Cloudguard NSX - Licensing Issues

[Supporto_Checkp]

Hi

I hope that is a stupid question but I've problem licensing my cloudguard cluster

I've imported ( and attached  with loudguard_config utils from cli)  the license.
it's correctly attached to the right cluster/service

Cluster Name: PROD-NSX
Attached licenses details:
'xxxxxxx never CPSG-VSEC-NSX+16 CPSB-FW CPSB-VPN CPSB-IA CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT xxxxxxxxxxxxx

Available Sockets for use: 16
Required Sockets for selected cluster: 12
Attached Sockets for selected cluster: 0

WARNING the following instances have no license:
serviceinstance-2-b76bec hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7546b hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7253f hosted by yyy.xxx.local l requires 2 Sockets.
serviceinstance-2-b724f3 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b78d88 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b73543 hosted by yyy.xxx.local requires 2 Sockets.

Why it doesn't distribute the license to the cluster member under that service? in this situation I can't install policies.

is there a way to force the "attaching" of the core to all the cluster members?
thx

[Nir_Shamir]

Hi,

is this NSX-V or NSX-T ?

thanks.

[Supporto_Checkp]

NSX-V

[Nir_Shamir]

Hi,

try running the command "vseclic" to redistribute the license.

[Shay_Levin]

It’s not clear how you distribute the licenses – are you using central license ?

[Supporto_Checkp]

I simply loaded a new license in smart update and then used  "cloudguard config" to attach it the correct cloudguard cluster.

If I use "vsec_lic_cli"  it can see only my AWS Checkpoint Cluster ( and manage correctly their licenses )  but not any NSX Cloudguard Cluster

Getting licenses usage. Please wait...
+------------------+---------------+-----------------+---------------------+---------------------------------------+
| Pool | Total Quota | Available Quota | CKs | Subscribed Gateways (Number of Cores) |
+------------------+---------------+-----------------+---------------------+---------------------------------------+
| VE-NGTX(default) | 32 | 16 | 627DC3FD8D4C | AWS-SIRE-Northbound-01 (2) |
| | | | | AWS-xx01 (2) |
| | | | | AWS-xx02 (2) |
| | | | | AWS-xx01 (2) |
| | | | | AWS-xx02 (2) |
| | | | | AWS-xx02 (2) |

These gateway above are NOT the ones on NSX .

If i try to add my license string in central lisense util it tell me that is not valid


| | | | | AWS-xx02 (2) |
| | | | | AWS-xx01 (2) |
+------------------+---------------+-----------------+---------------------+---------------------------------------+

[Shay_Levin]

I don't know what version are you using, there is a difference between the versions and the supported license utilities

Check the SK : https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

It's all explained in it.

Let us know if it solved your isuue.

[Supporto_Checkp]

MDS 80.40 T126
Reg Hotfix 80.40 v7 T12
NSX-V Vsec R80.10 on esxi hosts.

vsec_central_license ( vsec_lic_cli) doesn't work for NSX-V Gateway ,for that I have to use "cloudguard_config" ....and it seems to work for the first part : attach the license to che correct NSX Cluster,but then ... no core license are assigned to the single hosts member of that cluster 

Cluster Name: PROD-NSX
Attached licenses details:
'xxxxxxx never CPSG-VSEC-NSX+16 CPSB-FW CPSB-VPN CPSB-IA CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT xxxxxxxxxxxxx

Available Sockets for use: 16
Required Sockets for selected cluster: 12
Attached Sockets for selected cluster: 0

WARNING the following instances have no license:
serviceinstance-2-b76bec hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7546b hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7253f hosted by yyy.xxx.local l requires 2 Sockets.
serviceinstance-2-b724f3 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b78d88 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b73543 hosted by yyy.xxx.local requires 2 Sockets.

[Daniel_Mirkin]

Hi,

Please see the following:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

"

...

Symptoms

• License is not attached to all members of vSEC for NSX cluster.

...

"

[Supporto_Checkp]

i've already followed but  i've not any duplicate license in the DB... 

[Daniel_Mirkin]

If you also followed all the suggestions in 

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

and 

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

I suggest to contact Technical Support then.

[Supporto_Checkp]

hi,
i've opened a case ...let'see.
With a demo everything works like a charm.