office mode vpn licensing

nflnetwork29 — Thu, 26 May 2022 21:15:37 GMT

How do i check this one? I though Ipsec VPN does not require any additional license .

Re: office mode vpn licensing

PhoneBoy — Thu, 26 May 2022 23:50:13 GMT

IPSec VPN is for Site-to-Site VPN and for Remote Access using SecuRemote.
More details here: https://community.checkpoint.com/t5/Remote-Access-VPN/Quick-Primer-on-How-to-Configure-your-Gateway-for-SecuRemote/m-p/79081#M2717

Office Mode requires specific licensing to use, namely one of:

Harmony Endpoint licenses (various SKUs)
Mobile Access (MOB-x)

If you post your cplic print output I can tell you conclusively if you have it or not.
You probably don’t if you’re seeing that error.

Re: office mode vpn licensing

the_rock — Fri, 27 May 2022 00:09:08 GMT

You positively 100% do not have valid license for it, no question. I had seen that many times before. Just generate eval license for the time being and it will work. Then, you can take it with License team to get it sorted out.

Re: office mode vpn licensing

nflnetwork29 — Fri, 27 May 2022 00:33:07 GMT

@PhoneBoy wrote:

IPSec VPN is for Site-to-Site VPN and for Remote Access using SecuRemote.
More details here: https://community.checkpoint.com/t5/Remote-Access-VPN/Quick-Primer-on-How-to-Configure-your-Gateway-for-SecuRemote/m-p/79081#M2717

Office Mode requires specific licensing to use, namely one of:

Harmony Endpoint licenses (various SKUs)

Mobile Access (MOB-x)

If you post your cplic print output I can tell you conclusively if you have it or not.
You probably don’t if you’re seeing that error.

[Expert@cp01:0]# cplic print
Host Expiration Features
X.X.X.X never CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
X.X.X.X never CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | 8583OQ9 | 26Sep2019 | CPES-SS-PREMIUM-ADD
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
2 | 852Y405 | 7Oct2022 | CPSB-IPS-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
3 | 8G4F952 | 7Oct2022 | CPSG-VSEC-AZURE-BUN-NGTX-CONTRACT
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
4 | WETD169 | 7Oct2022 | CPSB-AV-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
5 | H51D03O | 7Oct2022 | CPSB-URLF-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
6 | PHPY5WT | 7Oct2022 | CPSB-APCL-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
7 | 5A348RO | 7Oct2022 | CPSB-ASPM-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
8 | SE1OGU2 | 7Oct2022 | CPSB-TEX-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
9 | 1038FRY | 7Oct2022 | CPES-SS-STANDARD
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
10 | ETPTPRD | 7Oct2022 | CPSB-TE-VE-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
11 | 3HYHAO6 | 7Oct2022 | CPSB-ABOT-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
12 | 4FDD165 | 7Oct2022 | CPSB-CTNT-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
[Expert@cp01:0]#

Re: office mode vpn licensing

nflnetwork29 — Fri, 27 May 2022 00:43:36 GMT

i found these two.

PS i do not even have the mobile access blade enabled - is it required for office mode?

Re: office mode vpn licensing

the_rock — Fri, 27 May 2022 00:46:45 GMT

Its not required.

Re: office mode vpn licensing

nflnetwork29 — Fri, 27 May 2022 01:52:43 GMT

which eval am i looking for?

Harmony Mobile?

Re: office mode vpn licensing

the_rock — Fri, 27 May 2022 02:00:19 GMT

Send me the IP tied to the license, I will get it for you. Its all in one eval.

Re: office mode vpn licensing

the_rock — Fri, 27 May 2022 03:13:07 GMT

Emailed it...btw, you may not need it for mgmt, since RA is just for gateways, plus the same IP is probably not applicable. Also, you can paste it to the active gateway, as I cant generate license with same IP for the backup firewall. Besides, the IP tied to the license on backup fw has to be different than master, so send me that and I can get the eval for that as well. You have one month to sort out the license, its more than enough time, for sure.

Re: office mode vpn licensing

PhoneBoy — Fri, 27 May 2022 04:09:25 GMT

Theoretically CPSB-SSLVPN-5 should give you this for five users.
Whether Mobile Access is enabled or not is irrelevant here.
That said, if it doesn't work, a standard "all in one" eval can be applied.

Re: office mode vpn licensing

nflnetwork29 — Mon, 30 May 2022 22:26:54 GMT

@the_rock

According to TAC office mode VPN license is installed on the management server NOT the gateway .

Appreciate your help!

Just letting you know

Re: office mode vpn licensing

the_rock — Mon, 30 May 2022 22:35:53 GMT

Yes if its central license, if not, then it would make no sense to install it on mgmt.

Andy

topic Re: office mode vpn licensing in SASE and Remote Access

office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing

Re: office mode vpn licensing