License Status

You can view, add, or delete licenses in one of these ways:

In Gaia Portal Web interface for the Check Point Gaia operating system. > Maintenance section > License Status page.

With the "cplic db_add" and "cplic del" commands (see the R81 CLI Reference Guide).

Note - While all the "cplic" commands are available in Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems., they are not grouped into a Gaia feature.

On Check Point Appliances

If a Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. and its managed Security Gateways are able to connect to Check Point User Center, licenses and contracts activated and updated automatically.

If a Management Server and its managed Security Gateways are not able to connect to Check Point User Center, then manage licenses and contracts in either SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. or the command line.

On Open Servers and Virtual Machines

If a Management Server and its managed Security Gateways are able to connect to Check Point User Center, then activate the license during the Gaia First Time Configuration Wizard, or later in Gaia Portal, SmartConsole, or the command line. After the activation is completed, licenses and contracts are updated automatically.

If a Management Server and its managed Security Gateways are not able to connect to Check Point User Center, then manage licenses and contracts in either SmartConsole or the command line.

Activating a License in Gaia Portal

To activate a license manually online

Step

Instructions

If this Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server., Domain Management Server, or Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. (or Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Members) connects to the Internet through a proxy server, then configure the applicable proxy in SmartConsole:

Note - The prerequisite for Security Gateways and Cluster Members is to establish a Secure Internal Communication (SIC Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. Trust) with a Management Server.

To configure the same default proxy for all objects:
1. Click Menu > Global properties > Proxy.
2. Select Use proxy server.
3. Enter the proxy server address (Hostname or IP address).
4. Enter the proxy server port.
5. Click OK.
6. Publish the SmartConsole session.
7. Click Menu > Install database > select all objects > click Install.
8. Install the Access Control Policy on all managed Security Gateways and Clusters.
To configure specific proxy in an object:
1. From the left navigation panel, click Gateways & Servers.
2. Double-click the applicable object.
3. From the left tree, click Network Management > Proxy.
4. Select Use custom proxy settings for this network object.
5. Select Use proxy server.
6. Enter the proxy server address (Hostname or IP address).
7. Enter the proxy server port.
8. Click OK.
9. Publish the SmartConsole session.
10. Complete the configuration:
  - If this object is a Management Server:
    
    Click Menu > Install database > select the Management Server object > click Install.
  - If this object is a Security Gateway or Cluster:
    
    Install the Access Control Policy.

With a web browser, connect to Gaia Portal at:

https://<IP address of Gaia Management Interface>

If you changed the default port of Gaia Portal from 443, then you must also enter it (https://<IP address>:<Port>).

In the navigation tree, click Maintenance > License Status.

Click Activate Now.

Gaia fetches the license, and the status changes to Activated.

The Software Blades enabled by the license appear in the table.

To activate a license manually offline

Step

Instructions

With a web browser, connect to Gaia Portal at:

https://<IP address of Gaia Management Interface>

If you changed the default port of Gaia Portal from 443, then you must also enter it (https://<IP address>:<Port>).

In the navigation tree, click Maintenance > License Status.

Click Offline Activation.

Click New.

Enter the license data manually, or click Paste License to enter the data automatically.

The Paste License button only appears in Internet Explorer.

For other web browsers, paste the license strings into the empty text field.

Click OK.

To delete an installed license

Step

Instructions

With a web browser, connect to Gaia Portal at:

https://<IP address of Gaia Management Interface>

If you changed the default port of Gaia Portal from 443, then you must also enter it (https://<IP address>:<Port>).

In the navigation tree, click Maintenance > License Status.

Click Offline Activation.

Select the license.

Click Delete.

Click OK.

Note - To delete a license in the command line, use the "cplic del" command (see the R81 CLI Reference Guide).