Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Subscription renewal - expiry today - will it really apply the renewal license bought automatically?

A XG license expires today. I have received the Renewal Certificate.

Central Licensing and XG licensing show the subscription will expire today.

Expiration date of current subscription is Feb 22.

Renewal Start date is Feb 23.

Looks like a gap of 1 day without subscription.

Will it stop working tonight?



This thread was automatically locked due to age.
Parents
  • Looks fine. This is the normal behaviour of license renewal. 

    The License will kick in tomorrow. 

    If not, you could start a trial tomorrow. 

    __________________________________________________________________________________________________________________

  • Thank you . your anwer helps me to believe that :-)

    Checking it now after the 7h counter from Central has expired shows me:

    Still looking dangerous here in Central.

    And on the firewall it looks unchanged:

  • Yes, as the firewall Subscription is still valid today.

    Tomorrow will the new License take over (23.02).

    BTW: You can check in the licensing.log in SFOS when the 24h sync timer is set for your firewall. The last reboot time is the sync timer for the firewall and this will be used to sync the license each 24h. 

    __________________________________________________________________________________________________________________

  • I checked licensing log yesterday already and it looks not helpful. the only thing that is ever logged since the beginning of the log is always repeating

    INFO      Feb 22 06:27:16Z [4148188928]: URL : eu-prod-utm.soa.sophos.com/.../appliance
    INFO      Feb 22 06:27:16Z [4148188928]: licensing_do_applianceupdate : request : { "serialNumber": "C420xxxxxVQ0F", "applianceAttributes": [ { "name": "firmwareVersion", "value": "19.5.3.652" }, { "name": "haID", "value": "f0ec8092-9de8-4fff-bdd1-9b1172eec713" }, { "name": "isActive", "value": "false" }, { "name": "haType", "value": "standby" } ] }
    INFO      Feb 22 06:27:16Z [4148188928]: response : {"errorCode":"ITSERVICELAYER_CLIENT_AUTHENTICATION_ERROR", "message":"IIS error: HTTP 403.0 - Forbidden", "statusCode": 403}
    ERROR     Feb 22 06:27:16Z [4148188928]: Appliance Update Failed : IIS error: HTTP 403.0 - Forbidden
    ERROR     Feb 22 06:27:16Z [4148188928]: licensing_do_activation() : parsing failed...
    XG430_WP02_SFOS 19.5.3 MR-3-Build652 HA-Primary#

  • Your Sync is starting at 06.27 UTC+0 in the morning. This is quite early. 
    Can you go to the Aux via SSH and check the same? 

    __________________________________________________________________________________________________________________

  • yes, the aux as license holder is syncing successfully.

    INFO      Feb 22 00:32:34Z [4148483840]: Received these licenses 511
    INFO      Feb 22 06:27:14Z [4147951360]: --requestType = 2
    INFO      Feb 22 06:27:14Z [4147951360]: --lastCheckCode = 05cbd402-xxxx-xxxx-xxxx-f3e6a5e28769
    INFO      Feb 22 06:27:14Z [4147951360]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 22 06:27:14Z [4147951360]: --token = Token-Id:C420xxxK9CF
    INFO      Feb 22 06:27:14Z [4147951360]: --key = /content/licensing/lic_csr.key
    INFO      Feb 22 06:27:14Z [4147951360]: URL : eu-prod-utm.soa.sophos.com/.../license
    INFO      Feb 22 06:27:16Z [4147951360]: license_check : License retrieved...
    INFO      Feb 22 06:27:16Z [4147951360]: License response verification successful
    INFO      Feb 22 06:27:16Z [4147951360]: device attributes found in response...
    INFO      Feb 22 06:27:16Z [4147951360]: Received these licenses 511

  • Yes, as the firewall Subscription is still valid today.

    Central should take that into account when it displays the validity of the license.

    Showing the licenses as expired is not matching with your license policy.

  • Yes, that is something coming on into the new Central Portal in the future, to reflect the entire subscription. As there are multi line items, it is hard to reflect the true up in the first place. 

    __________________________________________________________________________________________________________________

Reply
  • Yes, that is something coming on into the new Central Portal in the future, to reflect the entire subscription. As there are multi line items, it is hard to reflect the true up in the first place. 

