There is no domain license attached to security management

[sidlab1584]

I am getting this error message everytime I install policy on my gateways. I am using all in one eval license on the gateway. This is not a management server , its a gateway.

[the_rock]

Can you send output of cplic print -x from mgmt and gateway?

Best,

Andy

[sidlab1584]

MDS:

[Expert@MDS-01:0]# cplic print -x
Host Expiration Signature Features
172.16.31.117 22Mar2024 aukCyBGBNEEaPpdb3yEKrgKwKdmURxp9cctp cpsb-ws cpvp-snx-u-ngx cpsb-swb cpsb-adnc-m CK-B6AFBB7054DA
172.16.31.114 22Mar2024 aPb5EsPd88CbZk97vfXhuPgh58feRZRDhZVi CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-5D139D4DD87A
172.16.31.113 22Mar2024 aQoELphKQgNaWLLM8en8r3W77YGR7PTYrLAz CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | 7TPCDSN | 21Apr2024 | CPSB-TE-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
2 | JA1HMVH | 21Apr2024 | CPSB-TEX-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
3 | L6UBR6C | 21Apr2024 | CPSB-IPS-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
4 | ENRFBJJ | 21Apr2024 | CPSB-CTNT-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
5 | 34IJSYP | 21Apr2024 | CPSB-ZP-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================

Gateway"

EXT-01:

[Expert@EXT-GW-01:0]# cplic print -x
Host Expiration Signature Features
172.16.31.115 22Mar2024 a3AmUQgPRdox9NxgfHKcRxwMFm7rkzs4UHsj CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | WUZ55TK | 21Apr2024 | CPSB-TE-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA
===+===========+============+====================
2 | 6OCYDBQ | 21Apr2024 | CPSB-IPS-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA
===+===========+============+====================
3 | 06SBZHC | 21Apr2024 | CPSB-TEX-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA
===+===========+============+====================

[the_rock]

Hey mate,

Did you end up applying new licenses?

Best,

Andy

[sidlab1584]

[Expert@MDS-01:0]# mdsstat

CPM: Check Point Security Management Server is running and ready

+------+--------------------+-----------------+-------------+-------------+-------------+-------------+-------------+
| Type | Name | IP address | FWM | FWMHA | FWD | CPD | CPCA |
+------+--------------------+-----------------+-------------+-------------+-------------+-------------+-------------+
| MDS | - | 172.16.31.113 | up 4273 | up 4279 | up 4271 | up 26584 | up 4887 |
+------+--------------------+-----------------+-------------+-------------+-------------+-------------+-------------+
| CMA | INT_8126_Server | 172.16.31.114 | up 2519 | up 2596 | up 2161 | up 1866 | up 4813 |
| CMA | EXT_OTT_Server | 172.16.31.117 | up 2482 | up 2666 | up 2279 | up 1946 | up 4822 |
+------+--------------------+-----------------+-------------+-------------+-------------+-------------+-------------+
Total Domain Management Servers checked: 2 2 up 0 down
Tip: Run mdsstat -h for legend

[Expert@MDS-01:0]# ^C
[Expert@MDS-01:0]# cplic print -x
Host Expiration Signature Features
172.16.31.117 22Mar2024 aukCyBGBNEEaPpdb3yEKrgKwKdmURxp9cctp cpsb-ws cpvp-snx-u-ngx cpsb-swb cpsb-adnc-m CK-B6AFBB7054DA
172.16.31.114 22Mar2024 aPb5EsPd88CbZk97vfXhuPgh58feRZRDhZVi CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-5D139D4DD87A
172.16.31.113 22Mar2024 aQoELphKQgNaWLLM8en8r3W77YGR7PTYrLAz CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | 7TPCDSN | 21Apr2024 | CPSB-TE-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
2 | JA1HMVH | 21Apr2024 | CPSB-TEX-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
3 | L6UBR6C | 21Apr2024 | CPSB-IPS-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
4 | ENRFBJJ | 21Apr2024 | CPSB-CTNT-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================
5 | 34IJSYP | 21Apr2024 | CPSB-ZP-EVAL
+-----------+------------+--------------------
|Covers: CPSM-C-U CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-PRVS CPSB-UDIR CPSB-WKFL-100 CPSB-WS CPSB-MPTL CPVP-SNX-U-NGX CPSB-SWB CPSB-ADNC-M CPSB-RPRT-U CPSB-EVCR-U CPSB-SSLVPN-MOBMAIL+5000 CPSB-COMP-150 CK-AAA28AC6AC8B
===+===========+============+====================

[Expert@EXT-GW-01:0]# cplic print -x
Host Expiration Signature Features
172.16.31.115 22Mar2024 a3AmUQgPRdox9NxgfHKcRxwMFm7rkzs4UHsj CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA

Contract Coverage:

# ID Expiration SKU
===+===========+============+====================
1 | WUZ55TK | 21Apr2024 | CPSB-TE-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA
===+===========+============+====================
2 | 6OCYDBQ | 21Apr2024 | CPSB-IPS-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA
===+===========+============+====================
3 | 06SBZHC | 21Apr2024 | CPSB-TEX-EVAL
+-----------+------------+--------------------
|Covers: CPSG-C-8-U CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CK-B6AFBB7054DA
===+===========+============+====================

[the_rock]

I will send you something shortly, just apply that and Im sure it will work.

Best,

Andy

[the_rock]

Just emailed you, please give it a go and let us know if it works.

Andy

[the_rock]

Considering that you proved via offline exchange its NOT standalone, I find it super odd this is failing. You mentioned it started happening AFTER rebooting the server?

Best,

Andy

[sidlab1584]

Yes, it happened after I removed the existing licenses as they were expiring then use all in one license on all devices including MDS , firewall. I restarted my ESXI server where I host all of them

[the_rock]

K, sent you something else, it could be MDS ip license issue, hard to say 100%, but I have a gut feeling thats what it is...

Best,

Andy

[the_rock]

I really hope TAC could check into it. Maybe have License folks verify the licensing side, though to me, looks right.

Best,

Andy

[the_rock · Accepted solution]

@sidlab1584 informed me via direct message exchanges we had that esxi was reverted via snapshot and all works fine. If you plan to apply evals again, maybe consult with Account services, they can confirm 100%.

Thanks for the update on this.

Best,

Andy