Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
nflnetwork29
Advisor

office mode vpn licensing

How do i check this one? I though Ipsec VPN does not require any additional license . 

 

 

2022-05-26_16-14-04.png

0 Kudos
11 Replies
PhoneBoy
Admin
Admin

IPSec VPN is for Site-to-Site VPN and for Remote Access using SecuRemote.
More details here: https://community.checkpoint.com/t5/Remote-Access-VPN/Quick-Primer-on-How-to-Configure-your-Gateway-...

Office Mode requires specific licensing to use, namely one of:

  • Harmony Endpoint licenses (various SKUs)
  • Mobile Access (MOB-x)

If you post your cplic print output I can tell you conclusively if you have it or not.
You probably don’t if you’re seeing that error.

0 Kudos
nflnetwork29
Advisor


@PhoneBoy wrote:

IPSec VPN is for Site-to-Site VPN and for Remote Access using SecuRemote.
More details here: https://community.checkpoint.com/t5/Remote-Access-VPN/Quick-Primer-on-How-to-Configure-your-Gateway-...

Office Mode requires specific licensing to use, namely one of:

  • Harmony Endpoint licenses (various SKUs)
  • Mobile Access (MOB-x)

If you post your cplic print output I can tell you conclusively if you have it or not.
You probably don’t if you’re seeing that error.


[Expert@cp01:0]# cplic print
Host Expiration Features
X.X.X.X never CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
X.X.X.X never CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | 8583OQ9 | 26Sep2019 | CPES-SS-PREMIUM-ADD
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
2 | 852Y405 | 7Oct2022 | CPSB-IPS-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
3 | 8G4F952 | 7Oct2022 | CPSG-VSEC-AZURE-BUN-NGTX-CONTRACT
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
4 | WETD169 | 7Oct2022 | CPSB-AV-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
5 | H51D03O | 7Oct2022 | CPSB-URLF-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
6 | PHPY5WT | 7Oct2022 | CPSB-APCL-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
7 | 5A348RO | 7Oct2022 | CPSB-ASPM-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
8 | SE1OGU2 | 7Oct2022 | CPSB-TEX-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
9 | 1038FRY | 7Oct2022 | CPES-SS-STANDARD
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
10 | ETPTPRD | 7Oct2022 | CPSB-TE-VE-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
11 | 3HYHAO6 | 7Oct2022 | CPSB-ABOT-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
12 | 4FDD165 | 7Oct2022 | CPSB-CTNT-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
[Expert@cp01:0]#

0 Kudos
PhoneBoy
Admin
Admin

Theoretically CPSB-SSLVPN-5 should give you this for five users.
Whether Mobile Access is enabled or not is irrelevant here.
That said, if it doesn't work, a standard "all in one" eval can be applied. 

0 Kudos
the_rock
Champion
Champion

You positively 100% do not have valid license for it, no question. I had seen that many times before. Just generate eval license for the time being and it will work. Then, you can take it with License team to get it sorted out.

0 Kudos
nflnetwork29
Advisor

i found these two. 

PS i do not even have the mobile access blade enabled - is it required for office mode?

 

2022-05-26_19-41-43.png2022-05-26_19-40-54.png

 

 

 

 

0 Kudos
the_rock
Champion
Champion

Its not required.

0 Kudos
nflnetwork29
Advisor

which eval am i looking for?

Harmony Mobile?

0 Kudos
the_rock
Champion
Champion

Send me the IP tied to the license, I will get it for you. Its all in one eval.

0 Kudos
the_rock
Champion
Champion

Emailed it...btw, you may not need it for mgmt, since RA is just for gateways, plus the same IP is probably not applicable. Also, you can paste it to the active gateway, as I cant generate license with same IP for the backup firewall. Besides, the IP tied to the license on backup fw has to be different than master, so send me that and I can get the eval for that as well. You have one month to sort out the license, its more than enough time, for sure.

0 Kudos
nflnetwork29
Advisor

@the_rock 

According to TAC office mode VPN license is installed on the management server NOT the gateway .

Appreciate your help!

Just letting you know 

0 Kudos
the_rock
Champion
Champion

Yes if its central license, if not, then it would make no sense to install it on mgmt.

Andy

0 Kudos