topic Re: Installing BYOL on Checkpoint Cloudguard in General Topics

Installing BYOL on Checkpoint Cloudguard

LostBoY — Mon, 16 Jan 2023 16:53:33 GMT

I am trying to install BYOL Licenses on a Checkpoint Cloudguard cluster in AWS. As far as i remember after uploading the license file via smartconsole a command is to be run on Management Server CLI to distribute licenses to the Firewall Instances.

Can anyone help me with that command..i am struggling to find it.

Re: Installing BYOL on Checkpoint Cloudguard

_Val_ — Mon, 16 Jan 2023 17:05:02 GMT

Please see here and let me know if it helps: https://sc1.checkpoint.com/documents/IaaS/WebAdminGuides/EN/CP_CloudGuard_Central_License_Tool_Admin_Guide/Content/Topics-Central-License-Tool/Managing-Central-Licenses.htm?tocpath=Managing%20CloudGuard%20Central%20Licenses%7C_____0#Managing_CloudGuard_Central_Licenses

Re: Installing BYOL on Checkpoint Cloudguard

Nicholas_Cuba — Mon, 16 Jan 2023 17:10:30 GMT

vsec_lic_cli ? Could this be the command you are looking for?

CloudGuard Network Central License Tool R80.20 and Higher Administration Guide

If you do you use this tool, I've found it much easier to forego the license file attachment in SmartConsole, and just utilize the two cplic put commands that come in the license instructions.

Very basic instructions: Run the first one on the command line of the management server. Then copy the second command, starting at the management's IP address. You don't need the "cplic put [module name]" part, just everything after that. Type the command out vsec_lic_cli add followed by pasting that copied portion of the gateway command. Then run vsec_lic_cli distribute to parse it out to the gateways.

If you've got something more complex, I'll refer you to the Administration Guide that I've linked. Also of note, R80.40 and higher CloudGuard Central License Known Limitations is pretty explicit about issue ID PMTR-3957. Don't use the SmartUpdate application once you start using the central license tool.

Re: Installing BYOL on Checkpoint Cloudguard

LostBoY — Tue, 17 Jan 2023 11:37:05 GMT

Thanks..

So all i had to do is put the license in mgmt via cplic and then issue vsec_lic_cli on and vsec_lic_cli distribute

Re: Installing BYOL on Checkpoint Cloudguard

LostBoY — Tue, 17 Jan 2023 11:37:27 GMT

This worked .. thanks

Re: Installing BYOL on Checkpoint Cloudguard

Daniel_Kavan — Tue, 11 Jun 2024 17:22:11 GMT

Hi Val,

After you buy then install a BYOL license for a firewall hosted on Azure or AWS, does that include support and services thru Check Point or is that just for the software?

Re: Installing BYOL on Checkpoint Cloudguard

PhoneBoy — Tue, 11 Jun 2024 18:44:52 GMT

Support and services are usually separate line items.