topic Re: There is no domain license attached to security management in Firewall and Security Management

There is no domain license attached to security management

sidlab1584 — Wed, 21 Feb 2024 18:04:50 GMT

I am getting this error message everytime I install policy on my gateways. I am using all in one eval license on the gateway. This is not a management server , its a gateway.

Re: There is no domain license attached to security management

the_rock — Wed, 21 Feb 2024 18:14:33 GMT

Can you send output of cplic print -x from mgmt and gateway?

Best,

Andy

Re: There is no domain license attached to security management

sidlab1584 — Wed, 21 Feb 2024 18:19:43 GMT

MDS:

[Expert@MDS-01:0]# cplic print -x
Host Expiration Signature Features
172.16.31.117 22Mar2024 aukCyBGBNEEaPpdb3yEKrgKwKdmURxp9cctp cpsb-ws cpvp-snx-u-ngx cpsb-swb cpsb-adnc-m CK-B6AFBB7054DA
172.16.31.114 22Mar2024 aPb5EsPd88CbZk97vfXhuPgh58feRZRDhZVi CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-5D139D4DD87A
172.16.31.113 22Mar2024 aQoELphKQgNaWLLM8en8r3W77YGR7PTYrLAz CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | 7TPCDSN | 21Apr2024 | CPSB-TE-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
2 | JA1HMVH | 21Apr2024 | CPSB-TEX-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
3 | L6UBR6C | 21Apr2024 | CPSB-IPS-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
4 | ENRFBJJ | 21Apr2024 | CPSB-CTNT-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
5 | 34IJSYP | 21Apr2024 | CPSB-ZP-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================

Gateway"

EXT-01:

[Expert@EXT-GW-01:0]# cplic print -x
Host Expiration Signature Features
172.16.31.115 22Mar2024 a3AmUQgPRdox9NxgfHKcRxwMFm7rkzs4UHsj CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | WUZ55TK | 21Apr2024 | CPSB-TE-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA
===+===========+============+====================
2 | 6OCYDBQ | 21Apr2024 | CPSB-IPS-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA
===+===========+============+====================
3 | 06SBZHC | 21Apr2024 | CPSB-TEX-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA
===+===========+============+====================

Re: There is no domain license attached to security management

sidlab1584 — Wed, 21 Feb 2024 18:27:39 GMT

[Expert@MDS-01:0]# mdsstat

CPM: Check Point Security Management Server is running and ready

+------+--------------------+-----------------+-------------+-------------+-------------+-------------+-------------+
| Type | Name | IP address | FWM | FWMHA | FWD | CPD | CPCA |
+------+--------------------+-----------------+-------------+-------------+-------------+-------------+-------------+
| MDS | - | 172.16.31.113 | up 4273 | up 4279 | up 4271 | up 26584 | up 4887 |
+------+--------------------+-----------------+-------------+-------------+-------------+-------------+-------------+
| CMA | INT_8126_Server | 172.16.31.114 | up 2519 | up 2596 | up 2161 | up 1866 | up 4813 |
| CMA | EXT_OTT_Server | 172.16.31.117 | up 2482 | up 2666 | up 2279 | up 1946 | up 4822 |
+------+--------------------+-----------------+-------------+-------------+-------------+-------------+-------------+
Total Domain Management Servers checked: 2 2 up 0 down
Tip: Run mdsstat -h for legend

[Expert@MDS-01:0]# ^C
[Expert@MDS-01:0]# cplic print -x
Host Expiration Signature Features
172.16.31.117 22Mar2024 aukCyBGBNEEaPpdb3yEKrgKwKdmURxp9cctp cpsb-ws cpvp-snx-u-ngx cpsb-swb cpsb-adnc-m CK-B6AFBB7054DA
172.16.31.114 22Mar2024 aPb5EsPd88CbZk97vfXhuPgh58feRZRDhZVi CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-5D139D4DD87A
172.16.31.113 22Mar2024 aQoELphKQgNaWLLM8en8r3W77YGR7PTYrLAz CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B

Contract Coverage:

Re: There is no domain license attached to security management

the_rock — Wed, 21 Feb 2024 18:36:19 GMT

I will send you something shortly, just apply that and Im sure it will work.

Best,

Andy

Re: There is no domain license attached to security management

the_rock — Wed, 21 Feb 2024 18:45:06 GMT

Just emailed you, please give it a go and let us know if it works.

Andy

Re: There is no domain license attached to security management

the_rock — Wed, 21 Feb 2024 19:26:37 GMT

Considering that you proved via offline exchange its NOT standalone, I find it super odd this is failing. You mentioned it started happening AFTER rebooting the server?

Best,

Andy

Re: There is no domain license attached to security management

sidlab1584 — Wed, 21 Feb 2024 19:33:12 GMT

Yes, it happened after I removed the existing licenses as they were expiring then use all in one license on all devices including MDS , firewall. I restarted my ESXI server where I host all of them

Re: There is no domain license attached to security management

the_rock — Wed, 21 Feb 2024 19:35:39 GMT

K, sent you something else, it could be MDS ip license issue, hard to say 100%, but I have a gut feeling thats what it is...

Best,

Andy

Re: There is no domain license attached to security management

the_rock — Wed, 21 Feb 2024 20:07:28 GMT

I really hope TAC could check into it. Maybe have License folks verify the licensing side, though to me, looks right.

Best,

Andy

Re: There is no domain license attached to security management

the_rock — Wed, 21 Feb 2024 21:21:15 GMT

@sidlab1584 informed me via direct message exchanges we had that esxi was reverted via snapshot and all works fine. If you plan to apply evals again, maybe consult with Account services, they can confirm 100%.

Thanks for the update on this.

Best,

Andy

Re: There is no domain license attached to security management

the_rock — Thu, 22 Feb 2024 13:46:03 GMT

Hey mate,

Did you end up applying new licenses?

Best,

Andy