 28th July – Partner Webinar - Completed

• 5th Sep Q4/2016 – Product Catalog updated

• 30th Sep 31 October – Last date to accept orders with old pricing

* Changes in red made after initial webinar

©2016 Check Point Software Technologies Ltd. 39©2016 Check Point Software Technologies Ltd.

DANKE


Gerald Schranz [email protected]

mailto:[email protected]

www.arroweurope.com

www.arrowecs.at

Arrow ECS Internet Security AG

Freistädter Straße 236 Wienerbergstraße 11

4040 Linz 1100 Wien

Tel.: +43 732 75 71 68 +43 664 818 91 74Fax: +43 732 75 71 44 +43 1 370 94 40-333

E- Mail: [email protected]

Web: arrowecs.at

Blog: licensing.arrowecs.at

http://www.arrowecs.at/

http://licensing.arrowecs.at/

Documents

Arrow ECS Internet Security AGlicensing.arrowecs.at/wp-uploads/2016/09/Check-Point-Neues-Softw… · SandBlast Agent for Browsers browser extension with cloud management Threat Emulation