topic Re: License warning messages in Firewall and Security Management

License warning messages

the_rock — Tue, 31 Jan 2023 08:07:06 GMT

Hey guys,

Honestly, this is probably not even priority 5 issue, but its really annoying and I cant for the life of me figure out how to solve it, so hope someone may have an idea : - ). So, the gist of it that old license was expiring January 28th and though I applied brand new eval (tried this twice actually), it still shows warnings about Jan 28th, though install database and policy work fine. I checked cp.pnp, even deleted that file, same issue.

Just to make sure, I issued cpstop/cpstart, rebooted, same problem. Its R81.20 lab, mgmt and single gateway. This issue ONLY affects management, not the firewall.

I attached 4 screenshots showing licences attached to it.

Cheers and thanks in advance for any help, as always!

Re: License warning messages

Chris_Atkinson — Mon, 30 Jan 2023 14:37:16 GMT

Last time I saw something like this I used an NGSM specific eval rather than an all-in-one to resolve.

Re: License warning messages

G_W_Albrecht — Mon, 30 Jan 2023 14:43:21 GMT

Looks like a cache issue - should work as expected and be only cosmetic, but you can try sk105757: Contract or license error: "Contract entitlement check failed"/ "Contract is expired"/ "License is expired" during policy installati to make ECRS happy...

Re: License warning messages

the_rock — Mon, 30 Jan 2023 15:05:55 GMT

Hey Guenther,

Thanks for that. I did actually do that sk right after I noticed the issue, but sadly, did not help.

Andy

Re: License warning messages

the_rock — Mon, 30 Jan 2023 15:06:59 GMT

Hey Chris,

Apologies for my ignorance, but if I lived 1000 years, I would never figure out CP licensing. How would I go about generating the license you mentioned? Happy to give it a shot.

Re: License warning messages

G_W_Albrecht — Mon, 30 Jan 2023 15:08:58 GMT

As cplic print is correct this should be cosmetic only.

Re: License warning messages

Chris_Atkinson — Mon, 30 Jan 2023 15:21:14 GMT

Choose "Other" on the eval page then select from the Management section.

Re: License warning messages

G_W_Albrecht — Mon, 30 Jan 2023 15:22:45 GMT

Management Only -

Re: License warning messages

Chris_Atkinson — Mon, 30 Jan 2023 15:27:25 GMT

Yes choose the latter of those two.

Remove the previous eval.

Re: License warning messages

the_rock — Mon, 30 Jan 2023 15:27:27 GMT

Thanks guys, I found it before it was mentioned here. Did apply it...do I need to do cpstop/cpstart or reboot or just wait patiently? : - )

Re: License warning messages

the_rock — Mon, 30 Jan 2023 15:59:31 GMT

Did that, even rebooted, same problem. I dont get it... : - )

Re: License warning messages

the_rock — Mon, 30 Jan 2023 16:16:48 GMT

K, so just to clarify, here is what I tried so far,but exact same issue. As Guenter said, it is purely cosmetic, but I find it very odd, as R81.20 is the first version I have this problem, never before:

1) did sk suggested

2) rebooted both gw and mgmt

3) applied license you guys suggested and rebooted mgmt only

4) installed database and policy, rebooted both again

5) removed old all in one eval, rebooted mgmt only

6) installed policy and database, same problem

Andy

Re: License warning messages

_Val_ — Tue, 31 Jan 2023 08:04:21 GMT

What is "annoying" is that you complain about a cosmetic issue with EVAL licenses and that you cannot embed your screenshots so people can view them gracefully. 🙂 No worries, I will fix it for you in a moment.

It is normal to have a warning about the eval license which is about to expire. We expect you not to use a series of them in production, and if it is a lab, no need to complain either, in my book.

You could remove the "offending" license with cplic print del -x to fix it.

Re: License warning messages

G_W_Albrecht — Tue, 31 Jan 2023 08:23:06 GMT

Second that - I think it is OK to try to fix it, but as this is not production (with picky customer) i would not waste much time as all is working as expected, except a warning in the very new SmartDashboard license view...

For customers i would have a certain debug plan including maintenance window to stop the nagging 8)

Re: License warning messages

Chris_Atkinson — Tue, 31 Jan 2023 08:28:57 GMT

Note unless removed/cleansed, the license with the nearest valid expiry date is always enforced until the rollover date. Newer evals don't just override them instantly. But seems multiple aren't attached here in the screenshots?

Re: License warning messages

the_rock — Tue, 31 Jan 2023 11:39:05 GMT

Correct, there is only 1 I attached yesterday, expiring March 1st.

Re: License warning messages

the_rock — Tue, 31 Jan 2023 11:43:21 GMT

I cant remove license thats nowhere to be found with cplic del -x command. If I run cplic print, it only shows one expiring March 1st, thats it. And no Val, Im NOT complaining, Im simply trying to fix something very simple :-).

Re: License warning messages

PhoneBoy — Wed, 01 Feb 2023 00:57:25 GMT

When applying new evals, cplic put -o is your friend.
It will erase all existing licenses and put the new one in.
Obviously do this with your management license, then add in the gateway licenses.

Re: License warning messages

the_rock — Wed, 01 Feb 2023 01:00:38 GMT

Thanks phoneboy...ok, again, apologies for my ignorance about licensing, what is the best way to do it with that command? cpolic put -o and then the license string?

Re: License warning messages

the_rock — Wed, 01 Feb 2023 01:25:10 GMT

K, did that...regenerated gw license too, pushed policy, installed database, rebooted both...no luck. I am positive at this point there has to be something thats "stuck" in the database that thinks this license that expired January 28 is still active. Im just not sure how to get rid of it. I even followed process from below link and same problem.

https://community.checkpoint.com/t5/Security-Gateways/License-about-to-expire-but-Expiration-Date-in-the-past/td-p/129934

Do these steps on the Security Management server:

Delete $CPDIR/database/EntMgr_DB.xml >> mv $CPDIR/database/EntMgr_DB.xml $CPDIR/database/EntMgr_DB.xml.org
Run: # psql_client monitoring postgres -c "DELETE FROM entitlement WHERE 1=1;"
cpstop;cpstart

The SQL command is to remove the stuck evaluation license from the MGMT database.