Licencing for multiple seats 'offline' ?

[Andrew_Tindall]

I need to license a HA pair of virtual gateways offline (SC and gateways currently have no internet access as they are for internal use only, no proxy is available right now). SC for these devices was licenced in offline mode in the usual manner, so that's all good.

I have a 2 seat CPSG-VSEC-NSX-BUN-NGTP-3Y-LICENSE in the User Centre for these devices.

When I go to license I have two options Central and local. 

If I select Central it gives me the option to entre an IP Address, should this be the gateways IP or that of the SC? If it's the gateway do I use the VIP or the IP for the specific gateway?

I'm assuming since the SC has no internet access I will need to select local?

When selecting local it gives me dialogue boxes for both Gateway and Management IP's, how does this work with multiple seats, Can I just generate one licence file then run through the process again to generate another one for the second gateway in the HA pair?

Any pointers to appropriate SK's or pervious solutions gratefully accepted, as my search skills are lacking for this one.

[PhoneBoy]

"Central" licensing means controlled from the management, which the gateways should have access to anyway.
Use the Management IP address for this.
Central licenses can be used in an offline environment.

[Andrew_Tindall]

Apologies for the silly question, but I'm a little sleep deprived today.

So I would  generate the .lic file using the SC's IP address? Then add to the repository using SmartUpdate and attach the licence's from there?

[PhoneBoy]

Yes to both.

[Andrew_Tindall]

Thanks for you help as always.

I do have another query though, see my other post in this thread for details, could you confirm if I'm on the right track with this?

[G_W_Albrecht]

sk11054: Check Point License Guide

[Andrew_Tindall]

Thanks for the reply. Just got a what I think is a simple issue left in that it will only attach to a single gateway (that is setup with 2 CPU cores in VMWare).

The licence in question is a;

CPSG-VSEC-NSX-BUN-NGTP-3Y-LICENSE 1 CloudGuard Network virtual Core for NSX  2 seats)

Am I right in thinking in that it will only attach to one gateway as that is using both seats as it is setup with 2 CPU cores?

And that to utilise it on both gateways they need to be configured with a single CPU core?

[PhoneBoy]

Correct, as the license is only for two cores total.
To install it on two gateways, each would need a single core.

[Andrew_Tindall]

It's still not letting me attach the license to the second gateway in SmartUpdate.

It attaches to the first gateway without issue, but when attempting to attach to the second gateway it tell me that there are no unattached licences. Using the attached assigned licence's is greyed out as an option.

I feel like I'm missing something really obvious here, I've checked the VM's they are both only showing a single core.

Do I need to generate two licence files in the User Centre account?  Looking at the UC it appears to generate a .lic file for a single core?

License - Step 1 of 1
Product Name	CPSG-VSEC-NSX-BUN-NGTP-3Y-LICENSE
Certificate Key	XXXXXXXXXX
Description	1 CloudGuard Network virtual Core for NSX. Annual subscription for 3 years

[Chris_Atkinson]

You can't attach it to multiple gateways using this method without intervention from account services to split it prior.

By comparison if you use the Cloudgauard central license utility you shouldn't have this problem as each gateway will get what it needs from the 'pool'.