You are here

License parameters

OLD: Affects product: 
Airlock WAF

Calculate the license dimension
 

Number of applications

An application in reference to the license is the combination of a backend IP address and used port. Thus, the number of applications is defined as the sum of used ports per backend IP address. See the following examples and the general formula below.

Examples:

  • 1 backend IP address with used ports 80 and 8080 --> 1 IP * 2 ports = 2 license relevant applications
  • 2 backend IP addresses, on one IP are used two ports, 80 und 8080, on the other IP is used just the port 80 --> (1 IP * 2 ports) + (1 IP * 1 port) = 3 license relevant applications
  • 3 backend IP addresses, on one IP are used port 80, 8080 and 8081, on the second are used port 80 and 443 and on the third are used the ports 9080, 9081, 9082 and 9083 --> (1 IP * 3 ports) + (1 IP * 2 ports) + (1 IP * 4 ports) = 3+2+4 = 9 license relevant applications
  • 2 backend IP addresses, on both IP's are user 80 and 81 --> (1 IP * 2 ports) + (1 IP * 2 ports) = 4 license relevant applications

General formula:

Number of applications = (IP 1 * number of ports per backend IP 1) + (IP 2 * number of ports per BE IP 2) + ... + (IP n * number of ports per BE IP n) = ∑(1 IP * number of ports per BE IP) = ∑(number of ports per backend IP)

Number of concurrent authenticated sessions

This parameter defines how many authenticated sessions are expected at the same time. If this value is reached, Airlock sends an alert message to a possibly predefined notification channel. No sessions will be blocked as long as the grace margin is not reached. The grace margin is part of the license and usually calculated as follows:

  • +100% up to 100 licensed concurrent authenticated sessions
  • +50% up to 1000 licensed concurrent authenticated sessions
  • +20% from 1000 licensed concurrent authenticated sessions

If the number of licensed concurrent authenticated sessions is permanently is reached, please ask for a license upgrade at Airlock Sales Management

Different types of licenses

Standalone license

A standalone license consists of the AL-CORE (Airlock Web Application Firewall Core) and the optional AL-AE (Airlock Authentication Enforcement) part. The AL-CORE part depends on the number of applications, which has to be calculated first with the formula above. If the Airlock Authentication Service is used, it is necessary to expand the license to AL-AE. The AL-AE size depends on the number of concurrent authenticated sessions (also see above). In the following tables are listed all AL-CORE and AL-AE types. All combinations of AL-CORE and AL-AE types are possible. For all pricing information please ask our Airlock Sales Management.

Application Security Gateway
Modules

Max. Number of Applications

Airlock Core 1

1

Airlock Core 2

2

Airlock Core 4

4

Airlock Core 8

8

Airlock Core 16

16

Airlock Core 32

32

Airlock Core 64

64

Airlock Core 128

128

On request

>128

 

Authentication Enforcement
Modules

Max. Number of concurrent sessions

Airlock AE 10

10

Airlock AE 100

100

Airlock AE 500

500

Airlock AE 1000

1’000

Airlock AE 2000

2’000

Airlock AE 5000

5’000

Airlock AE 10000

10’000

To license any other AL-CORE or AL-AE types or its combination ask Airlock Sales Management.

If a test system is permanently used e.g. for integration tests , it is necessary to order a test license. The price of a test Airlock license is 10% of the first productive Airlock software license fee.

Failover cluster license

In case of using a high available Airlock failover cluster, it is necessary to order an additional HA (High Availability) Airlock license. The HA license is 40% of the first Airlock software license fee.

Loadbalanced cluster license

To license a loadbalanced system, it depends on the number of loadbalanced Airlock cluster members in the corresponding environment. Please contact Airlock Sales Management for further information.

Additional Modules

In addition it is possible to license one or more of the following Airlock modules. Pricing details are available from our Airlock Sales Management.

  • SSL VPN Module
    (Requires AL-CORE and AL-AE)
  • SOAP/XML Module (incl. ICAP Module)
    (Requires AL-CORE)
  • ICAP Module
    (Requires AL-CORE)
  • Graphical Reporting Module
    (Requires AL-CORE)
  • Authentication Service Module
    (Requires AL-CORE)
  • Kerberos Agent
    (Requires AL-CORE and AL-AE)
  • Application Portal
    (Requires AL-CORE and AL-AE)

Product/Software specification

The complete software specification schema of an Airlock system is designated as:

Product Number

Software Modules

Description

AL-CORE-4
AL-AE-500

Airlock Core 4
Airlock AE 500

Productive Airlock for 4 applications, 500 concurrent sessions.

AL-CORE-2
AL-AE-100
AL-SSL-VPN

Airlock Core 2
Airlock AE 100
Airlock SSLVPN

Airlock with SSL VPN for 2 applications and 100 concurrent sessions.

AL-CORE-2-Test
AL-AE-1000-Test
AL-SSL-VPN-Test

Airlock Core 2
Airlock AE 1000
Airlock SSLVPN

Non-productive Test Airlock with SSL VPN for 2 applications and 1000 concurrent sessions.

AL-CORE-2-HA
AL-AE-500

Airlock Core 2
Airlock AE 500

Additional High Availability Airlock for 2 applications and 500 concurrent sessions.

Knowledge Base Categories: