Kerio Tech Firewall6, Administrator'S Manual

Page: 43 / 404

4.6 User counter
43
The following items are considered as clients:
1. All hosts from which users are connected to the firewall
2. All clients of the WinRoute’s proxy server (see chapter 8.4 )
3. All local hosts communication of which is routed between Internet interfaces and
WinRoute’s local interfaces. The following items belong to this group:
• Each host which is connected to the Internet while no user is authenticated from
the host,
• All local servers mapped from the Internet,
• All VPN clients connected to the local network from the Internet.
Licenses are not limited by:
• DNS requests handled by DNS Forwarder ( Warning : If clients use a DNS server located
outside the local network, such communication is considered as communication with
the Internet),
•
DHCP traffic (using either the WinRoute’s DHCP server or another DHCP server in-
stalled on the WinRoute host),
• Local communication between the firewall (e.g. access to shared disks) and hosts from
which no user is connected to the firewall.
License release
Idleness time (i.e. time for which no packet with a corresponding IP address meeting all
conditions is detected) is monitored for each record in the table of clients. If the idleness time
of a client reaches 15 minutes, the corresponding record is removed from the table and the
number of licenses is decreased by 1. Released license can be used by another host.