CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 5 of 5

Thread: checkpoint policy error

  1. #1
    Join Date
    2017-06-13
    Posts
    2
    Rep Power
    0

    Default checkpoint policy error

    Dear All,
    We had 2 Checkpoint firewalls in HA setup with Standlone deployement (non-distributed).
    we removed one firewall from the HA and thinking of use it for different zone physically. We reimaged this appliance, downloaded the license and tried pushing the policy and got error while doing fw fetch local as given below

    "Cannot install policy because this module has a Cluster member license but is not marked as a Cluster member in the management"
    Failed to Load Security Policy: No such file or directory

    Failed to Load Security Policy: No such file or directory

    Fetching Security Policy Failed
    When checked the license file, observed that it has "ha" as a string, may be due to which i am unable to push policy. In dashboard this gateway is classified as gateway object only and not cluster.
    could some one guide me how to fix this issue. ?

    regards
    PR

  2. #2
    Join Date
    2014-09-02
    Posts
    349
    Rep Power
    10

    Default Re: checkpoint policy error

    Unfortunately, it means exactly what it says. The "HA" appliance was discounted as part of an HA pair, and its license doesn't permit it to run on its own.

    I'd suggest talking to your reseller about trying to get some sort of trade-in/credit towards a full appliance.

    -E

  3. #3
    Join Date
    2017-06-13
    Posts
    2
    Rep Power
    0

    Default Re: checkpoint policy error

    OK. You Mean to say, the local CP Accounting team to provide alternate License for this Separated Gateway...?

  4. #4
    Join Date
    2007-06-04
    Posts
    3,298
    Rep Power
    16

    Default Re: checkpoint policy error

    Quote Originally Posted by rajpoovakode View Post
    OK. You Mean to say, the local CP Accounting team to provide alternate License for this Separated Gateway...?
    No you will need to upgrade the license as in purchase from the HA to a Full License.

    Typically a HA License is discounted ( 20% seems to be a figure that springs to mind ) compared to a full license so your second unit in a HA Pair is cheaper to purchase.
    The Downside is that the License only works where the Box is part of a Cluster.

    You are trying to deploy the box as a Full Single Gateway rather then as part of a cluster hence will need to upgrade which will effectively be trade in the HA and purchase a full license.

  5. #5
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    1,030
    Rep Power
    15

    Default Re: checkpoint policy error

    That is expected situation.

    You have an HA license bundle, where the second license is marked as HA, with 20% off the price list discount on it. You cannot use this license if the GW is not part of a cluster.
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

Similar Threads

  1. Replies: 5
    Last Post: 2017-04-28, 09:02
  2. Checkpoint UTM-1 Version R75.30 Policy Push Error
    By csabik in forum SmartDashboard
    Replies: 6
    Last Post: 2014-04-09, 04:37
  3. Unable to install policy due to SIC error number 148 - R75 Checkpoint 12207 Appliance
    By mshmick in forum Check Point Security Gateway Appliances
    Replies: 11
    Last Post: 2013-08-14, 13:31
  4. Error installing Policy
    By jules in forum SmartDashboard
    Replies: 2
    Last Post: 2006-12-21, 11:43
  5. Policy Installation Error
    By itguy in forum Installing And Upgrading
    Replies: 4
    Last Post: 2006-03-01, 10:19

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •