smart-1 cloud generate cpinfo

[dkzndkqh]

I'm currently using Smart-1 Cloud as the management server. Is it normal that there isn't a dedicated object for Smart-1 Cloud itself? The Evaluate License status appears differently in SmartConsole, the Web GUI, and the CLI. Because of this, I was asked to provide a cpinfo from the management server.

As far as I know, to generate a cpinfo, you either need to access the CLI or use SmartUpdate. However, Smart-1 Cloud doesn't allow CLI access and doesn’t support SmartUpdate. Is that correct?

[the_rock]

Thats right, I been using S1C since 2020 and that is 100% true. If cpinfo is needed, just open TAC case and they can log in via backend using customer's tenant ID and generate a file. 

Andy

[dkzndkqh]

I appreciate your reply thank you! 

[the_rock]

No problem. Btw, just curious, why even need for cpinfo? I never been asked for that file from S1C...what sort of problem are you having?

Andy

[dkzndkqh]

Because of my case this is the link

https://community.checkpoint.com/t5/Smart-1-Cloud/smart-1-cloud-license-status-cli-or-web-gui-licens...

I submitted a Service Request for this issue, and they requested cpinfo to investigate the problem.

I informed them that SmartUpdate is not supported on S1C, but it seemed like they were unsure about how to proceed.

[the_rock]

Make sure to sync your account from S1C portal to verify all the licences.

Andy

[dkzndkqh]

Would you mind sharing the steps to sync the account if that’s okay?

[the_rock]

I can send the screenshot later, but when you log in, click gear icon on the top and account option is there and you can sync from there.

Andy

[dkzndkqh]

I have found a way to sync. However, I couldn't find any contract for the problematic firewall under Services & Contracts in the portal. It seems that the client linked the Security Gateway to S1C first and then added it to SmartConsole.

What I'm curious about is this: once the S1C and the Gateway are linked, shouldn't they communicate with each other to update the contract status of the Evaluate License in SmartConsole, reflecting the current contract status of the Evaluate License applied to the Security Gateway?

[the_rock]

Yes and no. Gateways will communcate with the S1C via maas tunnel interface, but I dont believe that will automatically means contracts will be updated, it all depends on whats in the user center, same as with on prem.

Andy

[dkzndkqh]

"Could you please clarify whether applying an evaluate license to a gateway via CLI results in the information being reflected in the UserCenter? I've observed that the evaluate license details are not visible in the UserCenter, but I've also seen instances where SmartConsole does reflect the evaluate license status. This discrepancy is causing some confusion."

[G_W_Albrecht]

This depends on using central or local licensing: In central licensing, you use SmartDashboard (or legacy SmartUpdate) to import the license & service information and distribute it to the GWs. See sk62685: What is the difference between the central and local licensing schemes?

If you just use GW WebGUI or CLI to install a licenase locally, it will be missed in SmartDashboard (or legacy SmartUpdate).

[dkzndkqh]

"So, that's why the mismatch occurred. I always put an evaluate license locally on an appliance whose regular license has expired. In this process, I always create the MGMT IP 192.168.254.254 on a port (e.g., LAN5) of the GW and put the evaluate license on this IP. But most of the time, the evaluate license status in SmartConsole matches. If I explain the locally license mechanism I understand, is it correct to say that when I put it on the GW, it sends the evaluate license information to the UserCenter, and SmartConsole then retrieves and reflects the UserCenter information?"

[Dmitrie_Shiman]

Hi, Can you share SR number?

[dkzndkqh]

my SR number is SR#6-0004219011 Thank you for your attention to my case !

[Dmitrie_Shiman · Accepted solution]

Thank you! Could you please send me the tenant ID or Service Name at dmitries@checkpoint.com? I will assist you with the TAC request.

. 

[the_rock]

Let us know how it gets solved.

Andy

[dkzndkqh]

Of course! Why not

[dkzndkqh]

“I received a response that this issue is a known limitation and cannot be resolved. It corresponds to case SMB-18388 in the SK178604 document.”

[the_rock]

K, fair enough.

[dkzndkqh]

I will

[the_rock]

So all sorted out?

Andy

[dkzndkqh]

Not yet i will tell you when everything is sorted out

[the_rock]

Okay, cool...though it sounds its license related, for sure.

Andy

[Dmitrie_Shiman]

I upload the CPINFO file to the SR, 

If you need further assistance, please don't hesitate to contact me directly—I'm here to help.

[dkzndkqh]

i appreciate your help thank you !