Threat Emulation Local - No license - Files are not scanned for threats

[Zinger]

Hi everybody!

In the Local Sandblast Applience TE1000X - standalone - R80.10 (without access to the Internet) i have installed Evaluation, but after 2-3 minutes appears an error: "Threat Emulation Local - No license - Files are not scanned for threats", i have checked from CLI - a license there is.

What steps can I do to resolve the issue? Installing last hotfixes or maybe fresh install to r81.10?

Who can help me?

[_Val_]

Please show the output from "cplic print"

[G_W_Albrecht]

Why not install the correct appliance license ? R80.10 is out of support, but this is a different issue. Seems you installed an incorrect license. I doubt that an eval for a month of local emulation exists, but surely the 14d PnP license is activated after a fresh install.

[Chris_Atkinson]

Which type of evaluation license did you apply and was it the gateway or management portion if an all-in-one with or without contracts file?

As @_Val_ says we need to see the output he suggested to provide further guidance here.

[Zinger]

 Yes, I have added just all-in-one (standalone - for MGMT & SG) as i do it usually on the security gateway,  I detached "native" licences from appliance, and then they didn't appear when I tried to click "Get all licences" , maybe i didn't must do it.

I haven't find manual for adding license to sandblast appliance.

[G_W_Albrecht · Accepted solution]

Additionally install this Eval :

SANDBLAST EVALUATION WITH 28 VIRTUAL MACHINES

Evaluate Threat Emulation and Threat Extraction on a Local sandbox appliance.

[G_W_Albrecht]

Or download the original license again from UserCenter, see https://community.checkpoint.com/t5/Cloud-Network-Security/Detach-license-of-decommissioned-Firewall... for details ! Depends if this is a POC or similar, not for longer use deployment.

[Zinger]

Thank you for the help! Like you said, that was it.

[_Val_]

Then the message is correct, ALL in ONE license actually does not cover Threat Emulation.