topic Re: Reactivate Firewall in Firewall and Security Management

Reactivate Firewall

clinton1 — Tue, 30 May 2023 12:25:58 GMT

As a troubleshooting step, I have decided to reactivate my checkpoint license. The purpose is to regenerate inactive components like threat extraction and content awareness which have remained inactive since the license was purchased. What is the best approach to reactivating an already existing checkpoint license and what are the perks if any? Thanks.

Re: Reactivate Firewall

the_rock — Tue, 30 May 2023 12:45:16 GMT

Not sure I understand what you mean by reactivate the license statement? Is the license still valid, ie expiry date? If the license is valid, I personally dont see an issue with any of this.

Andy

Re: Reactivate Firewall

Tal_Paz-Fridman — Tue, 30 May 2023 13:19:26 GMT

Check Point product licenses apply to two types of products (blades):

Permanent Blades like Firewall (CPSB-FW), IPSec VPN (CPSB-VPN) etc. - these licenses are valid indefinitely (perpetually)

Service Blades like Anti-Virus (CPSB-AV), Anti-Bot (CPSB-ABOT) etc. - these licenses need to be renewed in order to work and to download updates.

Obviously renewing Services Blades – Threat Prevention ones like IPS, Anti-Virus, Anti-Bot, Threat Emulation, Threat Extraction, Zero Phishing and Access Control ones like Application Control and URL Filtering will greatly improve your protection again a wide variety of threats.

Re: Reactivate Firewall

clinton1 — Tue, 30 May 2023 13:48:47 GMT

Thanks for your response.

let me be more clear. I run a permanent IPS license which expires on September 30th. The issue is ever since the license was purchased, both threat extraction and content awareness licenses remained inactive. So as a troubleshooting step, someone suggested that maybe the threat extraction and content awareness will become active once the license is reactivated. It's kind of a worry for me because I don't want to disrupt the firewall.

Re: Reactivate Firewall

clinton1 — Tue, 30 May 2023 13:51:15 GMT

See inactive components in the screenshot for a better understanding

Re: Reactivate Firewall

the_rock — Tue, 30 May 2023 13:51:26 GMT

Just for context, below is full eval license with everything available, so you can compare to see what matches on your end

Andy

[Expert@quantum-firewall:0]# cplic print
Host Expiration Features
172.16.10.205 9Jun2023 CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-F9F160D43D1D

Re: Reactivate Firewall

Chris_Atkinson — Tue, 30 May 2023 14:17:22 GMT

More Information is needed...

Please share the "cplic print" output from the gateway CLI and a screenshot of the blades tab from the gateway object properties in SmartConsole.

Re: Reactivate Firewall

the_rock — Tue, 30 May 2023 14:28:40 GMT

Based on what you sent, I checked my lab and would confidently say you are good to go.

Andy

Re: Reactivate Firewall

clinton1 — Tue, 30 May 2023 15:55:21 GMT

when a license shows available but not active just like we see from the screenshot you shared, what can be done to make them active ? my reasons for all this in the first place. I presume all licenses should be active since they were all paid for.

see the cplic print output below

Re: Reactivate Firewall

the_rock — Tue, 30 May 2023 16:05:56 GMT

Im 100% positive what it means is that they are available, but NOT activated yet. Reason I say this is because I verified on my gateway and all the ones showing green are enabled, see below

Andy

[Expert@quantum-firewall:0]# enabled_blades
fw vpn cvpn urlf appi ips identityServer SSL_INSPECT mon
[Expert@quantum-firewall:0]#

As you can see, blades I have enabled are:

vpn

mobile access

URL filtering

app control

IPS

Identity awareness

https inspection

and monitoring

Re: Reactivate Firewall

clinton1 — Tue, 30 May 2023 19:03:54 GMT

Thank you for the feedback.

But if that is the case can you kindly suggest steps for me to activate threat extraction and content awareness blades. Since you suggest that would suffice for solving the problem.

Re: Reactivate Firewall

the_rock — Tue, 30 May 2023 19:17:32 GMT

I would confirm 100% with Account services team, but Im 99% sure this is all you need to do (enable and install policy)

Andy