Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
m_k_user
Participant
Jump to solution

Licence Entitlement

Hi Check Point team and community
Please, give me a clarification.
We have Check Point Security Gateway (Version: R81.10 Jumbo Hotfix Take 110), it is provided in the GCP. "cplic print" shows all licenses/blades are actual, but Maintenance->License Status show almost all licenses as "Available", and just few "Entitled". For example, "show security-gateway ips status" output is "IPS Blade is disabled".
Should the blades be activated somehow?
Or should the lacking blades be purchased via GCP market?
Maybe there was a licensing failure?

0 Kudos
1 Solution

Accepted Solutions
Chris_Atkinson
Employee Employee
Employee

The outputs suggest only the basic FW function has been activated.

For ease you can confirm this from the gateway cli by executing "enabled_blades"

The Threat Prevention admin guide for your version will provide further guidance on subsequent blade activation.

CCSM R77/R80/ELITE

View solution in original post

7 Replies
Chris_Atkinson
Employee Employee
Employee

Could you please attach the output of the cplic print for review. Also what blades are activated in the corresponding gateway object settings in SmartConsole?

CCSM R77/R80/ELITE
0 Kudos
m_k_user
Participant

So, here are output and licenses from Smart Console.
And, sorry, I am frustrated with finding the blades switch on/off. Seems realy different from SMB hardware. They are in the Access Policy/ Rules, aren't they?

0 Kudos
Chris_Atkinson
Employee Employee
Employee

The outputs suggest only the basic FW function has been activated.

For ease you can confirm this from the gateway cli by executing "enabled_blades"

The Threat Prevention admin guide for your version will provide further guidance on subsequent blade activation.

CCSM R77/R80/ELITE
m_k_user
Participant

I know that Blades are not active - confirmation is excess.
As I understand I should create policy containing the required blades in the section "Threat Prevention" and then Install this policy (to the gateways). Right?

0 Kudos
G_W_Albrecht
Legend
Legend

You can enable/disable TP blades in GW object and then publish the changes - policy changes are transmitted by policy install...

 

CCSE CCTE CCSM SMB Specialist
the_rock
Legend
Legend

Blades are turned off by using smart console fw object, unless you have one of those locally managed smb appliances, then you can do it through web UI.

As Chris said, based on the output, appears only fw blade is active. Honestly, just save yourself frustration, call Account services, give them your account number, explain the issue and Im positive they will be able to help you quick. If Im not mistaken, they are open M-F 7 am to 7 pm CST. (GMT-6)

Andy

the_rock
Legend
Legend

I think if you call Account services, they can sort this out quickly. But as @Chris_Atkinson said, if you send cplic print -x output, we might be able to confirm.

Andy

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events