SSL Network Extender: Not enough licenses for SNX

SChalhoub — Mon, 09 Sep 2019 22:24:46 GMT

Although we have licenses applied to gateways we have problems with SNX VPN clients.

This issue starts without any changes to our applied licenses.

Here is an excerpt from the error message:
; reason :: SSL Network Extender: Not enough licenses for SNX; scheme :: SSL; methods ::; reject_category: SSL Network Extender authentication failure;

Does anyone has any inside about this issue ?

Best Regards,

Re: SSL Network Extender: Not enough licenses for SNX

PhoneBoy — Mon, 09 Sep 2019 18:21:24 GMT

Providing output from cplic print would be a good place to start.
That message in general indicates you either don't have appropriate licenses or there are more users connected than you are licensed for.

Re: SSL Network Extender: Not enough licenses for SNX

SChalhoub — Mon, 09 Sep 2019 18:28:25 GMT

Hi PhoneBoy ,

Thank you for your reply.
We have a cluster with two member (fw-trf2-a and fw-trf2-b).
Our Management is fw-sm-a.

Here is the output of cplic print.

Management

[Expert@fw-sm-a:0]# cplic print

Host Expiration Features

172.16.X.X never CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

Contract Coverage:

# ID Expiration SKU

===+===========+============+====================

1 | W511W96 | 24Oct2021 | CPCES-CO-PREMIUMPRO

+-----------+------------+--------------------

|Covers: CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

2 | Q3TWH11 | 24Oct2019 | CPSB-EVNT-5-1Y

+-----------+------------+--------------------

|Covers: CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

3 | PR20SOO | 24Oct2019 | CPSB-RPRT-5-1Y

+-----------+------------+--------------------

|Covers: CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

4 | AWGF0WU | 24Oct2019 | CPSB-COMP-5-1Y

+-----------+------------+--------------------

|Covers: CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

Gateway

[Expert@fw-trf2-a:0]# cplic print

Host Expiration Features

172.16.X.X never CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

172.16.0.252 never CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

Contract Coverage:

# ID Expiration SKU

===+===========+============+====================

1 | E4S32Y2 | 24Oct2021 | CPSB-ABOT-L-2Y

+-----------+------------+--------------------