Yup. One is 'in the post' as it were.
hi,
we had some other license issues about VPN in the past, I recommend to
install an eval-lic on your mgmt and module and try if everything is
working fine with this eval-lic.
if you don't have an eval lic, ask your reseller or checkpoint-partner
for one ...
if it works with the eval -> open a case with your checkpoint-reseller
(or checkpoint) ...
cheers
reinhard
At 16:50 24.08.2005, you wrote:
All,
I am having an issue with a recent upgrade to NGX regarding
installing the Desktop Security Policy to the Policy Server.
Background
----------
- Prior to upgrade, all running fine on NG FP3. Everything solid, no
errors or issues.
- Management Server on Win2003, freshly built with NGX added. Config
was imported from an upgrade_export file.
- Single module on Nokia IPSO 3.9, upgraded not 'new install'.
Normal gateway policy installs fine and is fully operational.
Not all the licenses upgraded fine:
- 75 SC user licenses (3 blocks of 25)
- Two of these are not in Enterprise Support and didn't upgrade
- Also, the corresponding three Policy Server licenses read: "The
upgrade in the following case is not necessary. The NGX upgrade can
continue and will not be affected by this error." (A manual upgrade
using license_upgrade fails also.)
SecureClients can connect and download topology, so this is not
affecting service.
Problem
-------
The Desktop Security Policy will not install onto the policy server:
"Memory allocation problem in Policy installation function."
Fixes So Far
------------
Initially, the policy server wasn't being started.
(ps -aux | grep dtps = no processes)
The following has been added to fwauthd.conf on the Nokia:
0 dtps dtpsd respawn 0
A 'cpstop ; cpstart' does now starts the service, but the issue is
still present.
Running 'dtps debug on' and then reviewing the dtps.elg and dtpsd.elg
files shows that:
user_count_not_ok: Desktop Security was not installed on the Policy
Server.
There are only 22 users defined in the user list.
There is a 25 user license for SecureClient (CPVP-VSC) attached to
the manager, but no UPGRADED license for the Policy server (CPVP-VPS)
attached to the module.
I am 95% SURE that this will be a licensing issue.
Your thoughts?
Tom
--
---
Tom Rowan BSc (Hons), MBCS, CCSE+
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
