CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 4 of 4

Thread: AWS PAYG not being detected by R80 Management server

  1. #1
    Join Date
    2008-04-28
    Posts
    22
    Rep Power
    0

    Default AWS PAYG not being detected by R80 Management server

    -AWS R80 Mangagement Server in AWS with EVAL Licesnes
    -AWS R77.30 AWS vSEC gateway built with PAYG image

    The R80 management server is requiring that the R77.30 have a valid license for policy update...so attached the EVAL license.
    If you detach the EVAL licesense from the PAYG instance a policy update can not happen. So it really isn't PAYG.

    CheckPoint license support has been of little help. They keep telling me I need a Management server...yep got that. Almost seems like support does not know the AWS vSEC products.

    How does the Management Server detect that a gateway is PAYG vs BYOL. Seems mine is stuck in BYOL...and yes I verified the gateway was build with the PAYG image.

  2. #2
    Join Date
    2005-08-14
    Location
    Gig Harbor, WA, USA
    Posts
    2,494
    Rep Power
    16

    Default Re: AWS PAYG not being detected by R80 Management server

    QA explicitly tested this scenario (R80 management in AWS + R77.30 gateways on AWS PAYG) and it definitely works.
    You shouldn't need to attach a license to a PAYG instance and I suspect doing so caused it to get into an unknown state.
    I'm assuming this is a new PAYG instance and you can simply start over with a new one.
    That said if you're still having trouble, we'll need to know the following (at a minimum):

    - AWS Region the gateway is in
    - Instance size of the gateway
    - Output of cplic before eval was appliance (if available)
    - Gateway AMI ID
    - AWS Region the management in
    - Instance size of the management
    - Management AMI ID
    http://phoneboy.org
    Unless otherwise noted, views expressed are my own

  3. #3
    Join Date
    2008-04-28
    Posts
    22
    Rep Power
    0

    Default Re: AWS PAYG not being detected by R80 Management server

    Quote Originally Posted by PhoneBoy View Post
    QA explicitly tested this scenario (R80 management in AWS + R77.30 gateways on AWS PAYG) and it definitely works.
    You shouldn't need to attach a license to a PAYG instance and I suspect doing so caused it to get into an unknown state.
    I'm assuming this is a new PAYG instance and you can simply start over with a new one.
    That said if you're still having trouble, we'll need to know the following (at a minimum):

    - AWS Region the gateway is in
    - Instance size of the gateway
    - Output of cplic before eval was appliance (if available)
    - Gateway AMI ID
    - AWS Region the management in
    - Instance size of the management
    - Management AMI ID
    Seems a PAYG should deny a license attach if it is mistakenly done.
    I assumed the mistaken EVAL license push may have caused the issue.
    Only way to recover is a rebuild of the instance? No magical command to get the PAYG state back?

  4. #4
    Join Date
    2005-08-14
    Location
    Gig Harbor, WA, USA
    Posts
    2,494
    Rep Power
    16

    Default Re: AWS PAYG not being detected by R80 Management server

    Quote Originally Posted by KGolomb View Post
    Only way to recover is a rebuild of the instance? No magical command to get the PAYG state back?
    Not that I'm aware of, anyway.
    http://phoneboy.org
    Unless otherwise noted, views expressed are my own

Similar Threads

  1. Management Interface on Security Management Server
    By bhavinjbhatt in forum R77.30
    Replies: 1
    Last Post: 2016-02-04, 11:49
  2. Replies: 1
    Last Post: 2015-06-30, 16:01
  3. Replies: 2
    Last Post: 2014-06-18, 08:18
  4. Standalone Security Management Server to Multi-Domain Security Management
    By DaniloNC in forum Provider-1 (Multi-Domain Management)
    Replies: 1
    Last Post: 2011-12-08, 16:59
  5. Migration from R65 Window management server to Smart-1 (SPLAT) management server
    By nick_bar in forum Security Management Server (Formerly SmartCenter Server ((Formerly Management Server))
    Replies: 3
    Last Post: 2011-08-24, 02:22

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •