Installing BYOL on Checkpoint Cloudguard

[LostBoY]

I am trying to install BYOL Licenses on a Checkpoint Cloudguard cluster in AWS. As far as i remember after uploading the license file via smartconsole a command is to be run on Management Server CLI to distribute licenses to the Firewall Instances.

Can anyone help me with that command..i am struggling to find it.

[_Val_ · Accepted solution]

Please see here and let me know if it helps: https://sc1.checkpoint.com/documents/IaaS/WebAdminGuides/EN/CP_CloudGuard_Central_License_Tool_Admin...

[LostBoY]

This worked .. thanks

[Daniel_Kavan]

Hi Val,

After you buy then install a BYOL license for a firewall hosted on Azure or AWS, does that include support and services thru Check Point or is that just for the software?

[PhoneBoy]

Support and services are usually separate line items.

[Nicholas_Cuba · Accepted solution]

vsec_lic_cli ? Could this be the command you are looking for?

CloudGuard Network Central License Tool R80.20 and Higher Administration Guide 

If you do you use this tool, I've found it much easier to forego the license file attachment in SmartConsole, and just utilize the two cplic put commands that come in the license instructions.

Very basic instructions:  Run the first one on the command line of the management server. Then copy the second command, starting at the management's IP address. You don't need the "cplic put [module name]" part, just everything after that. Type the command out vsec_lic_cli add followed by pasting that copied portion of the gateway command. Then run vsec_lic_cli distribute to parse it out to the gateways.

If you've got something more complex, I'll refer you to the Administration Guide that I've linked. Also of note, R80.40 and higher CloudGuard Central License Known Limitations  is pretty explicit about issue ID PMTR-3957. Don't use the SmartUpdate application once you start using the central license tool.

[LostBoY]

Thanks..

So all i had to do is put the license in mgmt via cplic and then issue vsec_lic_cli on and vsec_lic_cli distribute