What happens if licences expire on gateway

[carl_t]

Hi All

If our licence expires on our gateway and we are running IPS/Antibot/AV etc, what will happen?

Will it continue to run for 14 days?

Does it just stop scanning for these blades?

Will it impact any traffic, i.e stop forwarding through the gateway?

Many thanks

[the_rock]

Traffic wont stop, but you wont be able to push policy and blades wont get any new updates.

Andy

[PhoneBoy]

What you’re likely asking about is the “contract” which entitles use of annual blades.
There are specific SKs for:

• IPS: https://support.checkpoint.com/results/sk/sk4417
• App Control: https://support.checkpoint.com/results/sk/sk56300

In general, though:

• You will see errors when pushing policy with expired contracts and/or licenses
• Traffic will be passed if the access policy allows, but will not be inspected with the advanced blades that lack a current contract and is outside the grace period (if one exists). 
• If the base Firewall license expires (most of these licenses are perpetual), then no traffic will pass as the gateway will be enforcing “defaultFilter” which is to deny all traffic.

[the_rock]

I thought that traffic would NOT stop even if license expires. I recall couple times before it happened to the customer and everything sitll worked till they applied valid license the next day.

Andy