SIC error with attach liccenc to gateway

[nahman127]

Hello everyone, I have some issue related to the SIC in VMWARE, I have a security gateway that connected to a management server which I access via Smart Consol. after I install the gateway and make sure that there is trust SIC connection between them I tried to attach the license file and get SIC error, I've already tried to re-initialized successfully the SIC in the CLI but keep getting the same error.  

I've added some screenshots with the errors,

thanks in advance.

[G_W_Albrecht]

Looks like a wrong license - GW license starts with CPSG- ! Feature CPVP-SNX-U-NGX looks like from a very old license, i would suggest re-licensing.

[nahman127]

I've just tried to re-licensing and got a licence that starts with CPSG but keeps getting the SIC error.

[nahman127]

@G_W_Albrecht 

[G_W_Albrecht]

The screenshot shows the CPSG license as attached to the Management instead of waiting in the Repository to be attached to the GW. Did policy install ever work successfull ?

[nahman127]

Yes, and I've tried to attach the license to the GW @G_W_Albrecht 

[G_W_Albrecht]

Do a

# cplic print

on SMS and GW and post it - this will show more information !

[nahman127]

The  one  is  the  right  side  is the  MG  and  in  the  left  side  is  the  SMS

Thnks @G_W_Albrecht 

[the_rock]

Can you apply eval license via command line, just to be 100% sure?

[G_W_Albrecht]

Yes, of course you can ! Otherwise, @PhoneBoy would not have written that, as all the licenses @nahman127  shows are EVALs 😎

[PhoneBoy · Accepted solution]

You have no valid license on your gateway, which means the policy is probably set to block all traffic (including SIC).
fw unloadlocal on your gateway should open things up.

However, you need to apply the license to the gateway.
I highly recommend using the CLI to do this using the instructions provided by your email from UserCenter.

[nahman127]

It works! .
After I've deleted all the policies with "fw unload local" in the CLI, I've installed a new policy to the SG, and it works great, thank you all @PhoneBoy @G_W_Albrecht @the_rock @Gaurav_Pandya 

[G_W_Albrecht]

In the screenshot, it is attached to the SMS, and that is wrong.

[Gaurav_Pandya]

try to fetch policy in firewall with below command and see if you are getting any license error. 

fetch policy <mgmt IP>

[PhoneBoy]

Rather than using SmartUpdate to apply the licenses, try the CLI and show us the output.
You might also verify basic connectivity between the nodes.