SSL Network Extender: Not enough licenses for SNX

[SChalhoub]

Although we have licenses applied to gateways we have problems with SNX VPN clients.

This issue starts without any changes to our applied licenses.

Here is an excerpt from the error message:
; reason :: SSL Network Extender: Not enough licenses for SNX; scheme :: SSL; methods ::; reject_category: SSL Network Extender authentication failure;

Does anyone has any inside about this issue ?

Best Regards, 

[PhoneBoy]

Providing output from cplic print would be a good place to start.
That message in general indicates you either don't have appropriate licenses or there are more users connected than you are licensed for.

[SChalhoub]

Hi PhoneBoy , 

Thank you for your reply.
We have a cluster with two member (fw-trf2-a and fw-trf2-b).
Our Management is fw-sm-a.

Here is the output of cplic print.

Management

[Expert@fw-sm-a:0]# cplic print

Host             Expiration  Features

172.16.X.X     never       CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

Contract Coverage:

#   ID          Expiration   SKU

===+===========+============+====================

1  | W511W96   | 24Oct2021  | CPCES-CO-PREMIUMPRO

   +-----------+------------+--------------------

   |Covers:     CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

2  | Q3TWH11   | 24Oct2019  | CPSB-EVNT-5-1Y

   +-----------+------------+--------------------

   |Covers:     CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

3  | PR20SOO   | 24Oct2019  | CPSB-RPRT-5-1Y

   +-----------+------------+--------------------

   |Covers:     CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

4  | AWGF0WU   | 24Oct2019  | CPSB-COMP-5-1Y

   +-----------+------------+--------------------

   |Covers:     CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

Gateway

[Expert@fw-trf2-a:0]# cplic print

Host             Expiration  Features

172.16.X.X    never       CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

172.16.0.252     never       CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

Contract Coverage:

#   ID          Expiration   SKU

===+===========+============+====================

1  | E4S32Y2   | 24Oct2021  | CPSB-ABOT-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

2  | 392YY6H   | 24Oct2021  | CPSB-ASPM-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

3  | A765EH3   | 24Oct2021  | CPSB-TE-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

4  | 11HF7GP   | 24Oct2021  | CPCES-CO-PREMIUMPRO-ADD

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

5  | 634TU0F   | 24Oct2021  | CPSB-IPS-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

6  | 88SFR16   | 24Oct2021  | CPSB-APCL-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

7  | 439SG4G   | 24Oct2021  | CPSB-URLF-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

8  | H23TU1T   | 24Oct2021  | CPSB-AV-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

9  | DAGF163   | 24Oct2021  | CPSB-CTNT-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

10 | 46O556D   | 24Oct2021  | CPSB-TEX-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

Gateway

[Expert@fw-trf2-b:0]# cplic print

Host             Expiration  Features

1172.16.X.X   never       CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

172.16.0.253     never       CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

Contract Coverage:

#   ID          Expiration   SKU

===+===========+============+====================

1  | IQ261U1   | 24Oct2021  | CPSB-CTNT-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

2  | 11HF7GP   | 24Oct2021  | CPCES-CO-PREMIUMPRO-ADD

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

3  | H5112F2   | 24Oct2021  | CPSB-AV-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

4  | STDY8T1   | 24Oct2021  | CPSB-TE-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

5  | RFH28UG   | 24Oct2021  | CPSB-IPS-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

6  | 414P2D8   | 24Oct2021  | CPSB-ASPM-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

7  | D8E81I4   | 24Oct2021  | CPSB-TEX-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

8  | 51S76H5   | 24Oct2021  | CPSB-URLF-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

9  | DP1521Y   | 24Oct2021  | CPSB-APCL-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

10 | UHPWTOF   | 24Oct2021  | CPSB-ABOT-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

[PhoneBoy]

It looks like you have a couple of different licenses on here: one for CPSB-SSLVPN-200 and one for CPVP-SNX-100-NGX.
In fact, the second license string is entirely redundant and could be part of the issue.

[G_W_Albrecht]

The CPVP-SNX-100-NGX is not redundant but the good old Legacy SNX license for users that did not want to change to / buy the Mobile Access Blade ! There was a certain time window when customer could decide to either move to MAB or stay with Legacy SNX (no portal) - since then, the MAB license is always the CPSB-SSLVPN-xxx.

So, mixing these licenses is a good reason to cause licensing havoc 😞 If you have MAB and MAB user licenses, so please remove the legacy license !

[G_W_Albrecht]

Contact TAC / Account Services - you should be able to have over 200 clients connecting concurrently !

[Martin_Raska]

you can verify how many clients are currently connected.
RAsession_util show users all
OR
fw tab -t userc_users -s

[G_W_Albrecht]

Find even more here: Remote Access Users license + count

[SChalhoub]

Hi G_W_Albrecht,
the problem was solved contacting TAC.

Regards.