topic Re: Cloudguard NSX - Licensing Issues in Cloud Firewall

Cloudguard NSX - Licensing Issues

Supporto_Checkp — Fri, 12 Nov 2021 18:07:08 GMT

Hi

I hope that is a stupid question but I've problem licensing my cloudguard cluster

I've imported ( and attached with loudguard_config utils from cli) the license.
it's correctly attached to the right cluster/service

Cluster Name: PROD-NSX
Attached licenses details:
'xxxxxxx never CPSG-VSEC-NSX+16 CPSB-FW CPSB-VPN CPSB-IA CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT xxxxxxxxxxxxx

Available Sockets for use: 16
Required Sockets for selected cluster: 12
Attached Sockets for selected cluster: 0

WARNING the following instances have no license:
serviceinstance-2-b76bec hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7546b hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7253f hosted by yyy.xxx.local l requires 2 Sockets.
serviceinstance-2-b724f3 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b78d88 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b73543 hosted by yyy.xxx.local requires 2 Sockets.

Why it doesn't distribute the license to the cluster member under that service? in this situation I can't install policies.

is there a way to force the "attaching" of the core to all the cluster members?
thx

Re: Cloudguard NSX - Licensing Issues

Nir_Shamir — Sun, 14 Nov 2021 09:53:23 GMT

Hi,

is this NSX-V or NSX-T ?

thanks.

Re: Cloudguard NSX - Licensing Issues

Shay_Levin — Sun, 14 Nov 2021 10:52:22 GMT

It’s not clear how you distribute the licenses – are you using central license ?

Re: Cloudguard NSX - Licensing Issues

Supporto_Checkp — Mon, 15 Nov 2021 08:17:13 GMT

NSX-V

Re: Cloudguard NSX - Licensing Issues

Supporto_Checkp — Mon, 15 Nov 2021 08:27:18 GMT

I simply loaded a new license in smart update and then used "cloudguard config" to attach it the correct cloudguard cluster.

If I use "vsec_lic_cli" it can see only my AWS Checkpoint Cluster ( and manage correctly their licenses ) but not any NSX Cloudguard Cluster

Re: Cloudguard NSX - Licensing Issues

Shay_Levin — Mon, 15 Nov 2021 08:35:25 GMT

I don't know what version are you using, there is a difference between the versions and the supported license utilities

Check the SK : https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk109713

It's all explained in it.

Let us know if it solved your isuue.

Re: Cloudguard NSX - Licensing Issues

Nir_Shamir — Mon, 15 Nov 2021 10:37:36 GMT

Hi,

try running the command "vseclic" to redistribute the license.

Re: Cloudguard NSX - Licensing Issues

Supporto_Checkp — Mon, 15 Nov 2021 10:45:35 GMT

MDS 80.40 T126
Reg Hotfix 80.40 v7 T12
NSX-V Vsec R80.10 on esxi hosts.

vsec_central_license ( vsec_lic_cli) doesn't work for NSX-V Gateway ,for that I have to use "cloudguard_config" ....and it seems to work for the first part : attach the license to che correct NSX Cluster,but then ... no core license are assigned to the single hosts member of that cluster

Available Sockets for use: 16
Required Sockets for selected cluster: 12
Attached Sockets for selected cluster: 0

Re: Cloudguard NSX - Licensing Issues

Daniel_Mirkin — Mon, 15 Nov 2021 12:29:42 GMT

Hi,

Please see the following:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk118672

...

Symptoms

License is not attached to all members of vSEC for NSX cluster.

...

Re: Cloudguard NSX - Licensing Issues

Supporto_Checkp — Mon, 15 Nov 2021 12:54:16 GMT

i've already followed but i've not any duplicate license in the DB...

Re: Cloudguard NSX - Licensing Issues

Daniel_Mirkin — Mon, 15 Nov 2021 13:10:10 GMT

If you also followed all the suggestions in

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111060&partition=Advanced&product=CloudGuard

and

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk112523&partition=Advanced&product=vSEC

I suggest to contact Technical Support then.

Re: Cloudguard NSX - Licensing Issues

Supporto_Checkp — Mon, 15 Nov 2021 16:51:54 GMT

hi,
i've opened a case ...let'see.
With a demo everything works like a charm.