TR7 Licensing Guide

Start by answering these key questions:

• Are you using TR7 internally or serving customers? Internal use → Enterprise licenses. Multi-customer service → Service Provider licenses.
• Do you prefer one-time investment or ongoing payments? One-time → Perpetual. Ongoing flexibility → Fixed-Term or PAYG.
• Is your capacity need predictable or variable? Predictable → Perpetual or Fixed-Term. Variable → PAYG.

TR7 offers significant cost advantages:

🎯 Competitive Cluster Pricing:

• Much more affordable pricing for Active-Active and Active-Passive configurations
• Competitors often charge nearly double (primary + cluster license)
• Especially affordable Active-Passive pricing for cost-effective HA

🎯 Flexible Software Bundles:

• Enterprise, Secure, GeoAccess, Geo, and Base bundles offer up to 40% savings
• Mix and match products based on actual needs
• No forced bundling of unnecessary features

📊 Quick Comparison:

Enterprise Licenses — For internal infrastructure:

• Single organization usage (can be expanded with vTenant)
• Three models: Perpetual, Fixed-Term, PAYG
• Simpler licensing structure
• All features included for internal use

Service Provider Licenses — For multi-customer services:

• Platform License (base layer) enables multi-tenancy — FREE for virtual appliances!
• Service Licenses (per customer) in Fixed-Term or PAYG models
• Complete customer isolation and per-customer billing
• Centralized management across all customers

💡 Key Advantage: Service Provider architecture allows you to offer TR7-based services to unlimited customers with proper isolation and individual billing.

ActiveOps is the access key to updates and full functionality for Perpetual licenses:

🔧 ActiveOps Provides:

• Platform Updates: New features and improvements
• Security Rule Updates: Latest threat protection
• IP Intelligence Feeds: 4 daily updates
• Full Configuration Access: Complete control

📋 ActiveOps Coverage:

• Fixed-Term & PAYG: Automatically included
• Perpetual: Optional renewal — traffic continues without it, but updates require renewal

Bundle Decision Framework:

✅ Choose Bundles If You Need:

• Enterprise Bundle (40% savings): Complete security + global traffic — ADC + WAAP + AAM + GTM + 100-endpoint ETM + 2-region CM included
• Secure Bundle (30% savings): Web security focus — ADC + WAAP + AAM + 50-endpoint ETM included
• GeoAccess Bundle: Identity-aware multi-region delivery — ADC + AAM + GTM + 25-endpoint ETM + 2-region CM included
• Geo Bundle (25% savings): Multi-datacenter routing — ADC + GTM + 2-region CM included
• Base Bundle: Foundational infrastructure + device visibility — ADC + AAM + 25-endpoint ETM included

✅ Choose Individual Products If:

• You only need 1-2 specific products
• You're starting small and scaling gradually
• You have very specific product requirements

📌 If You Need More Than the Bundled Coverage: Add the relevant add-on to increase ETM endpoint counts or extend CM region coverage. Standard L4 DDoS, L7 DDoS, and L7 Reporting coverage is already included in ADC/WAAP licenses; more is available via add-ons.

💰 Cost Example: If you need 3+ products, bundles typically save 25-40% compared to individual purchases. Start with Base and add products with credit toward bundle pricing!

TR7 offers maximum flexibility for license management:

🔄 Upgrades (Always Possible):

• Bandwidth: Increase capacity anytime with pro-rated pricing
• License Model: PAYG → Fixed-Term → Perpetual (with credit)
• Clustering: Standalone → Active-Passive → Active-Active
• Products: Add individual products or upgrade to bundles

⚖️ Mix & Match Strategies:

• Hybrid Environments: Perpetual for production + PAYG for dev/test
• Seasonal Scaling: Fixed-Term base + PAYG for peak periods
• Geographic Distribution: Different models per region/datacenter
• Multi-Product: Different bundles on different appliances

💡 Migration Path: Each TR7 appliance has its own license, allowing complete architectural flexibility without license lock-in.

TR7's graceful handling of capacity limits:

📊 Bandwidth Overages:

• Immediate: TR7 continues operating normally — no service disruption
• QoS Management: Licensed bandwidth is distributed fairly and equally among users through QoS
• Notifications: Proactive alerts when approaching limits (80%, 90%, 100%)
• Analytics: Detailed traffic reports and forecasting tools

🔧 Resolution Options:

• Purchase Upgrade: Contact sales to upgrade your bandwidth capacity with pro-rated pricing
• Optimization: Technical support helps identify optimization opportunities

💡 Best Practice: Use TR7's built-in traffic analytics to forecast growth and proactively upgrade before reaching limits. Our sales team can help design capacity planning strategies.

Optional addons for specialized requirements:

🔧 Available Addons:

vTenant (Enterprise Multi-Tenancy):

• Capacities: 1, 2, 5, 10, 25, 50, or Unlimited tenants
• Complete resource isolation (CPU, RAM, network)
• Ideal for: MSPs, enterprises with subsidiaries, departmental separation

L7 DDoS Protection:

• Capacities: 1, 10, 25, 100, 1000 vServices, or Unlimited
• Application-layer attack mitigation (HTTP floods, bots)
• Ideal for: Public-facing applications, API endpoints

L4 DDoS Protection:

• Capacities: 1, 2, 5, 10, 25 Route Tables, or Unlimited
• Network-layer protection (SYN floods, volumetric attacks)
• Ideal for: Infrastructure protection, gaming, financial services

L7 Reporting:

• Capacities: 1, 10, 25, 100, 1000 vServices, or Unlimited
• Deep application analytics and behavior insights
• Ideal for: Performance optimization, capacity planning, compliance

💡 Selection Tip: Addons are licensed per appliance. Start with base capacity and scale as needs grow!