Karteikarten
Working with Licenses
Karten in diesem Stapel (27)
- 1From where is it possible to manage the licenses of the equipments?You can manage licenses on your Security Gateways in a few ways.
• In SmartConsole you can activate your licenses.
• In Gaia Clish or Expert Mode you can add or delete your licenses with the cplic
command.
• In the Gaia Portal you can activate, add, or delete your licenses.
• In SmartUpdate you can add, delete, attach, and detach your licenses. - 2License Status?• Active: The Software Blade is active and the license is valid.
• Available: The Software Blade is not active, but the license is valid.
• No License: The Software Blade is active but the license is not valid.
• Expired: The Software Blade is active, but the license expired.
• About to Expire: The Software Blade is active, but the license will expire in thirty days (default) or less (7 days or less for an evaluation license).
• Quota Exceeded: The Software Blade is active, and the license is valid, but the quota of related objects (gateways, files, virtual systems, and so on, depending on the blade) is exceeded.
• Quota Warning: The Software Blade is active, and the license is valid, but the number of objects of this blade is 90% (default) or more of the licensed quota - 3Components of a license?• CK: Unique Certificate Key of the license instance.
• SKU Catalog ID from the Check Point User Center.
• Account ID User's account ID
• Support Level Check Point level of support.
• Support Expiration Date when the Check Point support contract expires - 4To keep track of license issues, you can use these options:• License Status view - To see and export license information for Software Blades on each specific Security Management Server, gateway, or Log Server object.
• License Status report - To see, filter and export license status information for all configured Security Management Server, gateway, or Log Server objects.
• License Inventory report - To see, filter and export license information for Software Blades on all configured Security Management Server, gateway, or Log Server objects. - 5What can you do in SmartUpdate?SmartUpdate automatically distributes applications and updates for Check Point and OPSEC Certified products and manages product licenses. These features and tools are available in SmartUpdate:
• Maintaining licenses
• Upgrading packages for R77.30 and below
• Adding packages to Package Repository for R77.30 and below - 6Can you use SmartUpdate to update a software package in R80.10?The SmartUpdate GUI shows two tabs: Package Management and Licenses &
Contracts. For versions R80.10 and above, the tools in the Package Management tab are no longer supported. To install packages on Gaia OS, use CPUSE - 7Where are the licenses located in SmartUpdate?When you add a license with SmartUpdate, it is stored in the Licenses & Contracts Repository. The SmartUpdate provides a global view of all licenses available and all of the assigned licenses. To activate the license once it is in the Repository, it has to be attached to a Security Gateway and
registered with the Management Server - 8There are two license types available:Central license:
• A Central license is tied to the IP address of the Management Server.
• There is one IP address for all licenses.
• The license remains valid if you change the IP address of the Security Gateway.
• A license can be moved from one Check Point Security Gateway to another
easily.
• Maximum flexibility
Local license
• A Local license is tied to the IP address of the specific Security Gateway.
• Cannot be transferred to a gateway with a different IP address. - 9How many ways do you have to add a license to SmartUpdate?• You can add the licenses directly from a User Center account.
• You can add the licenses from a file
• You can add the licenses manually
When you add the Local license to the License & Contract Repository, it also attaches it to the Security Gateway with the IP address, for which the license was issued. - 10When you detach a license from a managed Security Gateway, you have to _________ the license from that SecurityWhen you detach a license from a managed Security Gateway, you have to uninstall the license from that Security Gateway. If this is a Central license, this operation makes that license in the
License & Contract Repository available to other managed Security Gateways. - 11What tasks does the GET operation perform on SmartUpdate?You can add information from your managed Security Gateways about the licenses you installed locally. This updates the License & Contract Repository with all local licenses across
the installation. The Get operation is a two-way process that places all locally installed licenses in the License & Contract Repository and removes all locally deleted licenses from the License & Contract Repository. - 12License state (SmartUpdate)?The license state depends on whether the license is associated with a managed Security Gateway in the License & Contract Repository, and whether the license is installed on that Security Gateway.
The license state definitions are as follows:
• Attached indicates that the license is associated with a managed Security Gateway in the License & Contract Repository, and is installed on that Security Gateway.
• Unattached indicates that the license is not associated with managed Security Gateways in the License & Contract Repository, and is not installed on managed Security Gateways.
• Assigned is a license that is associated with a managed Security Gateway in the License & Contract Repository, but has not yet been installed on a Security Gateway. - 13What is cpclic?A CLI utility to manage local licenses on Check Point computers.
- 14What operations can be performed from SmartUpdate in reference to a license?Add
Attach
Detach
Get
Delete
Export - 15To install a license, you must first add it to the ______& _______ Repository.To install a license, you must first add it to the Licenses & Contracts Repository.
