the endpoint security client license is not available. contact yoor admin. Local Smart Endpoint

[AfterMath]

Hi Guys!

We are running local smart endpoint, recently we installed new licenses for all our CP Product, but we are having problem with endpoint.

The license was reflected in the portal but it was not reflected locally. We are running the management locally. CheckPoint SmartEndpoint

 

 

[Chris_Atkinson]

What choices/selections did you make in Usercenter when activating the new license and to which IP address does it appear to be associated to there?

From memory cloud is likely the default choice and you need to adjust this accordingly for your environment...

[AfterMath]

Hi @Chris_Atkinson 

Thanks for your feedback.
New license its linked to local management ip address

[the_rock]

Sorry if this sounds silly what I will say now, but in your first screenshot, it appears those licenses are listed in S1C portal, but you said the mgmt endpoint is local and not cloud?

Andy

[AfterMath]

Hi @the_rock 

Thanks for your feed.

Yes, we are managing locally, smart endpoint. We have nothing in cloud, onlyto see the contracts status.

[the_rock]

I still find that odd though, if the mgmt is local.

[the_rock]

I agree with what Chris asked for...if you send us an output of cplic print -x, we should be able to tell, for sure.

Andy

[AfterMath]

Hi @the_rock 
Thanks for you feedback.. Attached de output

[the_rock]

I see the point @G_W_Albrecht is making, though I cant say 100% for sure that would solve your issue, as I left expired licenses in my labs before for more than a year and it never caused any problems.

Personally, I would check with Account services, they would be able to confirm.

Best,

Andy

[AfterMath]

Hi @the_rock 

What does mean Account services? User center!!

[the_rock]

No. User center is portal where you can manage your account and search for support sk's and so on. Account services is CP support department and deals specifically with account related queries/issues and license questions/problems.

Depending where you are located, you can reach them by one of below numbers, just provide your account number when you call and explain the issue. If you are located outside USA/Canada, then you have to dial +1 before the number.

They are open 7 am to 7 pm M-F Central time.

 Contact Support
North America: +1-888-361-5030
International: +44-114-478-2845

Andy

[G_W_Albrecht]

Yes - you enter User center, go Support > Create Service Request and make an Account Services Ticket under Non Technical - Account Services & Licensing Issue. You do not need your CCSP or Direct Support to do that.

A phone call is appropriate if nothing happens for some days, but screenshots look much better uploaded compared to transmitted by phone 😉

[the_rock]

I always found when I call them they send zoom meeting right away, super helpful.

Andy

[G_W_Albrecht]

No no no - i have experienced several licensing issues that were caused by leftover old licenses. True, it may cause no issue, but i have seen that it can do that quite often...

Also, there is no harm in removing expired licenses even if it would not resolve the issue!

[the_rock]

Thats fair. I agree, no harm, 100%.

Andy

[Chris_Atkinson]

please share the output of "cplic print" from the machine hosting SmartEndpoint

[AfterMath]

hi @Chris_Atkinson 
Thanks for you feedback.. Attached de output

[G_W_Albrecht]

I would suggest to delete the old, no longer valid licenses from SMS. It has often been the reason for such issues that the first found license is used, no matter if it is no longer valid.

[AfterMath]

Hi @G_W_Albrecht 

Thanks for you feed! How do that!?

[the_rock]

I took some screencaps for you, just search for expired dates and delete.

Andy

 

 

[G_W_Albrecht]

Second option is using CLI and

cplic [-d]
      {-h | -help}
      check <options>
      contract <options>
      del <options>
      print <options>
      put <options>

[the_rock]

True true 🙂

[AfterMath]

I do not have license in red color.

[the_rock]

Sorry, my bad actually, usually ones in red would be either trial or eval, so I assume you have none of those present. Instead, as Gunther mentioned, just delete ones that are expired.

Andy

[AfterMath]

All of them ´´Expiration Date´´are Never, through smartconsole and smartupdate

[the_rock]

Honestly, if thats the case, I would reach out to License folks and sort this out.

Andy

[G_W_Albrecht]

I can see a lot of licenses that are expired in cplic output: Expiration date 25Mar2024, 27Mar2023, 10Apr2022, 27Mar2020. So maybe better try CLI to remove them. CLI procedure is:

[Expert]# cplic print -x
Host Expiration Signature Features 
192.168.80.8 26Jun2022 aVP9n3BYQGb9mWVg8mmseLknfkEJzqFjFfSw CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-xxxxxxxxxxxx
192.168.80.8 26Jun2024 asJ7Tf4nHQQNHCakLjrFBbhax4CqSV3ErmEf cpsm-c-u cpsb-npm cpsb-epm cpsb-logs cpsb-mntr cpsb-prvs cpsb-udir cpsb-wkfl-100 cpsb-ws cpsb-mptl cpvp-snx-u-ngx cpsb-swb cpsb-adnc-m cpsb-rprt-u cpsb-evcr-u cpsb-sslvpn-mobmail+5000 cpsb-comp-150 CK-xxxxxxxxxxxx
......................

[Expert]# cplic del aVP9n3BYQGb9mWVg8mmseLknfkEJzqFjFfSw