topic Re: Threat Emulation Local - No license - Files are not scanned for threats in General Topics

Threat Emulation Local - No license - Files are not scanned for threats

Zinger — Mon, 06 Mar 2023 04:56:56 GMT

Hi everybody!

In the Local Sandblast Applience TE1000X - standalone - R80.10 (without access to the Internet) i have installed Evaluation, but after 2-3 minutes appears an error: "Threat Emulation Local - No license - Files are not scanned for threats", i have checked from CLI - a license there is.

What steps can I do to resolve the issue? Installing last hotfixes or maybe fresh install to r81.10?

Who can help me?

Re: Threat Emulation Local - No license - Files are not scanned for threats

_Val_ — Mon, 06 Mar 2023 07:54:29 GMT

Please show the output from "cplic print"

Re: Threat Emulation Local - No license - Files are not scanned for threats

G_W_Albrecht — Mon, 06 Mar 2023 08:27:38 GMT

Why not install the correct appliance license ? R80.10 is out of support, but this is a different issue. Seems you installed an incorrect license. I doubt that an eval for a month of local emulation exists, but surely the 14d PnP license is activated after a fresh install.

Re: Threat Emulation Local - No license - Files are not scanned for threats

Chris_Atkinson — Mon, 06 Mar 2023 10:54:32 GMT

Which type of evaluation license did you apply and was it the gateway or management portion if an all-in-one with or without contracts file?

As @_Val_ says we need to see the output he suggested to provide further guidance here.

Re: Threat Emulation Local - No license - Files are not scanned for threats

Zinger — Mon, 06 Mar 2023 11:01:53 GMT

Yes, I have added just all-in-one (standalone - for MGMT & SG) as i do it usually on the security gateway, I detached "native" licences from appliance, and then they didn't appear when I tried to click "Get all licences" , maybe i didn't must do it.

I haven't find manual for adding license to sandblast appliance.

Re: Threat Emulation Local - No license - Files are not scanned for threats

G_W_Albrecht — Mon, 06 Mar 2023 11:34:14 GMT

Additionally install this Eval :

SANDBLAST EVALUATION WITH 28 VIRTUAL MACHINES

Evaluate Threat Emulation and Threat Extraction on a Local sandbox appliance.

Re: Threat Emulation Local - No license - Files are not scanned for threats

_Val_ — Mon, 06 Mar 2023 11:47:10 GMT

Then the message is correct, ALL in ONE license actually does not cover Threat Emulation.

Re: Threat Emulation Local - No license - Files are not scanned for threats

G_W_Albrecht — Mon, 06 Mar 2023 12:09:35 GMT

Or download the original license again from UserCenter, see https://community.checkpoint.com/t5/Cloud-Network-Security/Detach-license-of-decommissioned-Firewall/m-p/169121 for details ! Depends if this is a POC or similar, not for longer use deployment.

Re: Threat Emulation Local - No license - Files are not scanned for threats

Zinger — Mon, 13 Mar 2023 05:37:43 GMT

Thank you for the help! Like you said, that was it.