Troubleshooting guide

Chapter 11 Troubleshooting Licensing Resolving Common Licensing Problems
Advanced Technical Reference Guide 4.1 • June 2000 122
Remote License Keywords
Remote licenses are for remote policy installation on embedded and non-embedded VPN/FireWall modules
Table 2: Remote License Keywords
Keyword: Supported in
VPN-1/FireWall-1 Version:
Meaning:
remote1
renmote2
remote4
4.0 SP5 and higher The numbers at the end of the keywords specify the
number of licenses (e.g. remote2 specifies two licenses
for remote installation).
remote
3.0 and 4.0 Specifies an unlimited number of licenses for remote
installations
lcontrol
A management license required for the operation of the
management station
control
Equivalent to lcontrol + remote.Itisalicensea
management station and policy installation on an
unlimited number of remote modules (embedded and not
embedded)
Resolving Common Licensing Problems
This section lists some common problems and solution. Most can be found on the Check Point Technical
Services SecureKnowledge knowledge base
What happens to the License during an upgrade?
When you upgrade FireWall–1 to a new version, you can continue to use the old licenses. The licenses are
different in every new major version, so that you must obtain a new license when upgrading from version 4.0 to
4.1, for example.
Resellers are informed if there is a change in the licensing in a new version.
When do you need a new License?
If the license is tied to the hostid, it will need to be changed whenever the computer is changed. If the license
is related to an IP address that is no longer the machine IP address, the customer will receive a new license key
free of charge, provided they guarantee they won't use the old one again.
Which IP should be in the license of a VPN/FireWall module with
several interfaces?
If a VPN/FireWall module has more than one interface, the Check Point license can be based on any of them.
However, it is recommended that the license be issued for the IP that is associated with the system's name in the
name resolution databases.
encryption licenses (and any other license that includes the encryption feature) need to have the IP
address of the interface on which encryption takes place (i.e., the external one).
This is recommended for any other license feature as well.
How to Verify Licenses
To verify licenses, issue the command fw printlic. The output should be similar to the following: