Licensing Model

Radware

Licensing Model

January 2011

Radware Licensing Model Page 2

TABLE OF CONTENTS

SCOPE ..........................................................................................................................................................4

PRODUCTS LICENSING MECHANISM ......................................................................................................4

APPDIRECTOR, LINKPROOF, DEFENSEPRO, CID, APPXCEL, SIP DIRECTOR, WSD, CT100 AND ALTEON LICENSING MECHANISM ................................................................................................................................. 4

Capabilities license ................................................................................................................................ 4 Throughput license ................................................................................................................................. 5 Hardware license ................................................................................................................................... 5 AppDirector & Alteon Application Acceleration licenses ........................................................................ 5 SIP Director Licenses ............................................................................................................................. 5 License Upgrade .................................................................................................................................... 6 License Downgrade ............................................................................................................................... 6 Upgrade from Pre-License Versions ...................................................................................................... 6 Licenses vs. Passwords ......................................................................................................................... 7

APPWALL LICENSING MECHANISM .................................................................................................................. 7 License Upgrade .................................................................................................................................... 7

APPXML LICENSING MECHANISM ................................................................................................................... 7 License Upgrade .................................................................................................................................... 8

INFLIGHT 5000 ODS LICENSING MECHANISM .................................................................................................. 8 License Upgrade .................................................................................................................................... 8

APSOLUTE INSITE LICENSING ..................................................................................................................9

STANDARD LICENSE ....................................................................................................................................... 9 SECURITY LICENSE ...................................................................................................................................... 10 PLUG-IN LICENSE......................................................................................................................................... 10 INSITE MANAGEPRO LICENSES ..................................................................................................................... 11

ManagePro License ............................................................................................................................. 11 Application Performance Management (APM) License ....................................................................... 11 APSolute Insite Stand-Alone Feature Licenses ................................................................................... 11 Insite ManagePro Feature Licenses .................................................................................................... 12

APPENDIX A: LICENSE DESCRIPTIONS ................................................................................................ 13

10 GIG LICENSE .......................................................................................................................................... 13 APPDIRECTOR LICENSES ............................................................................................................................. 13

Additional Options ................................................................................................................................ 13 Throughput Licenses ............................................................................................................................ 14 SSL Licenses (AppDirector 2.0 and later)............................................................................................ 14 HTTP Compression (AppDirector 2.0 and later) .................................................................................. 15

SIP DIRECTOR LICENSES ............................................................................................................................. 16 Additional Options ................................................................................................................................ 16 Concurrent Calls License ..................................................................................................................... 16 Advanced SIP Services License .......................................................................................................... 17

CID LICENSES ............................................................................................................................................. 18 Throughput Licenses ............................................................................................................................ 18 Additional Options ................................................................................................................................ 18

LINKPROOF LICENSES ................................................................................................................................. 19 Throughput Licenses ............................................................................................................................ 19 Additional Options ................................................................................................................................ 20

DEFENSEPRO LICENSES .............................................................................................................................. 20


Application Licenses ............................................................................................................................ 20 Throughput License ODS Platforms ................................................................................................. 23 Additional Options ................................................................................................................................ 23

APPXCEL LICENSES ..................................................................................................................................... 25 CERTAINT 100 LICENSES ............................................................................................................................. 25 ALTEON LICENSES ....................................................................................................................................... 26 APPWALL LICENSES .................................................................................................................................... 27 APPXML LICENSES ..................................................................................................................................... 27 INFLIGHT 5000 ODS LICENSES .................................................................................................................... 28

Additional Options ................................................................................................................................ 28


Scope

Radware products use the Radware licensing mechanism, designed to simplify changes of device characteristics and capabilities, such as APSolute OS modules support (SynApps modules support for pre-APSolute OS versions). For a complete list of available licenses, refer to Appendix A.

Products Licensing Mechanism

The licensing mechanism is used to provide an easy path for adding product capabilities after the initial product purchase.

AppDirector, LinkProof, DefensePro, CID, AppXcel, SIP Director, WSD, CT100 and Alteon Licensing Mechanism

The Radware license is a one-time license, meaning that after this license is changed, the old license key cannot be re-used. For example, if a license to activate BWM and IPS (SynApps level II for pre-APSolute OS versions) was given to a customer on a trial basis, but not purchased by the customer, Radware provides this customer with another license, without BWM and IPS support, and ensures that the customer cannot re-use the BWM and IPS license again, by performing license downgrade. The license is based on the MAC address of the device, and on a license ID that is changed every time a new license is inserted. The license ID is kept on the NVRAM (for the pre-file system the license is kept on NVRAM, as well). Therefore, the NVRAM must never be erased. There are several types of licenses, discussed below. For a complete list of available licenses, refer to Appendix A.

Capabilities license

This license is available on all platforms and allows customers to add product specific capabilities (for example, Global Load Balancing on AppDirector) and APSolute OS capabilities (BWM and IPS, DoS). For certain products this license is also used to limit throughput on Application Switch platforms - for example LinkProof 100 and LinkProof 200 on AS1 (both the 100Mbps limitation and upgrade from 100Mbps to 200Mbps is performed via the licensing mechanism). This license is accumulative it can both enable a product specific capability and APSolute OS capability, for example.


Throughput license

For OnDemand Switch platforms the throughput limitation and upgrade is implemented via a separate license. The throughput license upgrade does not require rebooting the device.

Hardware license

For Application Switch platforms that include 10XGE modules (AS3 and AS5). This license is in addition to the capabilities license.

AppDirector & Alteon Application Acceleration licenses

SSL License

This license defines the SSL offload capacity level and enables a capacity upgrade for AppDirector (version 2.0 and later) and Alteon (version 27.0 and later). The SSL license upgrade does not require device rebooting. The SSL capacity measurement was changed in AppDirector version 2.11.20.

Pre 2.11.20: The SSL license controls the number of HTTPS transactions per second that the AppDirector SSL acceleration function can process.

When Generic SSL offloading is used, AppDirector is unaware of the protocol that is being used, and cannot count transactions. In these cases, AppDirector enforces the SSL license as 1 transaction per connection (1:1).

Note that in order to optimize performance there are cases where Generic SSL is automatically selected although the Layer 4 policy is defined as HTTPS, and the above behavior (TPS 1:1) is enforced.

Post 2.11.20 (2.11.20 and later) on Alteon 27.0 and later: The SSL license controls the number of new SSL connections per second (new SSL handshakes) that the AppDirector SSL acceleration function can process.

Compression Throughput License

This license defines the HTTP compression capacity level and enables capacity upgrade (compression throughput in Mbps) for AppDirector (version 2.0 and later) and Alteon (version 27.0 and later). The HTTP Compression license upgrade does not require device rebooting. Note: If a Hardware Compression card is installed in the device, the HTTP Compression throughput is automatically set to unlimited.

SIP Director Licenses

Concurrent Calls License

This license defines the device capacity level and enables capacity upgrade on the SIP Director product. The Concurrent Calls license upgrade does not require rebooting the device. The Concurrent Calls license sets a number of capacity parameters:


The maximum number of active SIP calls that can be tracked by SIP Director at any given time.

The maximum throughput for SIP and non-SIP traffic.

Advanced SIP Services License

This license allows activating advanced SIP services on the SIP Director, such as support for SIP over TCP/TLS with protocol conversion, CAC and Header Manipulation.

License Upgrade

To perform a license upgrade, do the following:

1. Order the required license part number. Send with the order the MAC address as well as the current license ID for the license type you require. This information is available in the License Upgrade window using APSolute Insite and Web Based Management, or using the console commands:

System license get for capabilities license.

System throughput-license get for throughput license.

System hw-license get for hardware license.

2. The new license string will be received by email.

3. Using APSolute Insite (from the Setup window select Device Upgrades, and use the License Upgrade tab), Web Based Management (Device / License Upgrade), or CLI (using the command system license), enter the new license string. For capabilities or hardware license upgrades you will be required to reboot the device. The throughput license (OnDemand Switch platforms) upgrade does not require reboot.

License Downgrade

To perform a license downgrade:

1. Send the MAC address and the current license ID of the device to the ordering department.

2. Insert the new license received from the ordering department. A screen capture of the License Upgrade window, or the output of system license get CLI command, must be sent to Radware to prove the customer is using the new license; Radware is then assured that the old license cannot be re-used.

Upgrade from Pre-License Versions

Early WSD (pre-7.10) and LP (pre-3.20) versions had no licensing mechanism - the device type was kept on the boot EPROM, and referred to as the EPROM license. For compatibility, shipped Application Switch devices still have their appropriate EPROM license (that is, when the device was purchased), in order to support a software downgrade. Note that the EPROM license specifies only the device type WSD-Pro, WSD-DS, WSD-NP, LinkProof, etc., while new licenses can include further information, such as BWM and IPS support.


Installing a software version with the new license mechanism on an old device does not involve entering a license key. The device uses the old EPROM license. If a software upgrade is required for an old device first the new software needs to be installed. When the new software is installed, the device boots and reads the EPROM license. A license ID and a license key are created.

Licenses vs. Passwords

Licenses must not be confused with passwords.

1. A password is required for software upgrade, and is based on the MAC address of the device and the version file size. A password is required for a major software version upgrade. For example, upgrade from AppDirector 2.00 to 2.10 requires password, while upgrade from 2.10.xx to 2.11.yy does not require a password.

2. A license is required for a product-type upgrade (or downgrade), and is based on the MAC address and the current license-ID of the device.

AppWall Licensing Mechanism

The AppWall product has its own licensing mechanism that allows the use of the AppWall gateway to be extended into a Cluster Manager. The AppWall Cluster Manager License is required for at least one AppWall appliance to manage every cluster. Two AppWall Cluster Managements would be required to provide Cluster Management redundancy. AppWall licenses are provided in the form of a license file, which is bound to the MAC address of the device on which AppWall is installed. When installed into the product, the license will enable working with AppWall only according to the installed license mode. For a complete list of available licenses, refer to Appendix A.

License Upgrade


1. The new license file will be received by email.

2. Using Web Based Management, set the Cluster manager option to On you will be prompted to install the new license file.

AppXML Licensing Mechanism

The AppXML product has its own licensing mechanism. The basic license file includes all XML gateway capabilities including integration with the LDAP Identity Management system. Additional capabilities for integrating AppXML with Identity Management systems and Message Queuing systems are available with a specific Add-On license.


AppXML licenses are provided in the form of a license file, which is bound to the MAC address of the device on which AppXML is installed. When installed into the product, the license will enable working with basic and add-on AppXML capabilities according to the license content. The AppXML license files are not cumulative when a new file is installed, it replaces the previous one. A license file can however include licenses for multiple add-ons. The following types of add-ons are available:

Identity Management add-on licenses a set of 7 separate licenses for integrating with Identity management systems.

Message queuing add-on licenses - a set of 5 separate licenses for integrating with Message Queuing systems.

For a complete list of available licenses, refer to Appendix A.

License Upgrade


1. Order the required license part number. Send with the order the MAC address.

2. The new license file will be received by email.

3. Using Web Based Management install the new license file.

Inflight 5000 ODS Licensing Mechanism

Inflight 5000 ODS has its own licensing mechanism. The basic license provides support for 250-3000 TPS and monitoring for up to 50,000 users. The following options are available:

SSL Acceleration option

Capacity increase number of monitored users supported

Pump types Support for different data feed formats

Geo location Services Support for geo location service that provides information on the location of the client according to IP.

Each option is activated independently separate license strings.

License Upgrade


1. Order the required license part number. Send with the order the MAC address.

2. The new license string will be received by email.

3. Using Web Based Management install the new license string.


For a complete list of available licenses, refer to Appendix A.

APSolute Insite Licensing

APSolute Insite licensing is a separate type of license that allows the use of extended features and functionalities. APSolute Insite licenses are provided in the form of a license file, which is bound to the MAC address of the computer on which APSolute Insite is installed. When installed into the application, each license file provides additional features over the standard license according to the license type. The following APSolute Insite licenses are available: Standard, Security, and Plug-in.

Standard License

The standard license is APSolute Insites basic license provided without charge with the purchase of all Radware devices. The standard license provides the user with the following:

The standard management tool for managing single or multiple Radware devices via a central management tool, through a single unified view.

An intuitive graphic view of all the interconnections between a Radware device and other network elements (other Radware devices, load balanced elements, and so on) and a visual indication of the health status of all elements on the map.

Provides simple configuration for system administrators, such as networks with numerous load-balanced elements, for example, configuring numerous servers to a single AppDirector or many NHRs on a LinkProof.

An intuitive tree view of the complete logical configurations and logical element availability of any Radware device in the network.

A comprehensive set of user defined statistics that provide real-time and historical performance information per device and load balanced elements, including incoming and outgoing traffic, applications bandwidth consumption, failures, resource management and client information.

Role based device configuration using a built in User Management module, allowing the delegation of different configuration rights to different User Groups.

Enhanced statistics which enables displaying statistics on multiple elements at once, allowing the comparison between elements (servers, NHRs, and so on), and view the trends and behavior of each element compared to other elements.

Configuration Auditing all device configurations are logged in a dedicated log file, allowing the System Administrator to monitor all configuration changes, when they were done and by whom.


Security License

The Security License, available at a charge, requires a special license file. The Security License can be installed over the Standard (basic) APSolute InsIte installation or the APSolute InsIte Plug-in License. Installation of the Security License requires the use of a special APSolute Insite installation package which includes a built-in MySQL database. The Security License is supported for the following products:

DefensePro

SecureFlow

AppDirector

FireProof 3.3x and later

LinkProof 4.3x and later

CID 2.3x and later

WSD 8.2x

This license provides the following capabilities to system administrators who have installed APSolute OS Application Security or DoS:

Extensive view of Application Security and DoS Shield statistics with the use of a built-in MySQL database. These statistics provide real-time and historical information on attacks and malicious traffic detected and /or blocked by the Radware device. This information includes most common attacks, attack volume, and so on.

The ability to collect and store attack information for future statistic reporting.

For more info about the APSolute Insite security license see http://www.radware.com/content/document.asp?_v=about&document=6510.

Plug-in License

The Plug-in License, available at a charge, requires a special license file. The Plug-in License can be installed either over the Standard (basic) APSolute Insite installation, or over the APSolute Insite Security License. This license allows system administrators to integrate APSolute Insite within NOCs which utilize network management applications from third-party vendors. The supported third-party network management applications are:

HP Open View required version is 6.2.

Symantec SESA required version is 1.1.

CA Unicenter - required version is 5.1 (for UNIX and Windows).

IBM Tivoli required version is 7.1

The Plug-in license provides the following capabilities:


Discovery of Radware devices in the management application (HPOV, CA Unicenter, and so on) Radware MIBs and icons are integrated into the application.

Enables the immediate access to APSolute Insite's application.

Access to Radwares devices using Telnet, SSH, WBM and Secure WBM.

Allows translating of traps sent by Radware devices to CA Unicenter and presenting the traps on the CA Unicenter map.

Allows translating security traps sent by Radware devices to the Symantec SESA format.

Insite ManagePro Licenses

ManagePro License

The ManagePro License is provided with the Insite appliance called Insite ManagePro. Insite ManagePro extends APSolute Insites capabilities by addressing additional enterprise-grade needs such as supporting a client-server-device (3-tier) management architecture, centralizing change management, and offering role-based access control and centralized logging of changes, events and alarms. Insite ManagePro simplifies maintenance tasks, such as software upgrades and SSL certificate management, by automating the replication of these operations across multiple devices. The ManagePro license supports all features of the Security License and the previous Professional license.

Application Performance Management (APM) License

The APM License, available for a charge, can be installed over the ManagePro license. The Radware Application Performance Monitoring (APM) module extends the capabilities of your application delivery and security solutions to proactively monitor and measure end-to-end performance metrics, identify the location of bottlenecks along the application delivery path, and apply network and application-level remediation techniques. The following two tables summarize the features available with each license type:

APSolute Insite Stand-Alone Feature Licenses

Standard License Plug-in License Security License

Basic

Traffic Redirection

HMM

BWM

App Sec

HP OpenView Integration Automatic signature update


Standard License Plug-in License Security License

Site Map Alerts CA Unicenter Integration Security reporting (using MySQL database)

Offline Configuration IBM Tivoli NetView Integration

Templates Symantec SESA Integration

Performance Statistics

Scheduler

Site Explorer

Device Level User Management

Auditing

Enhanced Statistics

Insite ManagePro Feature Licenses

Standard License APM

Basic

Traffic Redirection

HMM

BWM

App Sec

APM Configuration and reporting

Site Map Alerts

Offline Configuration

Templates

Performance Statistics

Scheduler

Site Explorer

Device Level User Management

Auditing

Macros

Multi-device SW version upgrades

Enhanced Statistics

AppXcel and CertainT100 Clustering

Perform action on trap

Virtual tunneling Clusters

Automatic signature update

Security reporting (using MySQL database)


Appendix A: License Descriptions

10 Gig License

License Description Platform

10G-enabled Enables use of 10 GB port, requires 10 GB physical module

AS3, AS5

AppDirector Licenses


appdirector Basic AppDirector license AS1, AS2, AS4, AS5, ODS VL, ODS1, ODS2, ODS VL XL, ODS1 XL, ODS2 XL, ODS3, ODS3 XL

appdirector-100 Entry Level AppDirector (100 Mbps)

AS1

Additional Options

License Keyword Description Platform

cookie Cookie persistency license. Provided automatically for ROW, only by specific request to US.

AS1, AS2, AS4, AS5, ODS VL, ODS1, ODS2, ODS VL XL, ODS1 XL, ODS2 XL, ODS3, ODS3 XL

global Global load balancing functionality support

AS1, AS2, AS4, AS5, ODS VL, ODS1, ODS2, ODS VL XL, ODS1 XL, ODS2 XL, ODS3, ODS3 XL

bwm-ips Support for APSolute OS modules BWM and IPS on pre-2.30 versions

AS1, AS2, AS4, AS5, ODS VL, ODS1, ODS2, ODS VL XL, ODS 1 XL, ODS 2 XL, ODS3, ODS3 XL

dos Support for APSolute OS modules DoS Shield and BDoS on pre-2.30 versions, requires BWM and IPS license

AS1, AS2, AS4, AS5, ODS VL, ODS1, ODS2, ODS VL XL, ODS 1 XL, ODS 2 XL, ODS3, ODS3 XL

bwm Support for APSolute OS Bandwidth Management on version 2.30 and up.

ODS VL, ODS VL XL, ODS1, ODS2, ODS1 XL, ODS2 XL, ODS3, ODS3 XL


License Keyword Description Platform sec Support for APSolute OS

Advanced Security on version 2.30 and up (includes DoS Shield, Behavioral DoS & Service Protection).

ODS VL, ODS VL XL, ODS1, ODS2, ODS1 XL, ODS2 XL, ODS3, ODS3 XL

tsl Support for client authentication based on Trusted-services Status List (TSL) standard ETSI TS 102 231

ODS VL, ODS1, ODS2, ODS VL XL, ODS 1 XL, ODS 2 XL, ODS3*, ODS3 XL

* - Supported only on ODS 3 hardware version 2.

Throughput Licenses


200Mbps Throughput limited to 200 Mbps.

ODS VL, ODS VL XL, ODS1


ODS VL, ODS VL XL, ODS1

1Gbps Throughput limited to 1 Gbps.

ODS VL, ODS1, ODS2, ODS VL XL, ODS1 XL, ODS2 XL


ODS VL, ODS1, ODS2, ODS VL XL, ODS1 XL, ODS2 XL

4Gbps 4 Gbps of throughput. ODS VL, ODS1, ODS2, ODS VL XL, ODS1 XL, ODS2 XL

8Gbps Throughput limited to 8 Gbps of throughput.

ODS3, ODS3 XL


ODS3, ODS3 XL


ODS3, ODS3 XL

20Gbps 20 Gbps of throughput ODS3*, ODS3 XL


SSL Licenses (AppDirector 2.0 and later)




appdirector-SSL-500 Pre 2.11.20: Up to 500 SSL TPS*

ODS VL, ODS1, ODS2

Post 2.11.20: Up to 500 SSL CPS*

ODS VL, ODS1, ODS2, ODS3

appdirector-SSL-2000 Pre 2.11.20: Up to 2,000 SSL TPS*

ODS VL, ODS1, ODS2

Post 2.11.20: Up to 2,000 SSL CPS*

ODS VL, ODS1, ODS2, ODS3**


ODS VL, ODS1, ODS2, ODS1 XL, ODS2 XL


ODS VL, ODS VL XL, ODS1 XL, ODS2 XL, ODS3*


ODS1, ODS2, ODS1 XL, ODS2 XL


ODS VL XL, ODS1 XL, ODS2 XL, ODS 3**, ODS3 XL


ODS1 XL, ODS2 XL


ODS1 XL, ODS2 XL

appdirector-SSL-25000 Up to 25,000 SSL CPS* ODS3 XL

appdirector-SSL-Unlimited Pre 2.11.20: Maximum SSL TPS* that the platform can provide

ODS1 XL, ODS2 XL

Post 2.11.20: Maximum SSL CPS* that the platform can provide

ODS3 XL

* - See Advanced SIP Services License This license allows activating advanced SIP services on the SIP Director, such as support for SIP over TCP/TLS with protocol conversion, CAC and Header Manipulation.

for explanation **- Supported only on ODS 3 hardware version 2.