- 16When you add the Local license to the Licenses & Contracts Repository, the Management Server attaches it to the Security _________ with the IP address, for which the license was issued.When you add the Local license to the Licenses & Contracts Repository, the Management Server attaches it to the Security Gateway with the IP address, for which the license was issued.
- 17SmartUpdate can upgrade licenses that are in the Licenses & Contracts Repository. SmartUpdate attempts to upgrade them with the use of the ________ tool.SmartUpdate can upgrade licenses that are in the Licenses & Contracts Repository. SmartUpdate attempts to upgrade them with the use of the Upgrade tool.
- 18New licenses have to be attached when:New licenses have to be attached when:
• An existing license expires.
• An existing license is upgraded to a newer license.
• A Local license is replaced with a Central license.
• The IP address of the Security Management Server or Check Point Security Gateway changes. - 19You can remotely upgrade all Check Point packages on a single R__.__ and below remote gateway, other than the operating system, in a single operation. The Upgrade all Packages function allows you to simultaneously distribute or upgrade multiple packages to the latest management version. The installation proceeds only if the upgrade packages for the selected packages are available in the Package Repository.You can remotely upgrade all Check Point packages on a single R77.30 and below remote gateway, other than the
operating system, in a single operation. The Upgrade all Packages function allows you to simultaneously distribute or upgrade multiple packages to the latest management version. The installation proceeds only if the upgrade packages for the selected packages are available in the Package Repository. - 20In SmartUpdate, what operation does the Distribute feature do?Distribute function allows you to:
• Upgrade the OS
• Upgrade a package to a management version other than the latest. Upgrade a Single Package (no all Packages) on one or more R77.30 and below Check Point Remote Gateway
• Apply Hot Fix Accumulators (HFAs) - 21Prerequisites for Remote Upgrades via SmartUpdateMake sure that SmartUpdate connections are allowed. Make sure that Accept SmartUpdate Connections is selected in Global Properties -> Firewall. Secure Internal Communication (SIC) must be established between the Security Management Server and remote Check Point Security Gateways.
- 22Distributions and Upgrades in SmartUpdateYou can upgrade all packages on one remote gateway, or you can distribute specific packages one-by-one for all Gateways.
Canceling and Uninstalling
You can stop a Distributed installation or upgrade while in progress. To stop a Distributed installation or upgrade:
From the SmartUpdate Menu, select Operation > Stop Operation.
To uninstall a package:
From the SmartUpdate Menu, select Packages > Uninstall. Uninstallation restores the gateway to the last management version distributed. - 23How to retrieve Package Data from Check Point Security Gateways in SmartUpdateYou can find details about the gateway, such as OS, vendor and management version from the Package Repository in SmartUpdate. To find Operation Status of the gateway, go to the Package Management tab. Right-click on a
gateway and select Get Gateway Data. - 24How can you speed up the Distribution and Upgrade process via SmartUpdate?Transferring Files from the Package Repository to Remote Devices.
When you are ready to upgrade or distribute packages from the Package Repository, we recommend that you transfer the package files to the devices to be that you want to upgrade.
When you place the file on the remote device, the overall installation time is less, the Security Management Server is free to do other operations, and there is less of a chance of a communications error during the distribute/upgrade process. Once the package file is located on the remote device, you can activate the distribute/upgrade whenever it is convenient. Transfer the package file(s) to the directory $SUROOT/tmp - 25How can you verify that the distribution (installation) or upgrade is viable through SmartUpdate?Verify that the distribution (installation) or upgrade is viable based upon the Check Point Security Gateway data retrieved. The verification process checks that:
• The Operating System and currently distributed packages are appropriate for the package to be distributed.
• There is sufficient disk space.
• The package is not already distributed.
• The package dependencies are fulfilled.
To manually verify a distribution, from the SmartUpdate Menu, select Packages > Pre-Install Verifier. - 26To distribute (install) or upgrade a package, you must first add it to the _______ RepositoryTo distribute (install) or upgrade a package, you must first add it to the Package Repository. You can add packages from these locations:
Download Center
User Center - 27CPInfo ?CPInfo is a support tool that gathers into one text file a wide range of data concerning the Check Point packages in your system. SmartUpdate lets you automatically generate and send CPinfo to Check Point Technical support
Informationen
- Beschreibung
- Der Nutzer hat seine Fachbereichs-Information gelöscht. Karteikarten am Working with Licenses, erstellt von Gelöschter Nutzer am 29/05/2019.
- Erstellt von
- Gelöschter Nutzer · Mai 2019
- Aktualisiert
- 17 Jun 2019
- Aufrufe
- 22
- Verlauf
-
- Erstellt von brian gustavo triviño taborda · 28 Mai 2019
- Kopiert von brian gustavo triviño taborda · 29 Mai 2019
- Bewertung