Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Subscription renewal - expiry today - will it really apply the renewal license bought automatically?

A XG license expires today. I have received the Renewal Certificate.

Central Licensing and XG licensing show the subscription will expire today.

Expiration date of current subscription is Feb 22.

Renewal Start date is Feb 23.

Looks like a gap of 1 day without subscription.

Will it stop working tonight?



This thread was automatically locked due to age.
Parents
  • Looks fine. This is the normal behaviour of license renewal. 

    The License will kick in tomorrow. 

    If not, you could start a trial tomorrow. 

    __________________________________________________________________________________________________________________

Reply
  • Looks fine. This is the normal behaviour of license renewal. 

    The License will kick in tomorrow. 

    If not, you could start a trial tomorrow. 

    __________________________________________________________________________________________________________________

Children
  • Thank you . your anwer helps me to believe that :-)

    Checking it now after the 7h counter from Central has expired shows me:

    Still looking dangerous here in Central.

    And on the firewall it looks unchanged:

  • Yes, as the firewall Subscription is still valid today.

    Tomorrow will the new License take over (23.02).

    BTW: You can check in the licensing.log in SFOS when the 24h sync timer is set for your firewall. The last reboot time is the sync timer for the firewall and this will be used to sync the license each 24h. 

    __________________________________________________________________________________________________________________

  • I checked licensing log yesterday already and it looks not helpful. the only thing that is ever logged since the beginning of the log is always repeating

    INFO      Feb 22 06:27:16Z [4148188928]: URL : eu-prod-utm.soa.sophos.com/.../appliance
    INFO      Feb 22 06:27:16Z [4148188928]: licensing_do_applianceupdate : request : { "serialNumber": "C420xxxxxVQ0F", "applianceAttributes": [ { "name": "firmwareVersion", "value": "19.5.3.652" }, { "name": "haID", "value": "f0ec8092-9de8-4fff-bdd1-9b1172eec713" }, { "name": "isActive", "value": "false" }, { "name": "haType", "value": "standby" } ] }
    INFO      Feb 22 06:27:16Z [4148188928]: response : {"errorCode":"ITSERVICELAYER_CLIENT_AUTHENTICATION_ERROR", "message":"IIS error: HTTP 403.0 - Forbidden", "statusCode": 403}
    ERROR     Feb 22 06:27:16Z [4148188928]: Appliance Update Failed : IIS error: HTTP 403.0 - Forbidden
    ERROR     Feb 22 06:27:16Z [4148188928]: licensing_do_activation() : parsing failed...
    XG430_WP02_SFOS 19.5.3 MR-3-Build652 HA-Primary#

  • Your Sync is starting at 06.27 UTC+0 in the morning. This is quite early. 
    Can you go to the Aux via SSH and check the same? 

    __________________________________________________________________________________________________________________

  • yes, the aux as license holder is syncing successfully.

    INFO      Feb 22 00:32:34Z [4148483840]: Received these licenses 511
    INFO      Feb 22 06:27:14Z [4147951360]: --requestType = 2
    INFO      Feb 22 06:27:14Z [4147951360]: --lastCheckCode = 05cbd402-xxxx-xxxx-xxxx-f3e6a5e28769
    INFO      Feb 22 06:27:14Z [4147951360]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 22 06:27:14Z [4147951360]: --token = Token-Id:C420xxxK9CF
    INFO      Feb 22 06:27:14Z [4147951360]: --key = /content/licensing/lic_csr.key
    INFO      Feb 22 06:27:14Z [4147951360]: URL : eu-prod-utm.soa.sophos.com/.../license
    INFO      Feb 22 06:27:16Z [4147951360]: license_check : License retrieved...
    INFO      Feb 22 06:27:16Z [4147951360]: License response verification successful
    INFO      Feb 22 06:27:16Z [4147951360]: device attributes found in response...
    INFO      Feb 22 06:27:16Z [4147951360]: Received these licenses 511

  • Yes, as the firewall Subscription is still valid today.

    Central should take that into account when it displays the validity of the license.

    Showing the licenses as expired is not matching with your license policy.

  • Yes, that is something coming on into the new Central Portal in the future, to reflect the entire subscription. As there are multi line items, it is hard to reflect the true up in the first place. 

    __________________________________________________________________________________________________________________

  •   Did the license took over? 

    __________________________________________________________________________________________________________________

  • thanks for asking!

    no, not really

    on the license holder:

    and on the primary (not lic holder):

  • Can you PM me the Support-Access ID? 

    __________________________________________________________________________________________________________________