Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
JonnyV
Contributor

license reverting back

Summary of issue:
We applied the our 12 core licenses last night to the standby first (fw2) and then to the active (fw1.) Active accepted the license and showed the new date of Jan. 30 for expiration in SmartConsole as well as the Gaia instance, and the Standby accepted the license as well, however it was not updating. We rebooted the standby fw2 and it came up with more cores (14) and showed the new license and I had to adjust the CoreXL count to match what the active was showing (which was 10) for sync to establish. Rebooted standby again after the cpconfig change to CoreXL and sync established. All licenses now showed correctly in each local Gaia and SmartConsole. All of our automated tests passed as well. Waited about another 30 minutes and validated that nothing was pending or falling out of sync before calling it a night.

Came in this morning to do a health/sanity check to make sure nothing weird has happened and it looks like the active firewall is no longer detecting the new license (it's back on the old one) and is now showing expiration of Jan. 2 instead of Jan. 30 what it showed last night. We can fully see that it is installed via cplic print and it is showing correctly in SmartUpdate.

Has anyone seen licensing flip flop like this and do you have any suggestions to resolve these issue in the future from flip flopping?

7 Replies
_Val_
Admin
Admin

Seems to be very odd. Are you sure nobody reverted to an older backup or snapshot?

0 Kudos
JonnyV
Contributor

There are only 2 of us on duty this week; so no, neither of us reverted or made any changes since 2300 last night.

0 Kudos
Sigbjorn
Advisor
Advisor

If its a CloudGuard installation/license, there is one known issue.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

 

JonnyV
Contributor

  1. R80.30t50
  2. Hp dl360p gen8
  3. 16 – license is for 12, so 12-2=10 assigned in CoreXL
  4. NTP/clock looks good on both systems (active and standby)

 

chaser1 ~ # cpinfo -yall

This is Check Point CPinfo Build 914000196 for GAIA

[IDA]

        No hotfixes..

[MGMT]

        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  50

[CPFC]

        No hotfixes..

[FW1]

        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  50

FW1 build number:

This is Check Point's software version R80.30 - Build 484

kernel: R80.30 - Build 015

[SecurePlatform]

        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  50

[CPinfo]

        No hotfixes..

[PPACK]

        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  50

[DIAG]

        No hotfixes..

[CVPN]

        No hotfixes..

[CPUpdates]

        BUNDLE_CPINFO   Take:  49

        BUNDLE_R80_30_JUMBO_HF_MAIN_2_6_GW      Take:  50

Sigbjorn
Advisor
Advisor

You better just open a new SR and involve TAC then.

0 Kudos
_Val_
Admin
Admin

@JonnyV please post here if you find the root cause, thanks

JonnyV
Contributor

no RFO

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events