topic Re: Office Mode IP Address in SASE and Remote Access

Office Mode IP Address

gemechisd — Tue, 08 Nov 2022 11:43:20 GMT

Recently we have faced "You cannot receive an office Mode IP address because the security gateway does not have a license for Office mode" error on SSL Remote Access VPN client that tries to connect to a Cluster." on our remote VPN Users. Currenlty we have the below attached licenses. So, which license blade we have to purchase in order to fix this issue.

Re: Office Mode IP Address

_Val_ — Tue, 08 Nov 2022 13:12:43 GMT

You need Mobile Access Blade license, CPSB-MOB-XXX, where XXX is the number of licensed users.

Re: Office Mode IP Address

PhoneBoy — Tue, 08 Nov 2022 13:22:13 GMT

Your gateway comes with a license to allow 5 users to connect with Remote Access.
For additional users, you will need to purchase one of the following:

Mobile Access Blade (sold in 50, 200, and unlimited users) — Based on concurrent connected users
ACCESS Licenses (CPEP-ACCESS) — Includes desktop firewall and endpoint
Harmony Endpoint licenses, which include Remote Access

Contact your Check Point partner for additional details.

Re: Office Mode IP Address

gemechisd — Tue, 08 Nov 2022 13:32:57 GMT

Dear,

Thanks for the response.

@_Val_

Below is the attached screenshot from our gateway which shows we can concurrently connect 15 VPN users. The office mode IP address error occurs when the number of connected VPN users exceeds 15. And we have a mobile blade "CPSB-MOB-5".

So, how could we able to connect up to 15 users concurrently, if our mobile blade is supporting only 5 users?

Re: Office Mode IP Address

_Val_ — Tue, 08 Nov 2022 13:46:35 GMT

probably a bug

Re: Office Mode IP Address

gemechisd — Tue, 08 Nov 2022 13:50:23 GMT

How could it happen? We have installed all the JHF.

Re: Office Mode IP Address

PhoneBoy — Tue, 08 Nov 2022 15:36:43 GMT

I suspect it's because we (by design) allow more than the licensed number of users to connect.
Regardless, to extend the number of users that are allowed to connect, you need the appropriate license.