topic Re: IPS Blade contract grace period hasn't started? in General Topics

IPS Blade contract grace period hasn't started?

Parabol — Fri, 01 May 2026 07:46:44 GMT

Hi all,

Licensing expired today on our threat prevention blades, however we were under the impression that a 90-day grace period would start, as per sk - https://support.checkpoint.com/results/sk/sk44175

IPS Software Blade Grace Period

Grace periods are periods after the IPS Software Blade license expires, in which the IPS protections will still be active and no restrictions are made, but warnings are issued regarding the missing contracts. The grace period is set for 60 days for R77.x versions and 90 days for R8x versions, starting from the latest contract expiration date on that Security Gateway. The grace periods are calculated per Security Gateway individually.

However checking the blades license status in SmartConsole seems to show only Application Control and URL Filtering have this 90-day grace period active (see screenshot).

Is this definitely the case? If this has reduced our IPS, Anti-Virus and Anti-Bot capability then I need to be chasing management for these renewals pronto

Thanks

Re: IPS Blade contract grace period hasn't started?

Chris_Atkinson — Fri, 01 May 2026 08:58:26 GMT

What warning if any do you see when attempting to install threat prevention policy?

Ideally you should be proactively chasing this prior to the annual renewal due date not afterwards...

Some relevant commands:
cat $FWDIR/ips/update/ips_status.C
cpstat ips -f subscription_status
ips stat
cplic print

Re: IPS Blade contract grace period hasn't started?

Lesley — Fri, 01 May 2026 09:27:48 GMT

What Chris said will help to see if it is a cosmetic issues described in https://support.checkpoint.com/results/sk/sk183287

Check also logs if you still see ips working: blade:IPS

Re: IPS Blade contract grace period hasn't started?

the_rock — Fri, 01 May 2026 11:27:20 GMT

Cplic print -x output would definitely help us.