Licence Violation

[damien]

Hi

I'm using Wingate 8.5.4 with a 6 concurrent users licence.
We are using Wingate as a web proxy/mail server in a small home network

We are 4 users here, so i thought that a 6 concurrent users will be enough but it seems that each session consume a licence even if sessions are used by the same user.

And because we all have at least one PC, 1 laptop, 1 or 2 cell phones, 1 iPad etc ... all that will connect to at least check mailboxes or get some updates.., I regulary get the message 'Licence Violation'

Is that normal ?

Will I be forced to get 12 concurrent user licence for only 4 real users ??

Best regards

[adrien]

Hi

Sometimes there is a difference of understanding about what constitutes a user. It's not necessarily a person, which WinGate cannot see, WinGate can only see connecting IPs, and sometimes authenticated user names if there is authentication even going on.

In WinGate a user is mostly an IP address, that way 2000 different IPs connecting would be 2000 users, even if they are all guest.

If you use credential rules to mark certain IPs as not inheriting credentials, then those IPs can use more than 1 license (e.g. a terminal server with multiple users).

Regards

Adrien

[damien]

So

- IP1 (User1 (Authenticated) / smartphone)
SMTP (mail fetch)

- DESKTOP1 (User1 (Authenticated))
IMAP4
TCP...

- IP2 (User1 (Authenticated))
Mail fetch from distant connexion (office/tse )

- IP3 (User1 (Authenticated))
IE on local virtual machine

I'm a lonely authenticatd user and I need 4 different licences ? Isn't there any way to group the same authenticated user on a single licence?
I really can't buy a 12 concurrent users (meaning I will also have to buy 12 users for plugins...).
What solution do I have?

Best regards

[adrien]

Hi

the problem is a lot of customers don't use authentication and so every user is the same user context (unknown or in prior versions "Guest"). So if we counted only the established credentials, then people would only ever use 1 license count even if they had 5000 people surfing.

Some services are "free" wrt licensing, for example DNS, SMTP receiver, SMTP delivery, DHCP, and Remote Control Service. So connections to these services don't consume a license.

Can you reduce the number of IPs connecting?

We're just having a discussion here about how we can help without creating too much trouble, one avenue could be reducing the limitation on the free license as to whether it can be aggregated with a paid license. Otherwise although we can certainly see where you're coming from we don't have a great solution for that particular case.

the broader impact of a proliferation of devices certainly is on our radar though, with iPads, smart phones and tvs now consuming licenses, the 3 and 6 user licenses have only a very limited usefulness.

Adrien

[damien]

Hi,

I must admit that aggregating both 6 users & free 3 users licences would be a pretty good solution (to me).

This will avoid most of our licence violations.

Hope this will be possible soon

Regards
Damien

[damien]

I'm looking on a way to reduce my licences use and i can see in client activity panel that some connexion stay active but doesn't look really 'active'...

Here's what it looks like:
IP1:
IMAP4 : account xxx mailbox Notes SEARCH
IMAP4 : account yyy mailbox Notes SEARCH
IMAP4 : account xxx mailbox INBOX FETCH
IMAP4 : account yyy mailbox INBOX FETCH

IP2:
IMAP4: account zzz mailbox INBOX FETCH

Why does these licences stay active so long ?

If I terminate session on IP1, it reconnects immediatly but only with SEARCH commands, no more FETCH.
If I terminate session on IP2, it does not reconnect. So why was it still connected ?

regards

[damien]

I found it.

I set Time out idle connectin after 30s (was 1800) on IMAP4 service and disable IDLE & ESARCH commands.

[adrien]

Hi

IMAP clients tend to remain connected. Disabling IDLE command means that clients won't notice when a new mail comes in, they'll need to poll (which I think most clients can do).

Did you try leaving IDLE and ESEARCH enabled? I'd expect the main difference would be the idle timeout.

Adrien

[damien]

Indeed, a short time out means that users doesn't receive new mail notifications anymore. But the good point is that there is no more licence violations.

I set time out value to 120s, IDLE & ESEARCH are active.