156-315.81 · Question #666
Where is the license for Check Point Mobile users installed?
The correct answer is D. The Security Management Server. The license for Check Point Mobile users is installed on the Security Management Server. Check Point Mobile is a client application that allows remote users to securely access corporate resources from their mobile devices. To use Check Point Mobile, you need to have a valid…
Question
Where is the license for Check Point Mobile users installed?
Options
- AThe Primary Gateway
- BThe Standby Gateway
- CThe Endpoint Server
- DThe Security Management Server
How the community answered
(50 responses)- A16% (8)
- B2% (1)
- C6% (3)
- D76% (38)
Explanation
The license for Check Point Mobile users is installed on the Security Management Server. Check Point Mobile is a client application that allows remote users to securely access corporate resources from their mobile devices. To use Check Point Mobile, you need to have a valid license for the Mobile Access Software Blade on the Security Management Server. The license determines the number of concurrent users that can connect to the Security Gateway using Check Point Mobile. You can view and manage the license from the SmartConsole or the CPUSE
Topics
Community Discussion
4
Bao N.May 17, 2026The answer is D, the Security Management Server, because that is where all Check Point licenses are centrally managed and activated, including licenses for Mobile Access and remote user connectivity. The gateways themselves enforce the policy but they pull their license entitlements from the SMS, so if you try to anchor that license anywhere else you will find it simply does not work.
Yusuf A.May 22, 2026I went with A right away because the gateway is what actually handles the VPN tunnel, so it made sense to me that the mobile user license would live there too. But my senior walked me through SmartConsole last week and showed me how you pull up the license view in SmartUpdate, and all those user licenses sit on the Security Management Server, not the gateway. The gateway enforces the policy but it does not hold the count, the management server is what tracks and validates how many mobile users are licensed. So the answer is D, and now I think of it as the management server being the brain that owns the license while the gateway is just the muscle that enforces it.
Amara A.May 21, 2026I almost went with A because you instinctively think the gateway is handling the mobile connections, but the license lives on the Security Management Server, not on the gateway itself. The gateway enforces the policy, the management server holds the entitlements, and that distinction is what the question is really testing.
Yusuf A.May 23, 2026Exactly right, and the follow-up worth remembering is that the SmartCenter or SMS also handles the CRL checks and certificate revocation for those mobile clients, so even the trust validation for the endpoint tunnels routes back through management, not the gateway.