CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 6 of 6

Thread: IPS License Expiration and Impact

  1. #1
    Join Date
    2006-03-14
    Posts
    391
    Rep Power
    14

    Default IPS License Expiration and Impact

    I have a built in IPS on R71.30 gateway. I am in the process of replacing the gateway, so have not renewed the IPS license and now when I try to deploy a new policy I am getting the error as shown in the attached file. Is it going to create any impact on the existing policies?
    Attached Thumbnails Attached Thumbnails Click image for larger version. 

Name:	IPS_Lic_Warning.png 
Views:	447 
Size:	23.0 KB 
ID:	705  

  2. #2
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,251
    Rep Power
    14

    Default Re: IPS License Expiration and Impact

    Quote Originally Posted by avilT View Post
    I have a built in IPS on R71.30 gateway. I am in the process of replacing the gateway, so have not renewed the IPS license and now when I try to deploy a new policy I am getting the error as shown in the attached file. Is it going to create any impact on the existing policies?
    You didn't mention what version of code you are running, but my understanding is that if there is no IPS license present (or it expires) all new signatures acquired via dynamic IPS updates will be set to inactive. Or in other words, any signatures that didn't ship included with the General Availability (GA) version of your release will be set to inactive. While this event is unlikely to really break anything, it does severely impact the protection provided by the IPS feature.

    The message is stating that signatures acquired after March of 2009 will be disabled, so I'm guessing you are running R70? Or your gateways started life as R70?

  3. #3
    Join Date
    2006-03-14
    Posts
    391
    Rep Power
    14

    Default Re: IPS License Expiration and Impact

    I am running R71.30 and its a smartdefense I have a very vew IPS signatures enabled. I am not worried about the IPS protection, but othe aspects like access rules/nat will not affect right?

  4. #4
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,251
    Rep Power
    14

    Default Re: IPS License Expiration and Impact

    Other than the policy installation continuing to warn you about the IPS licenses (and there is no way to shut it up) it won't affect the areas you mentioned.

  5. #5
    Join Date
    2006-12-04
    Posts
    1,316
    Rep Power
    15

    Default Re: IPS License Expiration and Impact

    Quote Originally Posted by avilT View Post
    I am running R71.30 and its a smartdefense I have a very vew IPS signatures enabled. I am not worried about the IPS protection, but othe aspects like access rules/nat will not affect right?
    We have open an RFE (about 1 years ago) for disabling this annoyning message every time by policy installation (RFE disable *IPS Contract Expiration window.)
    And till now still waiting for CP responce....

  6. #6
    Join Date
    2006-03-14
    Posts
    391
    Rep Power
    14

    Default Re: IPS License Expiration and Impact

    I was able to resolve this error by, downloading the latest contract file from Checkpoint user center and loading it manually in smart update.

Similar Threads

  1. IPS Contract Expiration error
    By akchakravarthi09 in forum IPS-1
    Replies: 4
    Last Post: 2011-03-22, 22:26
  2. What's the impact of NOT renewing my annual support?
    By Any-Any-Any-Accept in forum Installing And Upgrading
    Replies: 17
    Last Post: 2010-01-06, 10:20
  3. Global policy impact on CMA
    By blackberry in forum Provider-1 (Multi-Domain Management)
    Replies: 1
    Last Post: 2009-05-18, 08:38
  4. fwm sic_reset impact ?
    By walcat_0 in forum Security Management Server (Formerly SmartCenter Server ((Formerly Management Server))
    Replies: 12
    Last Post: 2008-03-14, 16:05
  5. impact on not use dedicated NIC for state sync
    By bennychan730 in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 4
    Last Post: 2006-11-21, 13:32

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •