topic Re: Smart-1 Cloud + vsec_lic_cli = TAC (Inefficient Process) in Cloud Firewall

Smart-1 Cloud + vsec_lic_cli = TAC (Inefficient Process)

StackCap43382 — Sat, 04 Nov 2023 14:33:33 GMT

Opened a ticket with TAC to apply some VSEC core licenses to a SMART-1 cloud instance.

They just closed the ticket but didn't provide a core usage report resulting in having to re-open the ticket and request the report.

Other then TAC asking unnecessary questions, this process of having to engage TAC to perform any vsec_lic_cli function is frustrating.

I'm not looking forward to trying to get TAC to pool licenses and assigning firewalls to the licensing pools.

More and more customers are deploying SM1C and some have 50+ VSEC Cloud GWs.

Just like the CME, are there any plans to add vsec_lic_cli to the SM1C WebGUI?

I'd even settle for a button on the GUI that spits out the core usage report.

I can see mgmt_cli has the "show cloud-licenses-usage" call so the report functionality is there.

Re: Smart-1 Cloud + vsec_lic_cli = TAC (Inefficient Process)

Chris_Atkinson — Sun, 05 Nov 2023 23:06:11 GMT

Thanks for the feedback, please ensure that you also flag this with your local account team / SE.

Refer also:

Re: Smart-1 Cloud + vsec_lic_cli = TAC (Inefficient Process)

Tomer_Noy — Sun, 05 Nov 2023 07:58:30 GMT

Thank you for this feedback.
Indeed, having to utilize TAC for configuration needs in Smart-1 Cloud is inefficient and one of our priorities are to add public APIs or UI to enable customers to be independent.

The latest R81.20 JHF added new APIs for managing vSEC licenses, and this JHF is applied to Smart-1 Cloud tenants.
These APIs can be used from Management CLI or as REST APIs according to your preference.

You already saw the "show cloud-licenses-usage":
https://sc1.checkpoint.com/documents/latest/APIs/#cli/show-cloud-licenses-usage~v1.9.1%20

In addition, you can use the "add central-license" (since cloud licenses are of type central-license):
https://sc1.checkpoint.com/documents/latest/APIs/#cli/add-central-license~v1.9.1%20

And the "distribute cloud-licenses" to complete the process:
https://sc1.checkpoint.com/documents/latest/APIs/#cli/distribute-cloud-licenses~v1.9.1%20

Let us know if this was helpful and now solves the need without having to go through TAC.

Re: Smart-1 Cloud + vsec_lic_cli = TAC (Inefficient Process)

the_rock — Mon, 06 Nov 2023 01:25:34 GMT

All totally valid points.