topic Re: Checkpoint Gateway don't receive license in Firewall and Security Management

Checkpoint Gateway don't receive license

MarcuzShinz — Wed, 07 Jun 2023 12:26:45 GMT

when I show cpstat os -f licensing and notice that on our Gateway device it doesn't show any blades.

Has anyone had this problem before?

Re: Checkpoint Gateway don't receive license

AkosBakos — Wed, 07 Jun 2023 12:34:09 GMT

Hi TronNQ,

Have you licensed the appliances in the usercenter?

Have you tried to put the licences manually? Eg.: #cplic put, or using the SmartUpdate?

If you do it manually, don't forget update the contract files too. You can download it from the usercenter.

And one more, the appliances have "real" internet access? Can you ping updates.checkpoint.com?

Re: Checkpoint Gateway don't receive license

MarcuzShinz — Wed, 07 Jun 2023 12:55:58 GMT

Dear Akos,

Yes, I have add license Manually, currently gateway device and managent device already expried license, i have install license EVAL, but management device have recieve EVAL license, but Gateway show like this.

Gateway device can ping updates.checkpoint.com

Re: Checkpoint Gateway don't receive license

the_rock — Wed, 07 Jun 2023 13:13:41 GMT

Please provide output of cplic print -x. Also, once you open smart update, make sure to right click on the object and then click "get licenses"

Below is example from my R81.20 lab

Andy

[Expert@quantum-firewall:0]# cplic print -x
Host Expiration Signature Features
172.16.10.205 3Jul2023 dLmx6j4auSnftt8Wgi4m8udjLSZJwc4Cywhz CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | MUVY3AG | 2Aug2023 | CPSB-IPS-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280
===+===========+============+====================
2 | 3AENF43 | 2Aug2023 | CPSB-TEX-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280
===+===========+============+====================
3 | MK7CO0K | 2Aug2023 | CPSB-TE-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280
===+===========+============+====================
4 | 69YUEAO | 2Aug2023 | CPSB-CTNT-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280
===+===========+============+====================
[Expert@quantum-firewall:0]#

Hope that helps.

Re: Checkpoint Gateway don't receive license

MarcuzShinz — Wed, 07 Jun 2023 13:44:01 GMT

Hi Bro,

This is out put cplic print -x of me, device expried license at 5may2023, if correct it will show expried at 7Jul2023 after I import license EVAL.

I think, because license table don't show blade as metinon from previous chat.

Re: Checkpoint Gateway don't receive license

MarcuzShinz — Wed, 07 Jun 2023 13:47:03 GMT

even on device's webui doesn't show any information?

Re: Checkpoint Gateway don't receive license

the_rock — Wed, 07 Jun 2023 13:47:25 GMT

Message me offline, I can generate one for you, just send the IP address.

Cheers.

Re: Checkpoint Gateway don't receive license

the_rock — Wed, 07 Jun 2023 13:50:37 GMT

I messaged you directly with proper string...just apply exactly what I sent you from expert mode and then do get licenses from smart update and let us know.

Re: Checkpoint Gateway don't receive license

MarcuzShinz — Wed, 07 Jun 2023 14:24:18 GMT

Thanks bro, i will try and let you know!

Re: Checkpoint Gateway don't receive license

the_rock — Wed, 07 Jun 2023 14:30:30 GMT

You can also do it with -o flag, BUT, that would overwrite any existing licenses, so be careful if you do that.

Andy

[Expert@quantum-firewall:0]# cplic put
Install license on local machine:
cplic put [-o overwrite] [-c check-only] [-s select] [-F <output file>] [-P pre-boot] [-k kernel-only] < -l license-file | host expiration-date signature SKU/features >

[Expert@quantum-firewall:0]#

Re: Checkpoint Gateway don't receive license

the_rock — Wed, 07 Jun 2023 14:31:02 GMT

For you bro, no charge, except Iphone charge ; - )

Re: Checkpoint Gateway don't receive license

the_rock — Wed, 07 Jun 2023 16:06:49 GMT

Hey @MarcuzShinz , any luck with what I sent you?

Cheers mate.

Andy

Re: Checkpoint Gateway don't receive license

MarcuzShinz — Thu, 08 Jun 2023 02:21:54 GMT

Hi Bro,

I have tried, but it dosen't work. it still show expried date at 5May2023.

Re: Checkpoint Gateway don't receive license

MarcuzShinz — Thu, 08 Jun 2023 02:24:05 GMT

i think the problem is probably because in os does not contain any license, cpstat os -f policy.

Re: Checkpoint Gateway don't receive license

the_rock — Thu, 08 Jun 2023 02:27:05 GMT

Honestly, I would reach out to TAC and have them verify. Something does not look quite right.

Andy

https://help.checkpoint.com

Re: Checkpoint Gateway don't receive license

MarcuzShinz — Thu, 08 Jun 2023 02:33:38 GMT

Because, the license have expried, I don't know if it is possible to open the case with TAC with this condition?

Re: Checkpoint Gateway don't receive license

the_rock — Thu, 08 Jun 2023 02:53:27 GMT

That I could not say, you can try open one online or call them and they will verify.

Andy

Re: Checkpoint Gateway don't receive license

Blason_R — Thu, 08 Jun 2023 03:56:25 GMT

Did you try to cut the licenses from your usercenter with central license and imported into Smart update and then tried attaching?

If so then contacting license support would really help as @the_rock suggested.

Re: Checkpoint Gateway don't receive license

the_rock — Thu, 08 Jun 2023 12:46:14 GMT

Im thinking maybe Account services would be best to help here.

Andy