license reverting back

[JonnyV]

Summary of issue:
We applied the our 12 core licenses last night to the standby first (fw2) and then to the active (fw1.) Active accepted the license and showed the new date of Jan. 30 for expiration in SmartConsole as well as the Gaia instance, and the Standby accepted the license as well, however it was not updating. We rebooted the standby fw2 and it came up with more cores (14) and showed the new license and I had to adjust the CoreXL count to match what the active was showing (which was 10) for sync to establish. Rebooted standby again after the cpconfig change to CoreXL and sync established. All licenses now showed correctly in each local Gaia and SmartConsole. All of our automated tests passed as well. Waited about another 30 minutes and validated that nothing was pending or falling out of sync before calling it a night.

Came in this morning to do a health/sanity check to make sure nothing weird has happened and it looks like the active firewall is no longer detecting the new license (it's back on the old one) and is now showing expiration of Jan. 2 instead of Jan. 30 what it showed last night. We can fully see that it is installed via cplic print and it is showing correctly in SmartUpdate.

Has anyone seen licensing flip flop like this and do you have any suggestions to resolve these issue in the future from flip flopping?

[_Val_]

Seems to be very odd. Are you sure nobody reverted to an older backup or snapshot?

[JonnyV]

There are only 2 of us on duty this week; so no, neither of us reverted or made any changes since 2300 last night.

[Sigbjorn]

If its a CloudGuard installation/license, there is one known issue.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[JonnyV]

1. R80.30t50
2. Hp dl360p gen8
3. 16 – license is for 12, so 12-2=10 assigned in CoreXL
4. NTP/clock looks good on both systems (active and standby)

chaser1 ~ # cpinfo -yall

This is Check Point CPinfo Build 914000196 for GAIA

[IDA]

        No hotfixes..

[MGMT]

        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  50

[CPFC]

        No hotfixes..

[FW1]

        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  50

FW1 build number:

This is Check Point's software version R80.30 - Build 484

kernel: R80.30 - Build 015

[SecurePlatform]

        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  50

[CPinfo]

        No hotfixes..

[PPACK]

        HOTFIX_R80_30_JUMBO_HF_MAIN     Take:  50

[DIAG]

        No hotfixes..

[CVPN]

        No hotfixes..

[CPUpdates]

        BUNDLE_CPINFO   Take:  49

        BUNDLE_R80_30_JUMBO_HF_MAIN_2_6_GW      Take:  50

[Sigbjorn]

You better just open a new SR and involve TAC then.

[_Val_]

@JonnyV please post here if you find the root cause, thanks

[JonnyV]

no RFO