Proper way to insert license to a Gaia OS security gateway that manage by Smart1-Cloud

[LeeBingKang]

Hi All,

I would like to seek your advice on the proper way to insert license on a Gaia OS security gateway that managed by Smart1 Cloud and the whole story is like this:

Recently, I had a project whereby upgrade and split a standalone firewall into distributed mode (managed by smart1-cloud).

Upgrade process done successfully and the firewall able to establish MaaS tunnel and also SIC to the smart1-cloud.

However, we faced a minor roadblock on the insert license whereby we don't know which ip address we should put into the license with certain reasons below:

a. usually we will put the firewall object ip address into the license, but we can't make it as the firewall object in the smart1-cloud is MaaS tunnel ip and this ip will change if the MaaS tunnel reset (In the case of firewall down due to RMA, etc)

b. we also not confirm whether put other physical interface as license ip is recommended.

Lastly, please let me know if you need any further information from me on this post.

Thank you.

[Chris_Atkinson · Accepted solution]

In Smart-1 Cloud the Management Server holds an internal IP address, which is inaccessible from the outside.

Usually it is not necessary to know or use the Management IP address, but in some cases you are required to provide it.

Because the Management IP address is internal, it is the same for all deployments.

Therefore, when required to use the Management IP address, such as Central License, use this IP address: 100.64.0.52.

Source: https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-...

[LeeBingKang]

Hi Chris and thanks for your reply. May i know what should we do if the license for the security gateway is local license?

[Chris_Atkinson]

Is there a reason central license can't  be generated / used?

[LeeBingKang]

Hi Chris. I think there is no issue on the central license, and i just wonder how to apply the license if we use local license.

[Chris_Atkinson]

Local license is a legacy method with limitations (refer: sk62685).

[LeeBingKang]

Hi Chris. thank you for your information provided just now and i have go through the SK.

I will give a try to change the license IP to 100.64.0.52 and attached the firewall to see if its work or not.

I will give my update on next Monday.

[LeeBingKang]

Hi @Chris_Atkinson , the way you mentioned is working fine.

Thank you for your help and kind patience on my reply.