    __________________________________________________________________________________________________________________

Children
  •   Did the license took over? 

    __________________________________________________________________________________________________________________

  • thanks for asking!

    no, not really

    on the license holder:

    and on the primary (not lic holder):

  • Can you PM me the Support-Access ID? 

    __________________________________________________________________________________________________________________

  •   fixed it on the backend! Thank you very much!

    cases for reference: 07241308, 07238072 

  • is there some bigger issue on licensing?

    We have new XGS here the license has been delivered 6 days ago. The License keys have been activated on the firewalls that are managed in Central. Afterwards the new license became visible on Central.

    I did that yesterday.

    Still the firewall is not showing any license today.

    A case exists: 07245302 / Central License not applied

    INFO      Feb 26 13:52:44Z [4148201216]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 26 13:52:44Z [4148201216]: --key = /content/licensing/lic_csr.key
    INFO      Feb 26 13:52:44Z [4148201216]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 26 13:52:44Z [4148201216]: URL : https://eu-prod-utm.soa.sophos.com/api/device/1/appliance
    INFO      Feb 26 13:52:44Z [4148201216]: licensing_do_applianceupdate : request : { "serialNumber": "X123xxxxxxxxRW4B", "applianceAttributes": [ { "name": "firmwareVersion", "value": "20.0.0.222" }, { "name": "haID", "value": "99373a05-0bef-4898-9ce1-xxxxxxxxxxxxx" }, { "name": "isActive", "value": "true" }, { "name": "haType", "value": "standby" } ] }
    ERROR     Feb 26 13:52:47Z [4148201216]: curl_easy_perform(6) failed: Couldn't resolve host name
    ERROR     Feb 26 13:52:47Z [4148201216]: licensing_do_applianceupdate() : Problem in contacting Server
    INFO      Feb 26 15:02:51Z [4147930880]: --requestType = 2
    INFO      Feb 26 15:02:51Z [4147930880]: --lastCheckCode = 94c686aa-e1ae-482c-93fb-9ba65e86cdf4
    INFO      Feb 26 15:02:51Z [4147930880]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 26 15:02:51Z [4147930880]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 26 15:02:51Z [4147930880]: --key = /content/licensing/lic_csr.key
    INFO      Feb 26 15:02:51Z [4147930880]: URL : https://eu-prod-utm.soa.sophos.com/api/device/2/license
    INFO      Feb 26 15:02:59Z [4147930880]: license_check : License retrieved...
    INFO      Feb 26 15:02:59Z [4147930880]: License response verification successful
    INFO      Feb 26 15:02:59Z [4147930880]: device attributes found in response...
    INFO      Feb 26 15:02:59Z [4147930880]: Received these licenses 1
    INFO      Feb 26 15:03:00Z [4148377344]: --requestType = 8
    INFO      Feb 26 15:03:00Z [4148377344]: --serial = X123xxxxxxxxRW4B
    INFO      Feb 26 15:03:00Z [4148377344]: --fwversion = 20.0.0.222
    INFO      Feb 26 15:03:00Z [4148377344]: --haID = 99373a05-0bef-4898-9ce1-xxxxxxxxxxxxx
    INFO      Feb 26 15:03:00Z [4148377344]: --isActive = true
    INFO      Feb 26 15:03:00Z [4148377344]: --haType = standby
    INFO      Feb 26 15:03:00Z [4148377344]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 26 15:03:00Z [4148377344]: --key = /content/licensing/lic_csr.key
    INFO      Feb 26 15:03:00Z [4148377344]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 26 15:03:00Z [4148377344]: URL : https://eu-prod-utm.soa.sophos.com/api/device/1/appliance
    INFO      Feb 26 15:03:00Z [4148377344]: licensing_do_applianceupdate : request : { "serialNumber": "X123xxxxxxxxRW4B", "applianceAttributes": [ { "name": "firmwareVersion", "value": "20.0.0.222" }, { "name": "haID", "value": "99373a05-0bef-4898-9ce1-xxxxxxxxxxxxx" }, { "name": "isActive", "value": "true" }, { "name": "haType", "value": "standby" } ] }
