topic Re: Lab environment - no valid license in Firewall and Security Management

Lab environment - no valid license

Johannes_Schoen — Tue, 10 Apr 2018 09:11:57 GMT

Hi,

I've built up a lab-environment on my laptop to get in touch with the checkpoint features (1 mgmt, 2 sec-gateways as cluster)
I used eval-licenses and created them with " ALL-IN-ONE EVALUATION".

I installed the licenses by using smart update to my both cluster nodes (1 license each, the management IPs are matching)

Now I try to install a policy to the cluster, but the installation fails because of "no valid licenses".

The monitor shows that the firewall module on both nodes has no license. I can verify from cli, smart update etc. that these modules are licensed:

CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150

What do I miss?

I already rebooted both nodes.

I'm really thankful about any reply.

Best Regards

Re: Lab environment - no valid license

Roman_Niewiado1 — Tue, 10 Apr 2018 09:27:36 GMT

Hallo Johannes,

you need a license for a Security gateway CPSG

Do not take the All-In-One Security Bundle, but All-In-One Security Gateway.

It has to look like this:

Host Expiration Features
192.168.1.1 5May2018 CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-6EC6B741

Re: Lab environment - no valid license

G_W_Albrecht — Tue, 10 Apr 2018 09:39:51 GMT

ALL-IN-ONE EVALUATION gives you two licenses with central licensing that can be installed using SmartUpdate. The license you list above is the SMS part of the license. For the Module, you have also received a second license part looking like this:

Run 'cplic put [module name] <SMS IP> <date> <lic key> cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-............'

Validation Code:..............

The easy way is to just import the received license file; the SMS part will be attached automatically, but you have to attach the GW lic manually to one the cluster nodes! I think this is missing here.

And what else is missing ? The All In One is just for one GW and one SMS - for Cluster deployment, you have to generate another demo licanse, either a second All I One or a GW only license.

Re: Lab environment - no valid license

Johannes_Schoen — Tue, 10 Apr 2018 09:48:40 GMT

Many thanks for your help - now it's working

Good to know that a few license parts needs to be assigned manually - I thought to avoid this the IP addresses are requested during the license creation process

Re: Lab environment - no valid license

G_W_Albrecht — Tue, 10 Apr 2018 10:09:36 GMT

You just have to look into SmartUpdate, left side - you can see the licenses as Attached or Unattached. To get all services correctly, it mostly makes sense to update the contract file from UserCenter.

Re: Lab environment - no valid license

Stelios — Fri, 10 Jan 2020 08:20:04 GMT

Hi G_W_Albrecht,

What i have to input on [module name], i try my gateway ip but it didn't work.

Thank you.

Re: Lab environment - no valid license

G_W_Albrecht — Fri, 10 Jan 2020 08:51:21 GMT

Usually you need not use that. I would suggest to use SmartUpdate, not CLI, anyway. And there you can just copy the complete license string from Email or UserCenter.

Re: Lab environment - no valid license

Stelios — Fri, 10 Jan 2020 08:55:54 GMT

Thank you 🙂