1 Y Eval on 1570R showing as invalid

[G_W_Albrecht]

For a demo 1570R that has run out of bundled services, i was in the need to install an eval license, As the POC could take 2-3 month (and could be followed by some time in my Lab environment) i had decided to use a 1 Y Eval, But i was unable to get it working - a license error was shown:

<-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-9B70EF9A2D03
macros_os_params_os_table_wifi_minflag_set seting wifi_os_table_failed on the O S side
set_os_isLicensed_wifi_flag failed to set minflag
macros_os_params_wifi_init failed to initialize the wifi_region
Failed to install license: Ok

Could it be true that a 1570R will not work with an eval ? @Amir_Ayalon ? Account services only gave the final recommendation to ask TAC...

[_Val_]

I think SMB are using a different license signature format. It seems you are installing a regular Gaia license. I would open a TAC request to double-check

[G_W_Albrecht]

It was possible on 7x0/14x0/15x0 SMBs to install the AllInOne license, see my old post https://community.checkpoint.com/t5/SMB-Gateways-Spark/1400-1100-1200R-700-600-Appliance-Demo-Units/...

I suspect that this special HW needs a special license...

[_Val_]

Why IP address and not MAC address? 

[G_W_Albrecht]

You can not put in the MAC when generating the All-In-One....

I have done this kind of licensing a many times before, and it always has worked if performed correctly...

[G_W_Albrecht]

Now i have performed the same procedure on my Lab 730, worked perfectly, as every year...

Maybe @Nir_Halaly can help here ?

[the_rock]

I would call Account services myself. Every time I did for any license issue, it got solved pretty quickly.

Andy

[G_W_Albrecht]

I already did, and Account services only gave the final recommendation to ask TAC...

[the_rock]

Hm...maybe they dont help as much with 1 year evals, not sure.

Andy

[G_W_Albrecht]

This is SMB and 1570R, and SMBs are rarely used with 1 Y Lab Evals.

[the_rock]

I had not seen many of those on regular Gaia either...I meant 1 year eval licences.

[G_W_Albrecht]

This is for Partners as well as CCSPs like us that have Lab deployments used for customer demos. I had received an own one for my CCSM Elite certification...

[the_rock]

Right. I know it is for partners, thats true...I used it while back for some lab testing, but been some time.

[G_W_Albrecht]

This procedure for 1Y AIO works very fine with 1600 SMB.

[Lesley]

Should be supported as stated in: https://support.checkpoint.com/results/sk/sk178604

But different sk shows:

Small-Medium Business Appliances (SMB)

For Small and Medium-sized Businesses (SMB), the designated evaluation license option is "Threat Prevention Evaluation."

When you select this option, you are prompted to select the User Center account associated with the SMB device. In addition, the user that creates the evaluation license must be linked to the specified User Center account. Enter the MAC address of the SMB device during this process.

When finished, the evaluation blades are integrated into the specified SMB device. Subsequently, the license for the SMB device must be generated and applied.

[G_W_Albrecht]

This is true for the 30 day eval only - 1 year Lab demo is something different....

[G_W_Albrecht]

CP TAC is unwilling to give support for a NFR unit without valid support contract - never had that ! But seems i have found the reason of the error: The AllInOne 1y has no CPWIFI-EU feature included, this is needed for 1570R as it is shown in the original license !

[the_rock]

I can see why that would be the case, though once in the past, when customer had similar scenario, Sales guy opened the case, so they did help.

Andy

[G_W_Albrecht]

With an end customer, this may be correct - but with partner & CCSP that rely on NFR units with evals this is inappropriate at least.

[the_rock]

I cant really comment on that, as I have no clue in the world what the actual process for those thing is.

Andy

[G_W_Albrecht]

Nir Halaly has taken over, very good, but the reason is clear now:

- old 7x0/14x0 wifi units have a license like CPAP-AP730 ENF-APP CPSB-FW CPSB-VPN CPSB-IA CPSB-ADNC CPSB-ADNC-M CPSB-SSLVPN-50 CPSB-SSLVPN-50 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM

- 15x0 units have 127.0.0.1   CPAP-AP1530 CPWIFI-EU CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-IA CPSB-ADNC CPSB-ADNC-M CPSB-SSLVPN-50 CPSB-SSLVPN-50 CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPAP-CLOUD-MGM

- so the CPWIFI-EU is missing from an AllInOne 1 month or 1y license and produces the error

macros_os_params_os_table_wifi_minflag_set seting wifi_os_table_failed on the OS side

 set_os_isLicensed_wifi_flag failed to set minflag

 macros_os_params_wifi_init failed to initialize the wifi_region

 Failed to install license: Ok

For POC, this means that without valid support contract, you will not be able to use the unit longer than the 14days PnP license as it must be wiped to get a new PnP...