[lammbo]

Distributed environment: SmartCenter is HA and all gateways are Active/Passive HA. R60/HFA_04 all the way *except R63 Eventia*

Hopefully, this will be an easy one for someone who already had this issue.

I tried to deploy some WI features a few nights ago. When I tried to verify my policy, it hung on verification and never would finish (waited for a while and tried multiple times with same result).

I have 2 ea. CPMP-WIT-U-NGX and 2 ea. CPMP-HWIT-U-NGX. What I do know is that I wanted 2 sites to be able to have unlimited web servers and the gateways are HA - and so are the licenses. But when they are imported using centralized management via SmartUpdate, they attach directly to SmartCenter, with nothing in the repository to attach to gateways themselves.

So... Where from here? Well, how about the good old CP knowledgebase!
_________________________________________
Solution ID: #sk31381

Product: Web Intelligence
Version: NG AI R55W, NGX
Last Modified: 06-Jun-2007
Solution
VPN-1 Pro NGX R60A

When activated, Web Intelligence generates one license. The license should be installed on the SmartCenter Server. This license is not additive, and a SmartDefense contract is needed to obtain Web Intelligence updates.

An NGX Security gateway or gateway cluster requires a Web Intelligence license if it enforces one or more of the following protections:

* Malicious Code Protector
* LDAP Injection
* SQL Injection
* Command Injection
* Directory Listing
* Error Concealment
* ASCII Only Request
* Header Spoofing
* HTTP Methods
_____________________________________________

Well, that's as clear as mud!!! If it generates one license and auto-attaches to the SmartCenter, how can I apply any part of the 4 licenses to the gateways/cluster? Those 4 items in blue are exactly what I'm trying to enforce.

AAAAARRRRRRRRGGGGGGGHHHHHHHH!