Cloudguard Management Server in Azure - EVAL License

[Prabulingam_N1]

Dear Team,

I had deployed CG in Azure with below setup:

1) Deployed CheckPoint Management Server (R80.40)

2) Deployed CG VMSS in Azure (R80.40) with 1 instance only

As the trial period ended, I want to use EVAL License (30day) for above both Management server & VMSS (1 instance only)

I had created "All-in-one-EVAL" and attached via SmatrUpdate.

Both Mgmt server & VMSS Instance got updated and "cplic print" also shows 30day Trial.

But unable to login to SmartConsole - says Trial expired and need to add New License.

Also I tried EVAL for only Management Server in "OtherProducts". still unable to login to SmartConsole.

Any assistance please.

Regards, Prabu

[vinceneil666]

After you have added the lic to the management server - have you tried doing a cpstop;cpstart ? I know this was an issue for R80.10.

[Prabulingam_N1]

We restarted Mgmt VM and added New EVAL License..No luck

[vinceneil666]

Add the eval ... then from cli : run cpstop,  then cpstart

[Prabulingam_N1]

No luck.

Any one have idea how to use 30 day All-in-one Mgmt server License on CheckPoint CG Management Server in Azure?

Regards, Prabu

[ABosinceanu]

Hi all, 

I encounter the exact same issue.

Licenses loaded via ssh and installed with cplic put & db_add **** but nothing is working.

Performad cpstop, cpstart, reboot...nothing works.

Please advice us how to overcome this issue.

Best wishes, 

Andrei

[Chris_Atkinson]

Can you please share the output of "cplic print" from the system?

[ABosinceanu]

Result for #cplic print

Host Expiration Features
Public IP 17Sep2022 CPSB-DMN-U
Public IP 17Sep2022 CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150
Public IP 17Sep2022 CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT

[Chris_Atkinson]

The "Public IP" matches the same IP as assigned to the Management interface?

sms-azure> show management interface

ethX

sms-azure> show interface ethX ipv4-address

ipv4-address X.X.X.X/YY

[ABosinceanu]

Thank you very much @Chris_Atkinson  @Nir_Shamir , generating the new licence on the private IP of the sms solved the puzzle.

After uploading the new license file on the sms and mount it with "cplic put" I had to list all licenses with "cplic print -x" and remote the old licenses(the ones using the public IP of the sms) using "cplic del <<signature of the targeted license to delete>>".

After removing all old licenses, the new licenses did their job.

Thanks!

[Nir_Shamir · Accepted solution]

The IP Address of the license should be the private IP of the management Server.