Default policy installation failed in vsx gatewa

[Salman139182]

During VSX wizard and Installing default policy in VSX gateway getting below error:

Installing default Policy - GW-1_VSX on GW-1...

Policy installation failed on gateway. There is no valid license for the security gateway. To view existing licenses and add new licenses, use Licensing tab in Gateways & Servers (see sk11054).

Policy installation failed on gateway. If the problem persists contact Check Point support (Error code: 0-1-2000080).

Policy installation failed. Security Gateway not installed.

Failed to install default policy GW-1_VSX on GW-1

Installing VSX default policy operation has finished with errors.

         This could have happen due to time-out while installing security policy.

         Check the modules to see if security policy is installed. if so discard

         this error message.

         If policy is not installed make sure that the failed Virtual System/Router

         is accessible from the management server, and that you have a valid license.

         Try to install security policy manually from the SmartDashboard.

         If the problem persists contact Check Point Technical Support.

Operation has failed.

[Lesley]

Is trail expired? If you installed this machine more then 15 days ago, the message is valid

When installing a Check Point product for the first time, users receive a 15 day trial period, during which the product is fully functional. Once the trial period expires, you must purchase and install the appropriate permanent product licenses. During the trial period, you can configure up to 25 Virtual Systems.

[Salman139182]

Trail licence is valid till 1april.

[TurgutKaplanogl]

Hello,

With these details it is not possible to resolve this type of issue. If there is a licensing problem here, it should be evaluated under two main point.

First, the license status on the VSX Gateway itself should be checked. Second, if the management server managing the VSX Gateway is an MDS, it is necessary to verify whether there is any licensing related issue on that side.

Additionally, trial periods that come with the installation may sometimes disappear due to various reasons. In this case, I recommend using your original license or creating a manual evaluation license.
(Note: In addition to the Gateway eval license you also need to generate a separate eval license for the VS)

If the issue is not related to licensing, more details and logs will be required.

Thank you

TK

[Martijn]

Hi,

Are Implied Rules disabled? When Implied Rules (Control Connections and Connection Originating from Gateway) are disabled, these rules are not pushed with the first policy install. And the default VSX policy does not allow Control Connections.

So this looks like to policy install fails, but in fact the policy is installed, but you cut off traffic to and from the management server.

Something to check.

Martijn

[emmap]

What version is the management server, and if it's R82/R82.10 do you have the CRL fix  installed?