topic Re: Cloudguard Management Server in Azure - EVAL License in Cloud Firewall

Cloudguard Management Server in Azure - EVAL License

Prabulingam_N1 — Wed, 07 Apr 2021 07:48:00 GMT

Dear Team,

I had deployed CG in Azure with below setup:

1) Deployed CheckPoint Management Server (R80.40)

2) Deployed CG VMSS in Azure (R80.40) with 1 instance only

As the trial period ended, I want to use EVAL License (30day) for above both Management server & VMSS (1 instance only)

I had created "All-in-one-EVAL" and attached via SmatrUpdate.

Both Mgmt server & VMSS Instance got updated and "cplic print" also shows 30day Trial.

But unable to login to SmartConsole - says Trial expired and need to add New License.

Also I tried EVAL for only Management Server in "OtherProducts". still unable to login to SmartConsole.

Any assistance please.

Regards, Prabu

Re: Cloudguard Management Server in Azure - EVAL License

vinceneil666 — Wed, 07 Apr 2021 09:11:51 GMT

After you have added the lic to the management server - have you tried doing a cpstop;cpstart ? I know this was an issue for R80.10.

Re: Cloudguard Management Server in Azure - EVAL License

Prabulingam_N1 — Wed, 07 Apr 2021 09:20:33 GMT

We restarted Mgmt VM and added New EVAL License..No luck

Re: Cloudguard Management Server in Azure - EVAL License

vinceneil666 — Wed, 07 Apr 2021 10:03:12 GMT

Add the eval ... then from cli : run cpstop, then cpstart

Re: Cloudguard Management Server in Azure - EVAL License

Prabulingam_N1 — Fri, 09 Apr 2021 14:20:41 GMT

No luck.

Any one have idea how to use 30 day All-in-one Mgmt server License on CheckPoint CG Management Server in Azure?

Regards, Prabu

Re: Cloudguard Management Server in Azure - EVAL License

ABosinceanu — Thu, 18 Aug 2022 14:09:05 GMT

Hi all,

I encounter the exact same issue.

Licenses loaded via ssh and installed with cplic put & db_add **** but nothing is working.

Performad cpstop, cpstart, reboot...nothing works.

Please advice us how to overcome this issue.

Best wishes,

Andrei

Re: Cloudguard Management Server in Azure - EVAL License

Chris_Atkinson — Thu, 18 Aug 2022 14:38:06 GMT

Can you please share the output of "cplic print" from the system?

Re: Cloudguard Management Server in Azure - EVAL License

ABosinceanu — Fri, 19 Aug 2022 08:16:39 GMT

Result for #cplic print

Host Expiration Features
Public IP 17Sep2022 CPSB-DMN-U
Public IP 17Sep2022 CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150
Public IP 17Sep2022 CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT

Re: Cloudguard Management Server in Azure - EVAL License

Chris_Atkinson — Fri, 19 Aug 2022 11:11:11 GMT

The "Public IP" matches the same IP as assigned to the Management interface?

sms-azure> show management interface

ethX

sms-azure> show interface ethX ipv4-address

ipv4-address X.X.X.X/YY

Re: Cloudguard Management Server in Azure - EVAL License

Nir_Shamir — Mon, 22 Aug 2022 05:39:42 GMT

The IP Address of the license should be the private IP of the management Server.

Re: Cloudguard Management Server in Azure - EVAL License

ABosinceanu — Mon, 22 Aug 2022 07:24:02 GMT

Thank you very much @Chris_Atkinson @Nir_Shamir , generating the new licence on the private IP of the sms solved the puzzle.

After uploading the new license file on the sms and mount it with "cplic put" I had to list all licenses with "cplic print -x" and remote the old licenses(the ones using the public IP of the sms) using "cplic del <<signature of the targeted license to delete>>".

After removing all old licenses, the new licenses did their job.

Thanks!