- Products
- Learn
- Local User Groups
- Partners
- More
Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT
What's New in Check Point SASE
The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses
AI Security Masters
Implementing the AI Security Trifecta
CheckMates Go:
Half is Not Enough
Hi CheckMates,
I have two Multi Domain Server
Primary MDS:10.8.1.117
Ndomain1_server:10.8.1.119
gateway:10.8.1.124
Standby MDS:10.8.1.118
Ndomain1_server2:10.8.1.120
both on domain1_server1 & domain1_server2 at smartconsole, I can see gateway and can be managed.
Question1 is :
I need to generate central license to gateway on Ndomain1_server. what is Mgmt IP?
Is 10.8.1.119?
Question2 is:
If does, should I need to generate second central license to gateway on Ndomain1_server2?
Is mgmt IP is 10.8.1.120?
Hi CheckMates,
I have two Multi Domain Server
Primary MDS:10.8.1.117
Ndomain1_server:10.8.1.119
gateway:10.8.1.124
Standby MDS:10.8.1.118
Ndomain1_server2:10.8.1.120
both on domain1_server1 & domain1_server2 at smartconsole, I can see gateway and can be managed.
Question1 is :
I need to generate central license to gateway on Ndomain1_server. what is Mgmt IP?
Is 10.8.1.119?
Question2 is:
If does, should I need to generate second central license to gateway on Ndomain1_server2?
Is mgmt IP is 10.8.1.120?
Hi CheckMates,
I have two Multi Domain Server
Primary MDS:10.8.1.117
Ndomain1_server:10.8.1.119
gateway:10.8.1.124
Standby MDS:10.8.1.118
Ndomain1_server2:10.8.1.120
both on domain1_server1 & domain1_server2 at smartconsole, I can see gateway and can be managed.
Question1 is :
I need to generate central license to gateway on Ndomain1_server. what is Mgmt IP?
Is 10.8.1.119?
Question2 is:
If does, should I need to generate second central license to gateway on Ndomain1_server2?
Is mgmt IP is 10.8.1.120?
What version are you running?
Long as the CMA can reach the internet you should not need to do anything as it will talk to the UC. I believe the CMA will pull the license and push this to the GW.
I assume you wanted to license, uploaded to SmartUpdate and then push out. Remember Checkpoint are moving away from SmartUpdate. If your running R80.40 or above you should not really need to use this.
At least this was what it looked like when I did it.
What version are you running?
Long as the CMA can reach the internet you should not need to do anything as it will talk to the UC. I believe the CMA will pull the license and push this to the GW.
I assume you wanted to license, uploaded to SmartUpdate and then push out. Remember Checkpoint are moving away from SmartUpdate. If your running R80.40 or above you should not really need to use this.
At least this was what it looked like when I did it.
My Version is R80.30, all gateway and MDS can not reach internet.
My Version is R80.30, all gateway and MDS can not reach internet.
In that case you would need to use SmartUpdate.
In terms of licensing the gateway you can either do central licensing using CMA IP, or it can be a local license. I would suggest a local license assuming the gateways are CP appliances and not openserver.
Once you have this done in the UC download the .lic file and contracts file (.xml). Using Smartupdate import both of these. I believe the import process is at the CMA level not MDS level.
In that case you would need to use SmartUpdate.
In terms of licensing the gateway you can either do central licensing using CMA IP, or it can be a local license. I would suggest a local license assuming the gateways are CP appliances and not openserver.
Once you have this done in the UC download the .lic file and contracts file (.xml). Using Smartupdate import both of these. I believe the import process is at the CMA level not MDS level.
Hi Genisis,
Should I need to generate two license on gateway ?
one MGMT IP for CMA1, another MGMT IP for CMA2 ?
Hi Genisis,
Should I need to generate two license on gateway ?
one MGMT IP for CMA1, another MGMT IP for CMA2 ?
No. If your doing central licensing is should be with the IP of the Primary. The CMA will sync between each other so this will get replicated across.
No. If your doing central licensing is should be with the IP of the Primary. The CMA will sync between each other so this will get replicated across.
No
If CMA1 is primary and CMA2 is standby you are only required to license against the CMA1's management IP, if you choose to do central licensing.
No
If CMA1 is primary and CMA2 is standby you are only required to license against the CMA1's management IP, if you choose to do central licensing.
I believe both answers are yes, but maybe better confirm with Account services. I had not done R80 mds yet, so not sure if the licensing had changed since R77.xx days...
I believe both answers are yes, but maybe better confirm with Account services. I had not done R80 mds yet, so not sure if the licensing had changed since R77.xx days...
it's good idea, I will open account services case.
it's good idea, I will open account services case.