topic Re: License question in Firewall and Security Management

License question

the_rock — Wed, 18 Dec 2024 14:15:38 GMT

Hey guys,

I wanted to ask this, as client mentioned to me last week and though Im 99% sure its not possible, or at least no supported way of doing it, but wanted to confirm.

They were asking if its possible at all to get rid of those license warnings in smart console (week before for eval and 30 days for regular license)? I personally never heard of that being possible or anyone asking that question, ever (at least not to me) : - )

I checked guidbedit, but below are all the options I found. Thoughts?

Tx as always.

Andy

Re: License question

the_rock — Wed, 18 Dec 2024 14:23:04 GMT

Btw, I just did this in my lab, but have to wait now till January to see if warnings do show up...

Andy

Re: License question

Tal_Paz-Fridman — Wed, 18 Dec 2024 16:47:11 GMT

If you are referring to the warnings displayed before installing a policy, it is unlikely that they can be ignored. This is because addressing these issues is essential to ensure the Security Gateway remains functional.

As a bypass, you can consider installing the policy via the SmartConsole CLI or the Management server using the mgmt_cli tool.

Re: License question

the_rock — Wed, 18 Dec 2024 17:05:34 GMT

Thank you Tal! I sort of figured it was not possible, but glad you confirmed.

Best,

Andy

Re: License question

PhoneBoy — Wed, 18 Dec 2024 18:35:12 GMT

Along these lines, I've noticed a change in behavior for R82.

Specifically, I can still log into SmartConsole and see/modify the configuration even though my evaluation license is expired.
Pushing policy results in an error since I don't have a license.
However, this wasn't possible in earlier versions.

Re: License question

the_rock — Wed, 18 Dec 2024 18:40:36 GMT

Had to delete my R82 lab for some other stuff I had to do, but thats interesting, will test when I create it again in the future. But, correct me if Im wrong, was it not always the case even if the license is expired you can MODIFY the config in dashboard,you just could not push the policy?

Andy

Re: License question

PhoneBoy — Wed, 18 Dec 2024 19:09:11 GMT

SmartConsole would give you an error if you tried to log into SmartConsole informing you that a license was needed.
Further, the API would not allow you to log in.
Both of those things appear to be allowed in R82 if you have an expired license.

Re: License question

the_rock — Wed, 18 Dec 2024 19:15:26 GMT

Ah, I see what you mean now, makes sense. Interesting thats different in R82. But then again, even if you log in and make changes, its sort of pointless if you cant install policy : - )

Andy

Re: License question

PhoneBoy — Thu, 19 Dec 2024 19:02:21 GMT

Maybe it's just a 7-day "grace period" because I got this today when I logged into my system 😉

Re: License question

the_rock — Thu, 19 Dec 2024 19:03:51 GMT

All I can say is this...LEGEND @PhoneBoy deserves lifetime eval licenses for his labs 🙂

Andy

Re: License question

PhoneBoy — Thu, 19 Dec 2024 21:02:39 GMT

30-day evals don't require paperwork and are fairly easy to generate. 😉

Re: License question

the_rock — Thu, 19 Dec 2024 22:40:18 GMT

Yup!

Re: License question

Amir_Senn — Sun, 22 Dec 2024 12:20:30 GMT

If this is your lab you can play with date and time to check this without waiting.

Re: License question

the_rock — Sun, 22 Dec 2024 12:38:53 GMT

you mean change date to say 2026 for example?

Re: License question

Amir_Senn — Sun, 22 Dec 2024 13:12:01 GMT

Depending how gentle you want to go with it but yes.

Myself, when needed to do some manipulation like this, I go a bit more careful. For example, some things are triggered on midnight so when I want to move to a specific date I always will first put 11:59 PM of the day before.

Also I find it best to move clocks of entire env, not just a specific server.

I the env is needed for other stuff I would suggest a hard drive snapshot beforehand.