office mode vpn licensing

[nflnetwork29]

How do i check this one? I though Ipsec VPN does not require any additional license . 

[PhoneBoy]

IPSec VPN is for Site-to-Site VPN and for Remote Access using SecuRemote.
More details here: https://community.checkpoint.com/t5/Remote-Access-VPN/Quick-Primer-on-How-to-Configure-your-Gateway-...

Office Mode requires specific licensing to use, namely one of:

• Harmony Endpoint licenses (various SKUs)
• Mobile Access (MOB-x)

If you post your cplic print output I can tell you conclusively if you have it or not.
You probably don’t if you’re seeing that error.

[nflnetwork29]

---

@PhoneBoy wrote:

IPSec VPN is for Site-to-Site VPN and for Remote Access using SecuRemote.
More details here: https://community.checkpoint.com/t5/Remote-Access-VPN/Quick-Primer-on-How-to-Configure-your-Gateway-...

Office Mode requires specific licensing to use, namely one of:

• Harmony Endpoint licenses (various SKUs)
• Mobile Access (MOB-x)

If you post your cplic print output I can tell you conclusively if you have it or not.
You probably don’t if you’re seeing that error.

---

[Expert@cp01:0]# cplic print
Host Expiration Features
X.X.X.X never CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
X.X.X.X never CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | 8583OQ9 | 26Sep2019 | CPES-SS-PREMIUM-ADD
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
2 | 852Y405 | 7Oct2022 | CPSB-IPS-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
3 | 8G4F952 | 7Oct2022 | CPSG-VSEC-AZURE-BUN-NGTX-CONTRACT
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
4 | WETD169 | 7Oct2022 | CPSB-AV-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
5 | H51D03O | 7Oct2022 | CPSB-URLF-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
6 | PHPY5WT | 7Oct2022 | CPSB-APCL-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
7 | 5A348RO | 7Oct2022 | CPSB-ASPM-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
8 | SE1OGU2 | 7Oct2022 | CPSB-TEX-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
9 | 1038FRY | 7Oct2022 | CPES-SS-STANDARD
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
10 | ETPTPRD | 7Oct2022 | CPSB-TE-VE-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
11 | 3HYHAO6 | 7Oct2022 | CPSB-ABOT-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
12 | 4FDD165 | 7Oct2022 | CPSB-CTNT-S-1Y
+-----------+------------+--------------------
|Covers: CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-621EEC42BD89
| CPSG-VE+10 CPSB-BASE CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-IA CPSB-ADNC CPSB-SSLVPN-5 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-621EEC42BD89
===+===========+============+====================
[Expert@cp01:0]#

[PhoneBoy]

Theoretically CPSB-SSLVPN-5 should give you this for five users.
Whether Mobile Access is enabled or not is irrelevant here.
That said, if it doesn't work, a standard "all in one" eval can be applied. 

[the_rock]

You positively 100% do not have valid license for it, no question. I had seen that many times before. Just generate eval license for the time being and it will work. Then, you can take it with License team to get it sorted out.

[nflnetwork29]

i found these two. 

PS i do not even have the mobile access blade enabled - is it required for office mode?

[the_rock]

Its not required.

[nflnetwork29]

which eval am i looking for?

Harmony Mobile?

[the_rock]

Send me the IP tied to the license, I will get it for you. Its all in one eval.

[the_rock]

Emailed it...btw, you may not need it for mgmt, since RA is just for gateways, plus the same IP is probably not applicable. Also, you can paste it to the active gateway, as I cant generate license with same IP for the backup firewall. Besides, the IP tied to the license on backup fw has to be different than master, so send me that and I can get the eval for that as well. You have one month to sort out the license, its more than enough time, for sure.

[nflnetwork29]

@the_rock 

According to TAC office mode VPN license is installed on the management server NOT the gateway .

Appreciate your help!

Just letting you know 

[the_rock]

Yes if its central license, if not, then it would make no sense to install it on mgmt.

Andy