HTTP Compression (AppDirector 2.0 and later)


appdirector-compression-100

Up to 100 Mbps HTTP Compression throughput

ODS VL, ODS1, ODS2, ODS3*

appdirector-compression- Up to 250 Mbps HTTP ODS VL, ODS1, ODS2,



250 Compression throughput ODS3*



ODS VL, ODS1, ODS2, ODS3*



ODS VL, ODS VL XL, ODS1 XL, ODS2 XL, ODS3*


Up to 1,000 Mbps HTTP Compression throughput

ODS VL, ODS VL XL, ODS1 XL, ODS2 XL, ODS3*, ODS3 XL

appdirector-compression-Unlimited

Maximum HTTP Compression throughput available when Hardware Compression card is installed automatically

ODS1 XL, ODS2 XL, ODS3 XL


SIP Director Licenses


sipdirector Basic SIP Director license. Supports SIP over UDP.

ODS 1

Additional Options


cookie Cookie persistency license. Provided automatically for ROW, only by specific request to US.

ODS 1

bwm-ips Support for APSolute OS modules BWM and IPS

ODS 1

dos Support for APSolute OS modules DoS Shield and BDoS, requires BWM and IPS license

ODS 1

Concurrent Calls License


sip-cc-10k Up to 10,000 concurrent ODS 1



calls and 1 Gbps throughput.

sip-cc-30k Up to 30,000 concurrent calls and 1 Gbps throughput.

ODS 1


ODS 1


ODS 1

sip-cc-1000k Up to 1,000,000 concurrent calls and 4 Gbps throughput.

ODS 1

Advanced SIP Services License


sip-adv-none

No advanced SIP services are enabled ODS 1

sip-adv-etp Extended Transport Protocol Support (TCP/TLS and protocol conversion)

ODS 1

sip-adv-atm Advanced Traffic Management (Call Access Control & Header Manipulation)

ODS 1

sip-adv-etp-atm Extended Transport Protocol Support (TCP/TLS and protocol conversion) and Advanced Traffic Management (CAC & Header Manipulation)

ODS 1


CID Licenses


cid CID ODS3, AS1, AS2, AS3, AS4, AS5

Throughput Licenses



ODS3


ODS3

16Gbps 16 Gbps of throughput. ODS3

Additional Options


bwm-ips Support for APSolute OS modules BWM and IPS. 1

ODS3, AS1, AS2, AS3, AS4, AS5

synapps Support for SynApps modules BWM and Application Security for pre-APSolute OS versions.

AS1, AS2, AS3, AS4, AS5

dos Support for DoS Shield module, requires APSolute OS BWM & IPS or SynApps license.

ODS3, AS1, AS2, AS3, AS4, AS5


synapps Support for SynApps AS1, AS2, AS3

1 APSolute OS will be supported by CID starting with version 2.26.10.

2 APSolute OS is supported by FireProof starting with version 3.35.06 and LinkProof starting with version

4.35.06.



modules BWM and Application Security for pre-APSolute OS versions.

dos Support for DoS Shield module, requires APSolute OS BWM and IPS or SynApps license.

AS1, AS2, AS3

es Support for RADIUS Accounting classification

ODS3

mes Support for Layer 7 Header Enrichment and RADIUS Accounting classification

ODS3

LinkProof Licenses


lp LinkProof ODS2, AS1, AS2, AS3, AS4

lp-100 LinkProof Entry level with 100 Mbps throughput limitation. Supported starting with 4.35.05.

AS1

lp-ROW Basic LinkProof Branch (5 Mbps throughput limitation)

CAS

lp-25 LinkProof Branch with 25 Mbps throughput limitation.

CAS

lp-JP LinkProof Branch with 50 Mbps bandwidth limitation

Obsolete was LinkProof Entry level with 50 Mbps throughput limitation, for Japan & US only!

CAS

AS1

Throughput Licenses



ODS VL


ODS VL


ODS VL, ODS2




ODS VL, ODS2

4Gbps 4 Gbps of throughput. ODS VL, ODS2


ODS3


ODS3

16Gbps 16 Gbps of throughput. ODS3

Additional Options



ODS2, CAS, AS1, AS2, AS3, AS4

synapps Support for SynApps modules BWM and Application Security for pre-APSolute OS versions.

CAS, AS1, AS2, AS3

dos Support for DoS Shield module, requires APSolute OS BWM & IPS or SynApps license.

AS1, AS2, AS3, AS4

vpn VPN gateway support CAS

cmp Compression support CAS, AS1, AS2, AS3

DefensePro Licenses

Application Licenses

License Description Platform bwm-ips Support for APSolute OS ODS2, CAS, AS1, AS2, AS3,

3 APSolute OS is supported in LinkProof starting with versions 4.35.06 and 5.10.02.



modules BWM and IPS. 3

AS4

dp-ips-bwm DefensePro standard license with IPS and BWM APSolute OS modules. 4

AS1, AS2, AS2/SME, AS3/SME AS4/SME

dp DefensePro standard license with IPS and BWM modules for pre-APSolute OS versions. Error! Bookmark not defined.

AS1, AS2, AS2/SME, AS3/SME AS4/SME

dp-50-ips-bwm DefensePro with 50M bandwidth limitation, with IPS and BWM APSolute OS modules. Error! Bookmark not defined.

AS1

dp-50 DefensePro with 50M bandwidth limitation, with IPS and BWM modules for pre-APSolute OS versions. Error! Bookmark not defined.

AS1

dp-doss-bwm DefensePro DoS Only license, including DoS Shield and SYN Protection modules (No IPS/BWM) for pre-APSolute OS versions. Error! Bookmark not defined.

For China and Russia price list only.

AS3

dp-exc-dos DefensePro DoS Only license, including DoS Shield and SYN Protection modules (No IPS/BWM) for pre-APSolute OS versions. Error! Bookmark not defined.

For China and Russia price

AS3

4 APSolute OS is supported in DefensePro starting with versions 2.44.05 and 2.52.02.



list only.

dp-100-ips-bwm-doss-bdos DefensePro with 100 MB bandwidth limitation, with IPS, BWM, DoS Shield and Behavioral DoS APSolute OS modules. Error! Bookmark not defined.

SP1


SP1


SP1

dp-600-ips-bwm DefensePro with 600 MB bandwidth limitation, with IPS and BWM APSolute OS modules. Error! Bookmark not defined.

AS4/SME

dp-1000-ips-bwm DefensePro with 1 GB bandwidth limitation, with IPS and BWM APSolute OS modules. Error! Bookmark not defined.

AS4/SME

dp-4000-ips-bwm-doss-bdos-ipv6

DefensePro with 4 GB bandwidth limitation, with IPS and BWM, DoS Shield, SYN Protection, Server Cracking, Behavioral DoS, HTTP Mitigator APSolute OS modules

ODS-3S2 IPS

dp-ips-bwm-doss-bdos-ipv6 DefensePro with NO bandwidth limitation, with IPS and BWM, DoS Shield, SYN Protection, Server Cracking, Behavioral DoS, HTTP Mitigator APSolute OS modules

ODS-3S2 IPS, AS4/SME



dp-basic-flood-bwm DefensePro with BWM, DoS Shield, SYN Protection, Server Cracking, Behavioral DoS, HTTP Mitigator APSolute OS modules.

Notes:

Signature Protection availability is determine by the existence of the SME card.

This license is available starting from version 4.22

ODS-3S2 IPS, ODS-3S1 Behavioral Protections

Throughput License ODS Platforms

License keyword Description Platform

1Gbps 1 Gbps of throughput. ODS-2

2Gbps 2 Gbps of throughput. ODS-2

3Gbps Unlimited throughput. ODS-2

4Gbps 4 Gbps of throughput. ODS-3S2

ODS-3S1

8Gbps Unlimited throughput ODS-3S2

8Gbps 8 Gbps of throughput. ODS-3S1

12Gbps Unlimited throughput ODS3-S1

Additional Options


doss Support for DoS Shield and SYN Protection APSolute OS module.

AS1, AS2, AS2/SME, AS3/SME, AS4/SME,

AS5

dos Support for DoS Shield and SYN Protection module in pre-APSolute OS versions.

AS1, AS2, AS2/SME, AS3/SME, AS4/SME

bdos Support for Behavioral Dos APSolute OS module. Requires DoS Shield module license.

