- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Why do Hackers Love IoT Devices so Much?
Join our TechTalk on Aug 17, at 5PM CET | 11AM EST
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hi CheckMates,
I have two Multi Domain Server
Primary MDS:10.8.1.117
Ndomain1_server:10.8.1.119
gateway:10.8.1.124
Standby MDS:10.8.1.118
Ndomain1_server2:10.8.1.120
both on domain1_server1 & domain1_server2 at smartconsole, I can see gateway and can be managed.
Question1 is :
I need to generate central license to gateway on Ndomain1_server. what is Mgmt IP?
Is 10.8.1.119?
Question2 is:
If does, should I need to generate second central license to gateway on Ndomain1_server2?
Is mgmt IP is 10.8.1.120?
No
If CMA1 is primary and CMA2 is standby you are only required to license against the CMA1's management IP, if you choose to do central licensing.
What version are you running?
Long as the CMA can reach the internet you should not need to do anything as it will talk to the UC. I believe the CMA will pull the license and push this to the GW.
I assume you wanted to license, uploaded to SmartUpdate and then push out. Remember Checkpoint are moving away from SmartUpdate. If your running R80.40 or above you should not really need to use this.
At least this was what it looked like when I did it.
My Version is R80.30, all gateway and MDS can not reach internet.
In that case you would need to use SmartUpdate.
In terms of licensing the gateway you can either do central licensing using CMA IP, or it can be a local license. I would suggest a local license assuming the gateways are CP appliances and not openserver.
Once you have this done in the UC download the .lic file and contracts file (.xml). Using Smartupdate import both of these. I believe the import process is at the CMA level not MDS level.
Hi Genisis,
Should I need to generate two license on gateway ?
one MGMT IP for CMA1, another MGMT IP for CMA2 ?
No. If your doing central licensing is should be with the IP of the Primary. The CMA will sync between each other so this will get replicated across.
No
If CMA1 is primary and CMA2 is standby you are only required to license against the CMA1's management IP, if you choose to do central licensing.
I believe both answers are yes, but maybe better confirm with Account services. I had not done R80 mds yet, so not sure if the licensing had changed since R77.xx days...
it's good idea, I will open account services case.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY