topic Re: smart-1 cloud generate cpinfo in AI Network Firewall

smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 01:09:46 GMT

I'm currently using Smart-1 Cloud as the management server. Is it normal that there isn't a dedicated object for Smart-1 Cloud itself? The Evaluate License status appears differently in SmartConsole, the Web GUI, and the CLI. Because of this, I was asked to provide a cpinfo from the management server.

As far as I know, to generate a cpinfo, you either need to access the CLI or use SmartUpdate. However, Smart-1 Cloud doesn't allow CLI access and doesn’t support SmartUpdate. Is that correct?

Re: smart-1 cloud generate cpinfo

the_rock — Tue, 18 Mar 2025 02:13:02 GMT

Thats right, I been using S1C since 2020 and that is 100% true. If cpinfo is needed, just open TAC case and they can log in via backend using customer's tenant ID and generate a file.

Andy

Re: smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 02:21:28 GMT

I appreciate your reply thank you!

Re: smart-1 cloud generate cpinfo

the_rock — Tue, 18 Mar 2025 02:37:01 GMT

No problem. Btw, just curious, why even need for cpinfo? I never been asked for that file from S1C...what sort of problem are you having?

Andy

Re: smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 02:56:02 GMT

Because of my case this is the link

https://community.checkpoint.com/t5/Smart-1-Cloud/smart-1-cloud-license-status-cli-or-web-gui-license-status/m-p/243899#M557

I submitted a Service Request for this issue, and they requested cpinfo to investigate the problem.

I informed them that SmartUpdate is not supported on S1C, but it seemed like they were unsure about how to proceed.

Re: smart-1 cloud generate cpinfo

the_rock — Tue, 18 Mar 2025 03:08:59 GMT

Make sure to sync your account from S1C portal to verify all the licences.

Andy

Re: smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 03:29:21 GMT

Would you mind sharing the steps to sync the account if that’s okay?

Re: smart-1 cloud generate cpinfo

the_rock — Tue, 18 Mar 2025 10:38:58 GMT

I can send the screenshot later, but when you log in, click gear icon on the top and account option is there and you can sync from there.

Andy

Re: smart-1 cloud generate cpinfo

Dmitrie_Shaiman — Tue, 18 Mar 2025 11:14:54 GMT

Hi, Can you share SR number?

Re: smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 13:34:52 GMT

I have found a way to sync. However, I couldn't find any contract for the problematic firewall under Services & Contracts in the portal. It seems that the client linked the Security Gateway to S1C first and then added it to SmartConsole.

What I'm curious about is this: once the S1C and the Gateway are linked, shouldn't they communicate with each other to update the contract status of the Evaluate License in SmartConsole, reflecting the current contract status of the Evaluate License applied to the Security Gateway?

Re: smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 13:36:23 GMT

my SR number is SR#6-0004219011 Thank you for your attention to my case !

Re: smart-1 cloud generate cpinfo

the_rock — Tue, 18 Mar 2025 13:44:12 GMT

Yes and no. Gateways will communcate with the S1C via maas tunnel interface, but I dont believe that will automatically means contracts will be updated, it all depends on whats in the user center, same as with on prem.

Andy

Re: smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 13:57:57 GMT

"Could you please clarify whether applying an evaluate license to a gateway via CLI results in the information being reflected in the UserCenter? I've observed that the evaluate license details are not visible in the UserCenter, but I've also seen instances where SmartConsole does reflect the evaluate license status. This discrepancy is causing some confusion."

Re: smart-1 cloud generate cpinfo

G_W_Albrecht — Tue, 18 Mar 2025 14:08:34 GMT

This depends on using central or local licensing: In central licensing, you use SmartDashboard (or legacy SmartUpdate) to import the license & service information and distribute it to the GWs. See sk62685: What is the difference between the central and local licensing schemes?

If you just use GW WebGUI or CLI to install a licenase locally, it will be missed in SmartDashboard (or legacy SmartUpdate).

Re: smart-1 cloud generate cpinfo

Dmitrie_Shaiman — Tue, 18 Mar 2025 14:29:00 GMT

Thank you! Could you please send me the tenant ID or Service Name at dmitries@checkpoint.com? I will assist you with the TAC request.

Re: smart-1 cloud generate cpinfo

the_rock — Tue, 18 Mar 2025 14:46:33 GMT

Let us know how it gets solved.

Andy

Re: smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 23:27:41 GMT

"So, that's why the mismatch occurred. I always put an evaluate license locally on an appliance whose regular license has expired. In this process, I always create the MGMT IP 192.168.254.254 on a port (e.g., LAN5) of the GW and put the evaluate license on this IP. But most of the time, the evaluate license status in SmartConsole matches. If I explain the locally license mechanism I understand, is it correct to say that when I put it on the GW, it sends the evaluate license information to the UserCenter, and SmartConsole then retrieves and reflects the UserCenter information?"

Re: smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 23:28:56 GMT

Of course! Why not

Re: smart-1 cloud generate cpinfo

dkzndkqh — Tue, 18 Mar 2025 23:29:22 GMT

I will

Re: smart-1 cloud generate cpinfo

the_rock — Tue, 18 Mar 2025 23:33:02 GMT

So all sorted out?

Andy