- CheckMates
- :
- Products
- :
- CloudMates Products
- :
- Cloud Network Security
- :
- Discussion
- :
- Re: Can't activate Monitoring blade on R81.10 Clus...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can't activate Monitoring blade on R81.10 Cluster PAYG in Google Cloud
As the title states, we've launched a few R81.10 clusters inside Google Cloud Platform with a PAYG license. The error message when pushing policy is:
No sufficient licenses installed for Security Gateway with Monitoring Blade. If you do not intend to use SmartView Monitor, please uncheck this product from your Security Gateway(s)
Other blades like Content Awareness, URL Filtering, VPN, and IDS/IPS/Anti-Bot have been activated and operating fine.
I am able to activate the blade on BYOL licenses without issue, so this seems specific to PAYG.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thats exactly reason why it fails. I cant recall is there is a way to get around it, but will double check my notes.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Well, yeah, LOL. Always fun when you do a PAYG license and pay 3x as much for something that doesn't even work.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Tell me about it LOL. Anyway, Im still trying to find what was final outcome.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks, appreciate the reply as it's helping me maintain mental sanity. Per usual, I'm getting gaslit by Checkpoint support as they're claiming the Monitoring blade "only works on management server".
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No offense, but wheoever told you that, either they confused mgmt with gateway, or they had not done any checking. Monitoring blade is SPECIFIC to gateway only, you cant even enable it on the mgmt server, as its not possible and even if it was, it would be utterly pointless/useless.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No offense to me. That's exactly what I told them. And I'm not even a Checkpoint expert by any means.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
All that person had to do is spend 30 seconds and open demo dashboard (not even working lab), edit mgmt object and see exactly what we said.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
TAC is correct, the monitoring blade is, in fact, a Management license.
In my "All-in-One" evaluation license, I see the SKU CPSB-MNTR associated with the other parts of my Management license.
It's also noted as such in the Product Catalog:
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thats true, license is spsb-mntr installed on mgmt server, BUT, the feature itself is ONLY available on the gateway, not management server.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can't enable it on a Management Server, yes.
However, in order to enable it on managed Security Gateways, your management management must have a license that includes CPSB-MNTR.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes sir, 100% agree 👍
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We're using PAYG for the management server as well. So....I guess paying an astronomical rate for a PAYG license isn't good enough and we have to shell out some more dough?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You should confirm if your management includes this feature by checking the output of cplic print and looking for CPSB-MNTR in the license string.
To the best of my knowledge, it should be included in current management SKUs.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yeah already did that and it's not there. TAC closed the case this morning for this reason.
I've re-opened the TAC case, but looks like this is yet another one for the legal department to handle.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you haven't already, I recommend reaching out to your Check Point SE regarding this.
![](/skins/images/4BAE0211AB62E3B2F85E95CA468FEED0/responsive_peak/images/icon_anonymous_message.png)