Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
nahman127
Participant

SIC error with attach liccenc to gateway

Jump to solution

Hello everyone, I have some issue related to the SIC in VMWARE, I have a security gateway that connected to a management server which I access via Smart Consol. after I install the gateway and make sure that there is trust SIC connection between them I tried to attach the license file and get SIC error, I've already tried to re-initialized successfully the SIC in the CLI but keep getting the same error.  

I've added some screenshots with the errors,

thanks in advance.

 

Screenshot (2).pngScreenshot (3).png

 

 

 

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

You have no valid license on your gateway, which means the policy is probably set to block all traffic (including SIC).
fw unloadlocal on your gateway should open things up.

However, you need to apply the license to the gateway.
I highly recommend using the CLI to do this using the instructions provided by your email from UserCenter.

View solution in original post

0 Kudos
14 Replies
G_W_Albrecht
Legend
Legend

Looks like a wrong license - GW license starts with CPSG- ! Feature CPVP-SNX-U-NGX looks like from a very old license, i would suggest re-licensing.

CCSE CCTE SMB Specialist
0 Kudos
nahman127
Participant

I've just tried to re-licensing and got a licence that starts with CPSG but keeps getting the SIC error.

 

Screenshot (5).png

 

0 Kudos
nahman127
Participant
0 Kudos
G_W_Albrecht
Legend
Legend

The screenshot shows the CPSG license as attached to the Management instead of waiting in the Repository to be attached to the GW. Did policy install ever work successfull ?

CCSE CCTE SMB Specialist
0 Kudos
nahman127
Participant

Yes, and I've tried to attach the license to the GW @G_W_Albrecht 

0 Kudos
G_W_Albrecht
Legend
Legend

Do a

# cplic print

on SMS and GW and post it - this will show more information !

CCSE CCTE SMB Specialist
0 Kudos
nahman127
Participant

The  one  is  the  right  side  is the  MG  and  in  the  left  side  is  the  SMS

Thnks @G_W_Albrecht 

Screenshot (6).png

0 Kudos
the_rock
Champion
Champion

Can you apply eval license via command line, just to be 100% sure?

 

0 Kudos
G_W_Albrecht
Legend
Legend

Yes, of course you can ! Otherwise, @PhoneBoy would not have written that, as all the licenses @nahman127  shows are EVALs 😎

CCSE CCTE SMB Specialist
0 Kudos
PhoneBoy
Admin
Admin

You have no valid license on your gateway, which means the policy is probably set to block all traffic (including SIC).
fw unloadlocal on your gateway should open things up.

However, you need to apply the license to the gateway.
I highly recommend using the CLI to do this using the instructions provided by your email from UserCenter.

View solution in original post

0 Kudos
nahman127
Participant

It works! .
After I've deleted all the policies with "fw unload local" in the CLI, I've installed a new policy to the SG, and it works great, thank you all @PhoneBoy @G_W_Albrecht @the_rock @Gaurav_Pandya 

G_W_Albrecht
Legend
Legend

In the screenshot, it is attached to the SMS, and that is wrong.

CCSE CCTE SMB Specialist
0 Kudos
Gaurav_Pandya
Advisor

try to fetch policy in firewall with below command and see if you are getting any license error. 

fetch policy <mgmt IP>

0 Kudos
PhoneBoy
Admin
Admin

Rather than using SmartUpdate to apply the licenses, try the CLI and show us the output.
You might also verify basic connectivity between the nodes.