Gateway blades suddenly expiring despite having valid licenses

[Parabol]

Hi all, this morning we see an increasing number of gateways suddenly show expired licenses for the Threat Prevention blades. It is showing expiration date of May 1 2024, I believe this was the old licenses, which seem to still be present, along with 2026 licenses. I am suspecting for some reason they are now referencing the 2024 licenses. It is quite concerning with the App Control and URL filtering blades being disabled, presumably reducing our security posture.

Do you know what the best way to resolve this would be, should we delete the 2024 licences?

Thanks in advance

[the_rock · Accepted solution]

Exactly, just delete them, they are expired anyway. In case there is still an issue, please call Account services, they will sort it out for you.

[the_rock]

Btw, there are 3 ways to delete those, forgot to say:

1-smart console under objects -> licences 

2 - cplic del from expert mode

3 - smart update

[GioH]

Same issue today — SmartConsole shows the old license expiration date even though valid licenses are installed.

[the_rock · Accepted solution]

I believe this might be known issue today.

[Chris_Atkinson]

If the problem persists please reach out to Account Services, eval licenses are also available if you get stuck.

[GioH]

Just an update — the issue cleared up on its own the same day.

I haven’t found any official announcement from Check Point regarding this incident.

[the_rock]

TAC did not give any reason to my client either, so we did not want to keep asking. As long as it works 🙂

[the_rock]

This was what they sent to customer, which was great, as it worked:)

Your Service Request is being forwarded to the next available engineer. In the meantime, please follow these steps to update the Contracts of your Gateways:

In Expert mode on each Gateway CLI, run:
contract_util mgmt.

Make sure that a message is received that states Verification succeeded. Once it has succeeded, run the following command to confirm that the blades are now showing as entitled:
cpstat os -f licensing

As long as they are showing entitled in this view, SmartConsole should update within 15 minutes to display the correct licensing status.