topic Re: Is a 600 Appliance with an expired license still usable as a basic firewall/router? in General Topics

Is a 600 Appliance with an expired license still usable as a basic firewall/router?

Ken_Tyrrell — Mon, 23 Apr 2018 20:55:26 GMT

Is a 600 Appliance with an expired license still usable as a basic firewall/router?

I have one where the license expired in February. It's only being used as an access point to segregate Public Wi-Fi usage at a library.

It was rebooted about 10 days ago and the Wi-Fi and routing are still working, but SNMP is now getting blocked and any edits to the firewall are ignored with a System log entry being created: [Security Settings] Firewall policy change could not be applied due to an invalid license.

Re: Is a 600 Appliance with an expired license still usable as a basic firewall/router?

PhoneBoy — Mon, 23 Apr 2018 21:17:49 GMT

The answer is "it depends."

For example, my 1100 cannot be used even as a firewall after Jun 12th unless I get a new license for it

However, my 1490 clearly could:

My guess is that your 600 is provisioned with a different SKU that results in a Firewall license that expires, similar to my 1100 above.

(My 1100 is a pre-production unit)

In theory, all appliances should include a license for Firewall + VPN that doesn't expire.

Either way, I would check with Account Services.

Contact Support | Check Point Software

Re: Is a 600 Appliance with an expired license still usable as a basic firewall/router?

Ken_Tyrrell — Tue, 24 Apr 2018 12:19:37 GMT

My license page was showing all blades as expired, I clicked the Activate link and it turned on the Firewall, Identity Awareness, Advanced Networking, and IPSec VPN blades.

It's working now and SNMP reads are allowed now.

Thanks!

Re: Is a 600 Appliance with an expired license still usable as a basic firewall/router?

PhoneBoy — Tue, 24 Apr 2018 15:41:23 GMT

Excellent

Re: Is a 600 Appliance with an expired license still usable as a basic firewall/router?

Yuri_Slobodyany — Wed, 25 Apr 2018 17:19:37 GMT

Indeed I've seen many 11xx/6xx boxes and once you activate then it does not expire (ever) , just subscription based services (App Ctrl/IPS/etc). So unless it is a special purpose box (Demo/Trial/etc) the Firewall and VPN Ipsec lics are permanent.

Moreover cannot easily recall anyone having problems with this at all.