Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
TronNQ
Participant

Checkpoint Gateway don't receive license

when I show cpstat os -f licensing and notice that on our Gateway device it doesn't show any blades.

Has anyone had this problem before?

NTP_hospital.png

0 Kudos
18 Replies
AkosBakos
Collaborator

Hi TronNQ,

Have you licensed the appliances in the usercenter?

Have you tried to put the licences manually? Eg.: #cplic put, or using the SmartUpdate?

If you do it manually, don't forget update the contract files too. You can download it from the usercenter. 

And one more, the appliances have "real" internet access? Can you ping updates.checkpoint.com?

 

A

TronNQ
Participant

Dear Akos,

Yes, I have add license Manually, currently gateway device and managent device already expried license, i have install license EVAL, but management device have recieve EVAL license, but Gateway show like this.

Gateway device can ping updates.checkpoint.com

0 Kudos
the_rock
Legend
Legend

Please provide output of cplic print -x. Also, once you open smart update, make sure to right click on the object and then click "get licenses"

Below is example from my R81.20 lab

Andy

 

[Expert@quantum-firewall:0]# cplic print -x
Host Expiration Signature Features
172.16.10.205 3Jul2023 dLmx6j4auSnftt8Wgi4m8udjLSZJwc4Cywhz CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | MUVY3AG | 2Aug2023 | CPSB-IPS-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280
===+===========+============+====================
2 | 3AENF43 | 2Aug2023 | CPSB-TEX-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280
===+===========+============+====================
3 | MK7CO0K | 2Aug2023 | CPSB-TE-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280
===+===========+============+====================
4 | 69YUEAO | 2Aug2023 | CPSB-CTNT-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-628D753A9280
===+===========+============+====================
[Expert@quantum-firewall:0]#

 

 

Screenshot_1.png

 

Screenshot_2.png

 

 

Screenshot_3.png

Hope that helps.

 

TronNQ
Participant

Hi Bro,

This is out put cplic print -x of me, device expried license at 5may2023, if correct it will show expried at 7Jul2023 after I import license EVAL.

I think, because license table don't show blade as metinon from previous chat.

2023-06-07_203849.png2023-06-07_203922.png2023-06-07_204008.png

 

0 Kudos
TronNQ
Participant

even on device's webui doesn't show any information?2023-06-07_204538.png

0 Kudos
the_rock
Legend
Legend

Message me offline, I can generate one for you, just send the IP address.

Cheers.

the_rock
Legend
Legend

I messaged you directly with proper string...just apply exactly what I sent you from expert mode and then do get licenses from smart update and let us know.

TronNQ
Participant

Thanks bro, i will try and let you know!

0 Kudos
the_rock
Legend
Legend

You can also do it with -o flag, BUT, that would overwrite any existing licenses, so be careful if you do that.

Andy

 

[Expert@quantum-firewall:0]# cplic put
Install license on local machine:
cplic put [-o overwrite] [-c check-only] [-s select] [-F <output file>] [-P pre-boot] [-k kernel-only] < -l license-file | host expiration-date signature SKU/features >

[Expert@quantum-firewall:0]#

0 Kudos
the_rock
Legend
Legend

For you bro, no charge, except Iphone charge ; - )

0 Kudos
the_rock
Legend
Legend

Hey @TronNQ , any luck with what I sent you?

Cheers mate.

Andy

0 Kudos
TronNQ
Participant

Hi Bro,

I have tried, but it dosen't work. it still show expried date at 5May2023.
new_license_1.pngnew_license_2.pngnew_license_4.png

0 Kudos
TronNQ
Participant

i think the problem is probably because in os does not contain any license, cpstat os -f policy.

new_license_3.png

0 Kudos
the_rock
Legend
Legend

Honestly,  I would reach out to TAC and have them verify. Something does not look quite right.

Andy

https://help.checkpoint.com

0 Kudos
TronNQ
Participant

Because, the license have expried, I don't know if it is possible to open the case with TAC with this condition?

0 Kudos
the_rock
Legend
Legend

That I could not say, you can try open one online or call them and they will verify.

Andy

Blason_R
Leader
Leader

Did you try to cut the licenses from your usercenter with central license and imported into Smart update and then tried attaching?

If so then contacting license support would really help as @the_rock suggested. 

Thanks and Regards,
Blason R
CCSA,CCSE,CCCS
the_rock
Legend
Legend

Im thinking maybe Account services would be best to help here.

Andy

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events