topic Re: Licensing in Endpoint After Computer Deletion in Endpoint

Licensing in Endpoint After Computer Deletion

Cody_Ray — Thu, 05 Oct 2017 14:53:03 GMT

Why is a license taken up for the Endpoint client when the computer is moved to the Deleted Users/Computers directory in the SmartEndpoint console? Is there a way to purge this on a scheduled basis or have it remove the active license when placed in this directory?

Re: Licensing in Endpoint After Computer Deletion

PhoneBoy — Thu, 05 Oct 2017 16:30:46 GMT

It will automatically do so after 30 days.

More specifically, it will do it for any host that does not communicate with the management server in 30 days.

If you need to do it sooner than that, you will need to contact the TAC: Contact Support | Check Point Software

Re: Licensing in Endpoint After Computer Deletion

sdunn — Thu, 25 Oct 2018 15:18:15 GMT

Dameon, can you direct me to an sk that contains the commands/process to preemptively release the licensing? I've had Endpoint techs do it for me in the past and I would like to know what commands to run on my own, if needed.

Re: Licensing in Endpoint After Computer Deletion

PhoneBoy — Thu, 25 Oct 2018 15:42:33 GMT

Unfortunately, the commands are in an internal SK, which means I cannot share them.

Re: Licensing in Endpoint After Computer Deletion

Steve_Lander — Thu, 25 Oct 2018 16:05:28 GMT

If we have remote laptops that don't get used often, what happens if the CheckPoint Management Server automatically deletes that laptop after 30 days, what will happen if the laptop gets used again? Will the management server give the license back to that endpoint or break the endpoint on that laptop?

Re: Licensing in Endpoint After Computer Deletion

sdunn — Thu, 25 Oct 2018 16:17:07 GMT

We did used to have this issue with a previous version. Before we disabled a particular feature, users were getting locked out of their laptops due to inactivity, essentially. (Some had workstations AND laptops and neglected their laptops.)

Re: Licensing in Endpoint After Computer Deletion

PhoneBoy — Thu, 25 Oct 2018 16:35:19 GMT

In theory, they should get the license back when they "phone home" (assuming one is available).

Re: Licensing in Endpoint After Computer Deletion

J_B — Mon, 25 Feb 2019 16:09:06 GMT

Is there a way to mass delete users/computers from the Deleted User/Computers folder within the management console, rather than having to do them one by one? Or a job that can purge them after so many days?

Thanks

Re: Licensing in Endpoint After Computer Deletion

PhoneBoy — Mon, 25 Feb 2019 19:36:37 GMT

It's similar to what I said in the first response in this thread:

Happens automatically after 30 days
If you need it sooner than that, please contact the TAC. How To Open a Case with TAC and/or Account Services‌

Re: Licensing in Endpoint After Computer Deletion

J_B — Tue, 26 Feb 2019 08:48:11 GMT

OK thanks, I'll log a call with TAC because that isn't happening. If we don't manually delete them then we end up with hundreds of old machines and users, many of which are 6 months old.

Thanks

Re: Licensing in Endpoint After Computer Deletion

Michael_Bybee — Tue, 26 Feb 2019 18:39:16 GMT

The Endpoint server will (by default) clear monitoring information about users/machines from the database every 30 days. This is information like the last contacted IP, blade status, encryption status, etc. The license being used by a device will not be cleared from the database unless the object is reset from the console or cleared from the database by other methods.

what this means - If machines have not contacted the server in 30+ days you will get blank information about the blades on the device when you click on it in Users and Computers. Any license being used by this device will still be used until you reset/delete the object.

To the question about clearing this information faster than one by one - For servers older than R80.20 we have support tools and processes for clearing this information but I would recommend opening a support ticket so we can make sure it will work for your situation. For R80.20 these tools come with the server but I would still recommend getting with support so we can assist.

Re: Licensing in Endpoint After Computer Deletion

Jamie_Thatcher — Tue, 16 Apr 2019 15:02:52 GMT

Hi Michael, I'm having this exact issue, could you let me know where i can find the tool in R80.20?

Thanks

Jamie

Re: Licensing in Endpoint After Computer Deletion

Maksym_Sofer — Sun, 21 Apr 2019 11:59:13 GMT

Deletion is an operation which should be performed with extra care, based on this - such procedures are not public and can be provided only by TAC.

Please open to us relevant service request and we will provide with a procedure to perform the desired maintenance.

There is one possible issue which could prevent automatic purge of inactive devices - if the database contains duplicate devices - and in this situation once again - SR should be raised.

If a device got deleted manually or automatically - if it will communicate with the server again - the system will not allow them to connect with error " Not found in PAT" error in server_messages.log.
Such device can be reinstalled or reconnected.

TAC can provide a reconnection procedure.