topic Re: License update in General Topics

License update

ma_gorkhali — Mon, 02 Dec 2024 12:37:09 GMT

We have recently renewed our license from NGTP to NGFW for some of our maestro, cloud-based firewall as well as for some of our legacy based appliance. Synchronize with Check Point UserCenter is enabled but it is still not updating the gateways and displaying as license about to expire. I believe this should automatically renew if connected to the usercenter ?

Re: License update

_Val_ — Mon, 02 Dec 2024 13:19:32 GMT

Can you show the message, and also features you updated?

Re: License update

ma_gorkhali — Mon, 02 Dec 2024 13:34:06 GMT

Hello @_Val_ the strange thing is 2 of our maestro cluster is updated but one of the maestro cluster has not updated yet. I can see in the usercenter that the expiry date for the blade has increased. It was renewed 24hrs ago and is it something that takes time ?

Re: License update

Lesley — Mon, 02 Dec 2024 13:57:42 GMT

Maybe try to receive licenses from usercenter in smartupdate? If there all is good push the policy.

Re: License update

the_rock — Mon, 02 Dec 2024 14:08:37 GMT

I would try what @Lesley suggested.

Andy

Re: License update

ma_gorkhali — Tue, 03 Dec 2024 01:06:08 GMT

Hi @Lesley Do you mean click on 'get all license' under Licenses and Contracts on the SmartUpdate and then install the policy ?

Re: License update

Lesley — Tue, 03 Dec 2024 02:01:31 GMT

Something like get all licenses and contracts from userscenter and use there usercenter login where the firewalls are placed in. Have no access to pc now so cannot share screenshot

Re: License update

ma_gorkhali — Tue, 03 Dec 2024 02:19:39 GMT

This should be the one I suspect ?

Re: License update

the_rock — Tue, 03 Dec 2024 02:20:40 GMT

Yep, thats it!

Re: License update

_Val_ — Tue, 03 Dec 2024 07:56:42 GMT

It might be that one of the security groups does not have Internet connectivity and cannot update contracts and licenses automatically. If this is the case, look into https://support.checkpoint.com/results/sk/sk163323

Also, try pushing the licenses and contracts from SmartUpdate, as already suggested.

If neither works, please open a TAC case

Re: License update

ma_gorkhali — Wed, 04 Dec 2024 03:44:46 GMT

Thank you for your reply.

Smart update is currently not able to communicate with usercenter although do have internet access from the SMS itself.

Adding to this SMO does have internet connection and can connect to checkpoint sites

Re: License update

the_rock — Wed, 04 Dec 2024 04:22:03 GMT

Can you send below output from expert mode of sms?

curl_cli -k www.google.com

Andy

Re: License update

ma_gorkhali — Wed, 04 Dec 2024 04:34:59 GMT

Here you go

From SMO

FROM SMS

Re: License update

the_rock — Wed, 04 Dec 2024 04:32:14 GMT

So it does have Internet access, but, is PC where smart console installed able to get to the Internet?

Andy

Re: License update

ma_gorkhali — Wed, 04 Dec 2024 04:38:08 GMT

Not the PC doesn't have internet? Is that the reason why I am not being able to fetch the contract using smartupdate ?

Re: License update

the_rock — Wed, 04 Dec 2024 04:41:23 GMT

Im fairly sure that is why.

Re: License update

ma_gorkhali — Wed, 04 Dec 2024 04:43:57 GMT

Let me try connecting to smartconsole from the PC where there is internet

Re: License update

the_rock — Wed, 04 Dec 2024 04:49:51 GMT

I feel confident that will work.

Re: License update

ma_gorkhali — Wed, 04 Dec 2024 06:47:02 GMT

Hello,

I installed smartconsole in my PC where there is internet connectivity and still could not fetch the contract

It does ask for a credential and my user is a superuser for accessing usercenter or do you we need a admin@domain.com account to pull it through or should the superuser be more than enough ?

Re: License update

_Val_ — Wed, 04 Dec 2024 09:44:41 GMT

Please refer to https://support.checkpoint.com/results/sk/sk11054 about offline license update.