You cannot receive an office mode ip address

[Dyslexic155]

Hello Guys,

We are having an issue with Mobile Access, where user gets error message (Connection failed You cannot receive an Office Mode IP address because the Security Gateway does not have a license for Office Mode)

The problem started after switching the gateway to threat prevention, it was displayed that IPS trial license is active then we noticed under Mobile Access in the license overview it's no longer 0/50 users but 0/5.

If I log out of the VPN, my colleague can log in, But if I try to log in again I get the error message.

It looks like the license is being overridden by the trial one or something, I can see both in the output of cplic print as below:

#cplic print
Host Expiration Features
trial 20May2023 PNP_BLADE_IPS:V1:trial CPSB-IPS
10.*.*.* never CPAP-SG510X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-50 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-00-1C-7F-87-28-99
10.*.*.* never CPAP-SG510X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-50 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-00-1C-7F-87-28-99
10.*.*.* never cpvp-snx-25-ngx cpvp-snx-25-ngx cpsb-swb cpvp-snx-5-ngx cpsb-swb cpsb-adnc-m CK-00-1C-7F-87-28-99

Do we have to delete the trial license or what's recommended in this case?

*Edit: I noticed at the user center that the product SKU is CPSB-MOB-50, does this mean that CPSB-SSLVPN-50 is not the one?

Thanks in advance,

[Dyslexic155]

[G_W_Albrecht]

How many licenses are in the UserCenter ? I would assume that #2 and #3 are the same license for appliance 00-1C-7F-87-28-99. According to the license string, only #2 includes the Mob-50 ! #3 was licensed BEFORE the Mob-50 was added to the license, #2 afterwards.

[G_W_Albrecht]

IPS trial is not the culprit: Remove the third license:

10.*.*.* never CPAP-SG510X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-50 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-00-1C-7F-87-28-99

This is an (older) duplicate license missing the additional CPSB-SSLVPN-50 - i suppose it is found first and so the issue results. Should be removed !

[Dyslexic155]

But I can see already that CPSB-SSLVPN-50 is there on the first two, it's only missing on the third one right?

[Chris_Atkinson]

There are too many license strings reported there and you should remove the duplicate entries/evals.

What does the following command report?

[Expert@HostName]# cvpnd_admin license all

Also with reference to sk174258 what version & JHF is the gateway?

[Dyslexic155]

So should I deleted the second and third license?

[Expert@mon_vpn_gateway:0]# cvpnd_admin license all

MOB License:
Total used licenses are: 0
MOBMAIL License:
Total used licenses are: 0
[Expert@mon_vpn_gateway:0]#

We are running R80.40 JHF 180

[the_rock]

Here is my honest suggestion for the time being...just apply full eval license until this can be sorted out.