AS1, AS2, AS2/SME, AS3/SME, AS4/SME,

AS5

IPv6 IPv6 support added on all SP1, AS4/SME, AS5



license types5

5 IPv6 is supported in DefensePro starting from version 3.10


AppXcel Licenses


appxcel-300-TPS-1500-CEC

AppXcel with up to 300 transactions per second and up to 1500 concurrent connections

XS1



XS1



XS1



XS1



XS2



XS2



XS3

CertainT 100 Licenses


ct100-levelX Obsolete

ct100-levelX-Y-concurrent-connections

X represents the strength of the platform; Y sets the maximum number of concurrent established connections supported.

Level 0 to 2 use the same hardware platform and can

CertainT 100



be changed by license change and memory upgrade only. To upgrade to higher levels hardware change is required.

Level 3 and 4 use the same hardware platform and can be changed by license change and memory upgrade only.

ct100-levelX-Y-TPS X represents the strength of the platform; Y sets the maximum number of transactions per second.

Level 0 to 2 use the same hardware platform and can be changed by license change only. To upgrade to higher levels hardware change is required.

Level 3 and 4 use the same hardware platform and can be changed by license change only.

CertainT 100

Alteon Licenses


Aas-slb Basic Alteon license

Alteon 2208, 2216, 2424, 2424SSL, 3408, ODS VL, ODS 2, ODS 3, VA

Global

Global Server Load Balancing license for Alteon Application Switch - Software Option


Bwm Bandwidth Management License - Software Option


Itm Intelligent Traffic Management (ITM) - Software Option


Ados

Advanced Denial of Service (DoS) Protection - Software Option


Llb

Link Optimizer license for Alteon Application Switch - Software Option



AppWall Licenses


AppWall Gateway

Web Application Firewall capabilities, Self management capabilities and Event Publisher for integration with Enterprise Management systems.

AppWall Gateway

AppWall Cluster Manager

AppWall Gateway and Cluster Manager capabilities. As a Cluster Manager the device also functions as a manager for a single AppWall cluster synchronizing polices and learned data across all the AppWall gateways in the cluster.

AppWall Cluster Manager

AppXML Licenses

License Description

Identity Management CA SiteMinder

CA SiteMinder identity adaptor

Identity Management HP Select Access

HP Select Access identity adaptor

Identity Management IBM Tivoli

IBM Tivoli Access Manager identity adaptor

Identity Management Oracle COREid

Oracle COREid identity adaptor

Identity Management RSA Clear Trust

RSA Clear Trust identity adaptor

Identity Management Sun JSAM

Sun JSAM Access identity adaptor

Identity Management WS Trust

WS-Trust Authentication Access identity adaptor

Message Queuing BEA JMS

BEA JMS messaging adaptor

Message Queuing IBM WebSphere

IBM WebSphere MQ messaging adaptor


License Description

Message Queuing Sun Java

Sun Java Message Queue adaptor

Message Queuing Tibco EMS

Tibco EMS messaging adaptor

Message Queuing Tibco RV

Tibco RV messaging adaptor

Inflight 5000 ODS Licenses

License Description

Inflight 5000 ODS Capacity rated between 250-3000 TPS - Monitor up to 50,000 users

SSL Acceleration Card Option Cavium SSL acceleration Card

Additional Options

License Description

Monitored Users (Unlimited) Capacity increase for number of Monitored users to Unlimited

Monitored Users (up to 1,000,000)

Capacity increase for number of Monitored users to 1,000,000

Monitored Users (up to 200,000)

Capacity increase for number of Monitored users to 200,000

JMS Messaging Support for JMS Messaging pump

JDBC SQL Message Support for JDBC SQL message pump

Coral 8 Stream Support for Coral 8 Stream message pump

StreamBase Pump Support for StreamBase Pump

Actimize Pump Support for Actimize Pump

ArcSight Pump Support for ArcSight Pump

SeeWhy Pump Support for SeeWhy Pump

Maxmind Enhance Geolocation

Support for Maxmind Enhance Geolocation service

Quova GeoPoint Enabler Support for Quova GeoPoint Enabler service


North America International Radware Inc. Radware Ltd. 575 Corporate Drive 22 Raoul Wallenberg St. Mahwah, NJ 07430 Tel Aviv 69710, Israel Tel: +1-888-234-5763 Tel: 972 3 766 8666

2011 Radware, Ltd. All Rights Reserved. Radware and all other Radware product and service names are registered trademarks of Radware in the U.S. and other countries. All other trademarks and names are the property of their respective owners. Printed in the U.S.A

Documents

Licensing Model