topic Re: 1 Y Eval on 1570R showing as invalid in Spark Firewall (SMB)

1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 13 Aug 2024 12:50:22 GMT

For a demo 1570R that has run out of bundled services, i was in the need to install an eval license, As the POC could take 2-3 month (and could be followed by some time in my Lab environment) i had decided to use a 1 Y Eval, But i was unable to get it working - a license error was shown:

<-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-9B70EF9A2D03
macros_os_params_os_table_wifi_minflag_set seting wifi_os_table_failed on the O S side
set_os_isLicensed_wifi_flag failed to set minflag
macros_os_params_wifi_init failed to initialize the wifi_region
Failed to install license: Ok

Could it be true that a 1570R will not work with an eval ? @Amir_Ayalon ? Account services only gave the final recommendation to ask TAC...

Re: 1 Y Eval on 1570R showing as invalid

_Val_ — Mon, 12 Aug 2024 11:31:35 GMT

I think SMB are using a different license signature format. It seems you are installing a regular Gaia license. I would open a TAC request to double-check

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Mon, 12 Aug 2024 12:18:42 GMT

It was possible on 7x0/14x0/15x0 SMBs to install the AllInOne license, see my old post https://community.checkpoint.com/t5/SMB-Gateways-Spark/1400-1100-1200R-700-600-Appliance-Demo-Units/m-p/40117

I suspect that this special HW needs a special license...

Re: 1 Y Eval on 1570R showing as invalid

Lesley — Mon, 12 Aug 2024 17:01:09 GMT

Should be supported as stated in: https://support.checkpoint.com/results/sk/sk178604

But different sk shows:

Small-Medium Business Appliances (SMB)

For Small and Medium-sized Businesses (SMB), the designated evaluation license option is "Threat Prevention Evaluation."

When you select this option, you are prompted to select the User Center account associated with the SMB device. In addition, the user that creates the evaluation license must be linked to the specified User Center account. Enter the MAC address of the SMB device during this process.

When finished, the evaluation blades are integrated into the specified SMB device. Subsequently, the license for the SMB device must be generated and applied.

Re: 1 Y Eval on 1570R showing as invalid

_Val_ — Mon, 12 Aug 2024 17:26:57 GMT

Why IP address and not MAC address?

Re: 1 Y Eval on 1570R showing as invalid

the_rock — Mon, 12 Aug 2024 17:42:29 GMT

I would call Account services myself. Every time I did for any license issue, it got solved pretty quickly.

Andy

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 13 Aug 2024 06:14:55 GMT

I already did, and Account services only gave the final recommendation to ask TAC...

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 13 Aug 2024 06:21:26 GMT

You can not put in the MAC when generating the All-In-One....

I have done this kind of licensing a many times before, and it always has worked if performed correctly...

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 13 Aug 2024 06:23:45 GMT

This is true for the 30 day eval only - 1 year Lab demo is something different....

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 13 Aug 2024 08:27:52 GMT

Now i have performed the same procedure on my Lab 730, worked perfectly, as every year...

Maybe @Nir_Halaly can help here ?

Re: 1 Y Eval on 1570R showing as invalid

the_rock — Tue, 13 Aug 2024 12:31:39 GMT

Hm...maybe they dont help as much with 1 year evals, not sure.

Andy

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 13 Aug 2024 12:48:28 GMT

This is SMB and 1570R, and SMBs are rarely used with 1 Y Lab Evals.

Re: 1 Y Eval on 1570R showing as invalid

the_rock — Tue, 13 Aug 2024 13:11:48 GMT

I had not seen many of those on regular Gaia either...I meant 1 year eval licences.

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 13 Aug 2024 13:51:14 GMT

This is for Partners as well as CCSPs like us that have Lab deployments used for customer demos. I had received an own one for my CCSM Elite certification...

Re: 1 Y Eval on 1570R showing as invalid

the_rock — Tue, 13 Aug 2024 13:53:03 GMT

Right. I know it is for partners, thats true...I used it while back for some lab testing, but been some time.

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 27 Aug 2024 10:03:13 GMT

CP TAC is unwilling to give support for a NFR unit without valid support contract - never had that ! But seems i have found the reason of the error: The AllInOne 1y has no CPWIFI-EU feature included, this is needed for 1570R as it is shown in the original license !

Re: 1 Y Eval on 1570R showing as invalid

the_rock — Tue, 27 Aug 2024 12:26:18 GMT

I can see why that would be the case, though once in the past, when customer had similar scenario, Sales guy opened the case, so they did help.

Andy

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 27 Aug 2024 12:31:23 GMT

With an end customer, this may be correct - but with partner & CCSP that rely on NFR units with evals this is inappropriate at least.

Re: 1 Y Eval on 1570R showing as invalid

the_rock — Tue, 27 Aug 2024 12:40:15 GMT

I cant really comment on that, as I have no clue in the world what the actual process for those thing is.

Andy

Re: 1 Y Eval on 1570R showing as invalid

G_W_Albrecht — Tue, 27 Aug 2024 13:34:46 GMT

Nir Halaly has taken over, very good, but the reason is clear now:

- old 7x0/14x0 wifi units have a license like CPAP-AP730 ENF-APP CPSB-FW CPSB-VPN CPSB-IA CPSB-ADNC CPSB-ADNC-M CPSB-SSLVPN-50 CPSB-SSLVPN-50 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM

- 15x0 units have 127.0.0.1 CPAP-AP1530 CPWIFI-EU CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-IA CPSB-ADNC CPSB-ADNC-M CPSB-SSLVPN-50 CPSB-SSLVPN-50 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPAP-CLOUD-MGM

- so the CPWIFI-EU is missing from an AllInOne 1 month or 1y license and produces the error

macros_os_params_os_table_wifi_minflag_set seting wifi_os_table_failed on the OS side

set_os_isLicensed_wifi_flag failed to set minflag

macros_os_params_wifi_init failed to initialize the wifi_region

Failed to install license: Ok

For POC, this means that without valid support contract, you will not be able to use the unit longer than the 14days PnP license as it must be wiped to get a new PnP...