    INFO      Feb 26 15:03:02Z [4148377344]: response : {"trackingId":"3be935a4-dc15-4320-a3ea-7903b1a3c32a","statusCode":200,"errorCode":"ITSERVICELAYER_SUCCESS","message":"Appliance updated successfully.","data":{"serialNumber":"X123xxxxxxxxRW4B"}}
    INFO      Feb 26 15:03:02Z [4148377344]: Appliance updated successfully...:)
    INFO      Feb 26 16:30:15Z [4147996416]: --requestType = 2
    INFO      Feb 26 16:30:15Z [4147996416]: --lastCheckCode = 2b066373-ad8e-4b7c-9ae8-687af54ee65f
    INFO      Feb 26 16:30:15Z [4147996416]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 26 16:30:15Z [4147996416]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 26 16:30:15Z [4147996416]: --key = /content/licensing/lic_csr.key
    INFO      Feb 26 16:30:15Z [4147996416]: URL : https://eu-prod-utm.soa.sophos.com/api/device/2/license
    INFO      Feb 26 16:30:16Z [4147996416]: license_check : License retrieved...
    INFO      Feb 26 16:30:16Z [4147996416]: License response verification successful
    INFO      Feb 26 16:30:16Z [4147996416]: device attributes found in response...
    INFO      Feb 26 16:30:16Z [4147996416]: Received these licenses 1
    INFO      Feb 26 16:32:24Z [4147926784]: --requestType = 2
    INFO      Feb 26 16:32:24Z [4147926784]: --lastCheckCode = 276c174d-3423-42b0-bd4a-3440ac4a53a2
    INFO      Feb 26 16:32:24Z [4147926784]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 26 16:32:24Z [4147926784]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 26 16:32:24Z [4147926784]: --key = /content/licensing/lic_csr.key
    INFO      Feb 26 16:32:24Z [4147926784]: URL : https://eu-prod-utm.soa.sophos.com/api/device/2/license
    INFO      Feb 26 16:32:26Z [4147926784]: license_check : License retrieved...
    INFO      Feb 26 16:32:26Z [4147926784]: License response verification successful
    INFO      Feb 26 16:32:26Z [4147926784]: device attributes found in response...
    INFO      Feb 26 16:32:26Z [4147926784]: Received these licenses 1
    INFO      Feb 26 16:33:16Z [4148221696]: --requestType = 2
    INFO      Feb 26 16:33:16Z [4148221696]: --lastCheckCode = 9a9cc1b1-a3a9-4d21-95b4-8be9b6fc0c96
    INFO      Feb 26 16:33:16Z [4148221696]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 26 16:33:16Z [4148221696]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 26 16:33:16Z [4148221696]: --key = /content/licensing/lic_csr.key
    INFO      Feb 26 16:33:16Z [4148221696]: URL : https://eu-prod-utm.soa.sophos.com/api/device/2/license
    INFO      Feb 26 16:33:17Z [4148221696]: license_check : License retrieved...
    INFO      Feb 26 16:33:17Z [4148221696]: License response verification successful
    INFO      Feb 26 16:33:17Z [4148221696]: device attributes found in response...
    INFO      Feb 26 16:33:17Z [4148221696]: Received these licenses 1
    INFO      Feb 26 16:33:39Z [4148127488]: --requestType = 2
    INFO      Feb 26 16:33:39Z [4148127488]: --lastCheckCode = 997ae573-5c35-486d-85de-fc5929c579b4
    INFO      Feb 26 16:33:39Z [4148127488]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 26 16:33:39Z [4148127488]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 26 16:33:39Z [4148127488]: --key = /content/licensing/lic_csr.key
    INFO      Feb 26 16:33:39Z [4148127488]: URL : https://eu-prod-utm.soa.sophos.com/api/device/2/license
    INFO      Feb 26 16:33:40Z [4148127488]: license_check : License retrieved...
    INFO      Feb 26 16:33:40Z [4148127488]: License response verification successful
    INFO      Feb 26 16:33:40Z [4148127488]: device attributes found in response...
    INFO      Feb 26 16:33:40Z [4148127488]: Received these licenses 1
    INFO      Feb 26 16:41:01Z [4147672832]: --requestType = 2
    INFO      Feb 26 16:41:01Z [4147672832]: --lastCheckCode = 26e4dacf-c310-4a73-9cb3-5732f4973244
