Secure Client licence

[elzilcho]

I've got a licence for 100 Secure Client users on my firewall (SPLAT running NGX R60 HFA04).

It's still in test stage, so only I am testing the VPN to it, but every time I now connect I am getting the error message in log viewer:


Product: Policy Server
Origin: x.x.x.x
Type: Control
Action:
Information: PS: Policy Server license limit exceeded (Windows license is limited to 0 users).

The licence on the server is CPVP-VSC-100-NGX CK-E3FFA9512800

Any ideas why this is showing up as limited to 0 users?

I can actually connect successfully and get to internal devices, but I'm a bit concerned that when this goes live it's going to cause grief...

[kva.kva]

Did you install Destop Policy on Policy server?

[elzilcho]

Originally Posted by kva.kva

Did you install Destop Policy on Policy server?

Not sure if I've understood properly, but yes, I have a desktop policy configured on the firewall manager and I am getting the policy when I connect.

Sorry for my ignorance with this, I've never had to set up Secure Client from scratch before.

[kva.kva]

I asked the question because there is one error, which relates to "The Policy Server receives the number of licensed users, from the Management Server when installing the Desktop policy."

Type "dtps lic" on policy module. How much licenses do you see?

[elzilcho]

dtps lic shows 1 used licence for Windows and 0 free licences...

[Expert@xxxxxx]# dtps lic
SecureClient Policy Server license summary
------------------------------------------
| OS | Total Licenses | Used Licenses | Free Licenses |
| Windows | 0 | 1 | 0 |
| MAC | 0 | 0 | 0 |


Which strikes me as being wrong...(or at least not what I want to see).

[kva.kva]

It looks like Policy server doen't receive number of licensed users.
Is your license attached to SmartCenter?

[elzilcho]

Yes- I attached the licence to the module via Smart Update and it shows up in Smart Update as being attached to the module.

I have also defined the module object as being a policy server. I've also checked the validation code in Smart Update against the validation code from Checkpoint and they match.

Is there anything else I need to/ could check?

Thanks for you help, btw!

[kva.kva]

Originally Posted by elzilcho

Yes- I attached the licence to the module via Smart Update and it shows up in Smart Update as being attached to the module.

Attach it to SmartCenter, not to module.

"When licensed for NGX, the VPN-1 SecureClient product will generate one license. This license should be installed on the SmartCenter Server. The policy server feature is not enforced within version NGX."

[elzilcho]

Originally Posted by kva.kva

Attach it to SmartCenter, not to module.

Success! that's great, thanks very much.

[Danielpb]

I have the same sort of issue but I’m seeing the following :

SecureClient Policy Server license summary
------------------------------------------
| OS | Total Licenses | Used Licenses | Free Licenses |
| Windows | 25 | 81 | 0 |
| MAC | 0 | 01138752000 | 0 |

We have a 25 user Licence installed admittedly we had more than 25 users setup in the checkpoint database but we have now only a few.

anyone know how to clear this ??