topic Query on Subscription expired and Blade functionality in Firewall and Security Management

Query on Subscription expired and Blade functionality

Prabulingam_N1 — Wed, 15 Apr 2020 05:16:56 GMT

Dear CheckMates,

I have below query from a customer, would like to know inputs on below.

Customer Account/Blade Subscription is expired & Only their Support Subscription is under valid period.

1-Which Blade will function even after Expired Subscription properly?

2-Which Blade will not function and if there is any grace period, how long?

3-What will be the impact on those blades (Functioning & Non-Functioning blades)

4-If the blades are expired, will the Firewall/Mgmt server work as per older database which had previously been updated?

5-If the latest policy installed after the Subscription expired, what will be the effect?

Regards, Prabulingam.N

Re: Query on Subscription expired and Blade functionality

PhoneBoy — Wed, 15 Apr 2020 17:07:07 GMT

App Control and URL Filtering: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk56300
IPS: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk44175

Most blades require a contract to operate, Firewall, VPN, and Mobile Access do not.
IPS has a 60-day grace period, other blades do not have a grace period.
When the contract/grace period expires, the blades will still be active and the previous configured policy will remain.
However, no configured policy related to these blades will be enforced by the gateway.

Firewall, VPN, and Mobile Access are (generally) perpetually licensed and will continue to operate provided the license is not expired.
Firewall rules related to specific App Control or URL Filtering signatures will not be enforced if there is no active contract for these features.
If the firewall blade expires, you can expect traffic to stop passing.

Re: Query on Subscription expired and Blade functionality

Timothy_Hall — Sun, 05 Mar 2023 18:06:49 GMT

Looks like R81.10 Jumbo HFA 93+ has added a 90-day licensing grace period for Compliance/SmartEvent & APCL/URLF/TEX features.

PRJ-43895, PMTR-89750	Security Gateway	NEW: We have extended the grace period of Compliance blade to support you for 90 days following contract expiration to continue providing the best security value during the renewal process.
PRJ-43807, PMTR-89699	Application Control, URL Filtering	NEW: We have extended the grace period of Application Control and URL Filtering blade to support you for 90 days contract expiration to continue providing the best security value during the renewal process.
PRJ-44255, PMTR-90165	Threat Extraction	NEW: We have extended the grace period of Threat Extraction blade to support you for 90 days following contract expiration to continue providing the best security value during the renewal process.
PRJ-43910, PMTR-89774	SmartView	NEW: We have extended the grace period of SmartEvent blade to support you for 90 days following contract expiration to continue providing the best security value during the renewal process.