    INFO      Feb 26 16:41:01Z [4147672832]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 26 16:41:01Z [4147672832]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 26 16:41:01Z [4147672832]: --key = /content/licensing/lic_csr.key
    INFO      Feb 26 16:41:01Z [4147672832]: URL : https://eu-prod-utm.soa.sophos.com/api/device/2/license
    INFO      Feb 26 16:41:02Z [4147672832]: license_check : License retrieved...
    INFO      Feb 26 16:41:02Z [4147672832]: License response verification successful
    INFO      Feb 26 16:41:02Z [4147672832]: device attributes found in response...
    INFO      Feb 26 16:41:02Z [4147672832]: Received these licenses 1
    INFO      Feb 26 20:46:40Z [4148385536]: --requestType = 2
    INFO      Feb 26 20:46:40Z [4148385536]: --lastCheckCode = 75d81038-ac10-4178-b21a-75e171e03d4a
    INFO      Feb 26 20:46:40Z [4148385536]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 26 20:46:40Z [4148385536]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 26 20:46:40Z [4148385536]: --key = /content/licensing/lic_csr.key
    INFO      Feb 26 20:46:40Z [4148385536]: URL : https://eu-prod-utm.soa.sophos.com/api/device/2/license
    INFO      Feb 26 20:46:41Z [4148385536]: license_check : License retrieved...
    INFO      Feb 26 20:46:41Z [4148385536]: License response verification successful
    INFO      Feb 26 20:46:41Z [4148385536]: device attributes found in response...
    INFO      Feb 26 20:46:41Z [4148385536]: Received these licenses 1
    INFO      Feb 27 14:30:28Z [4147881728]: --requestType = 2
    INFO      Feb 27 14:30:28Z [4147881728]: --lastCheckCode = 8bdbb8aa-d460-447e-b3ce-26f3bad50fb8
    INFO      Feb 27 14:30:28Z [4147881728]: --cert = /content/licensing/lic_csr.pem
    INFO      Feb 27 14:30:28Z [4147881728]: --token = Token-Id:X123xxxxxxxxRW4B
    INFO      Feb 27 14:30:28Z [4147881728]: --key = /content/licensing/lic_csr.key
    INFO      Feb 27 14:30:28Z [4147881728]: URL : https://eu-prod-utm.soa.sophos.com/api/device/2/license
    INFO      Feb 27 14:30:29Z [4147881728]: license_check : License retrieved...
    INFO      Feb 27 14:30:29Z [4147881728]: License response verification successful
    INFO      Feb 27 14:30:29Z [4147881728]: device attributes found in response...
    INFO      Feb 27 14:30:29Z [4147881728]: Received these licenses 1
    XGS126_XN02_SFOS 20.0.0 GA-Build222 HA-Primary#
    

  • Hello LHerzog,

    Just to clarify, the license isn’t showing for only the Firewall RW4B or also for the CB60?

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • Hi,

    it was on both. RW4B is current Primary and license holder.

    I got response on my support case today that I should now re-sync the licenses and this time it finally worked.

    May I know why this was not working?

  • We are currently investigating an issue with firewalls transferred in a particular timeframe. As you used the license transfer feature in Central after the migration (OCT2023) it seems to cause some issues. 

    We expect this to be fixed for all customers / applicable firewalls to prevent this from happening in the future. 

    __________________________________________________________________________________________________________________

  • OK, that does probably apply to the original firewall here in this thread. These licenses have been moved to Central last year. I remember we had a support case open that time because it was initially not working.

    My last question was about 2 brand new XGS126 appliances.

  • Essentially the root cause here could be the account itself. Which means, if you purchase with your account a new device, there is a mismatch of expected and actual account ID. 

    Bottom line is, Sophos is aware of this situation and we are working on the situation to be fixed for the future. 

    __________________________________________________________________________________________________________________