topic SMB license in Spark Firewall (SMB)

SMB license

Moudar — Mon, 15 Jul 2024 07:52:30 GMT

I got SMB 1575 appliance. On the appliance the license is active:

But on SMS the license is not active:

What should be done to correct that?

Re: SMB license

Lesley — Mon, 15 Jul 2024 08:43:21 GMT

SMB-18388

In Centrally Managed appliances, SmartConsole sometimes shows inaccurate license information for Software Blades such as "No License" or "About to Expire."

R81.10.00

As stated in: https://support.checkpoint.com/results/sk/sk178604

From TAC I got once this reply:

The license and contract should be verified only from the Gaia portal or the command line.
That device is meant for local management only and It was not designed to view all the details in the smart console.

Re: SMB license

Moudar — Mon, 15 Jul 2024 09:09:20 GMT

So, that means we need to live with that message in SMS?!

Re: SMB license

Chris_Atkinson — Mon, 15 Jul 2024 09:10:30 GMT

It would be easiest to take the output of "cplic print" from the appliance CLI along with the details as you see them within Usercenter and discuss with your local SE / account team.

Re: SMB license

Chris_Atkinson — Mon, 15 Jul 2024 09:19:23 GMT

For DAIP gateways there is a known limitation...

Re: SMB license

Moudar — Mon, 15 Jul 2024 09:16:36 GMT

but I got another gateway which has exactly the same configuration (same appliance 1575) and that is green on SMS without any problem!

Re: SMB license

Chris_Atkinson — Mon, 15 Jul 2024 09:21:31 GMT

We would need to see the "cplic print" info to understand further if the issue is solely related to the limitation.

Re: SMB license

Moudar — Mon, 15 Jul 2024 09:27:33 GMT

This one has problem (expired license on SMS):

cplic print Host Expiration Features 127.0.0.1 never CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx Contract Coverage: # ID Expiration SKU ===+===========+============+==================== 1 | BY4H9BT | 18Aug2025 | CPCES-CO-PREMIUM-1575-ADD +-----------+------------+-------------------- |Covers: CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx

And this one does not show any problem:

cplic print Host Expiration Features 127.0.0.1 never CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx Contract Coverage: # ID Expiration SKU ===+===========+============+==================== 1 | PSGQM7U | 10Sep2025 | CPCES-CO-PREMIUM-1575-ADD +-----------+------------+-------------------- |Covers: CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx ===+===========+============+====================

Re: SMB license

Chris_Atkinson — Mon, 15 Jul 2024 10:03:03 GMT

You may find that it clears after the evaluation period ends.

How does the "Device & License Information" window in SmartConsole look for the "working" one by comparison? i.e. Does it report an IP value different to: "0.0.0.1"

Re: SMB license

Moudar — Mon, 15 Jul 2024 09:40:29 GMT

you can see 2 gateways running with dynamic IP both are 1575 one (test7) shows expired license!

Re: SMB license

G_W_Albrecht — Mon, 15 Jul 2024 10:12:35 GMT

Looks in WebGUI like test7 has no valid license for services, only for the perpetual blades. Same with Ugglan-2 ?

Re: SMB license

Moudar — Mon, 15 Jul 2024 10:23:47 GMT

this is from test7:

Re: SMB license

G_W_Albrecht — Mon, 15 Jul 2024 11:52:54 GMT

I was talking about first screenshot feat. No license lines for services !

Re: SMB license

Moudar — Mon, 15 Jul 2024 13:11:01 GMT

first screenshot was what smartconsole shows, but cplic print shows active license (if i understood it corrcet)

what gonna happen on date 21/7. Will we lost that gateway or the license is active?

Re: SMB license

Chris_Atkinson — Mon, 15 Jul 2024 14:09:43 GMT

The cplic print output is what really matters.

Re: SMB license

Jason_Elmore1 — Mon, 15 Jul 2024 15:31:30 GMT

Check out this thread, I've had to use this method pretty much every time I deploy a new 1500.

Solved: License warning messages - Check Point CheckMates

Re: SMB license

G_W_Albrecht — Tue, 16 Jul 2024 08:30:55 GMT

The cplic print shows that all services have expired - so there is a reason for the license warning from SMS, as a GW without IPS and TP is not very helpfull in most situations 😉

The statement in Dashboard is just not true as the eval lic shown is not present in the cplic print...

Re: SMB license

Moudar — Tue, 16 Jul 2024 08:44:45 GMT

So, what should be done in this situation?

What does 18Aug2025 mean here?

BY4H9BT   | 18Aug2025  | CPCES-CO-PREMIUM-1575-ADD

the eval license expire on 20th July and then the paid license takes over?!

Re: SMB license

PhoneBoy — Tue, 16 Jul 2024 14:10:45 GMT

Outside of basic Firewall/VPN features, most other features require a contract.
The fixed license is required to even configure the features.
You appear to have a contract for them, which in your case expires on 18 August 2025.

After that contract expires (and absent any additional contracts added later), the contracted features will no longer work.
Basic firewall/VPN features should continue to work.

All of this can be confirmed with Account Services: https://help.checkpoint.com

Re: SMB license

G_W_Albrecht — Wed, 17 Jul 2024 05:43:34 GMT

That collaborative premium support on the appliance ends on 18Aug2025 - but that includes no TP service contracts...