Dec 21, 2019

Reset Sophos UTM active IP licence count

split tunneling を定義しないまま SSL VPNした上で
最寄りの/24なネットワーク全体を走査すると、結果的にライセンスオーバーの誤認が起こりうる。そんな時の回避策。

1. To verify the existing license count

a) コンソール/sshでログオンして
 # /usr/local/bin/count_active_ip.plx --showcount
b) Webの管理メニューからは
 look to management / licensing / active IP's
 すると過去7日分の使用IPが確認できるらしい

2. To reset IP count

1) Login to unit via SSH (you must have the "loginuser"
     and "root" user passwords set via the web interface).
2) Type "cc" and hit enter
3) Type "licensing" and hit enter
4) Type "active_ips@" and hit enter
5) Type "=[]" and hit enter
6) Type ".." and hit enter
7) Type "user_limit_exceeded$" and hit enter
8) Type "=0" and hit enter
9) Tyipe "exit", to quit, and hit enter.

At this point the IP table should be flushed and the unit should no longer be in violation of the license.

Please keep in mind that this is a quick fix to a licensing issue.
If you really have too many devices on your network, please consider purchasing a license for the devices you have.

参考にしたところ

1 a), 2
  Reset Sophos UTM active IP licence count (2014.12.30)
https://community.spiceworks.com/how_to/103441-reset-sophos-utm-active-ip-licence-count

1(b)
  License usage: EXCEEDING 110% OF USER COUNT on Sophos UTM (2017.05.02)
https://community.sophos.com/products/unified-threat-management/f/utm-manager-formerly-acc/86750/license-usage-exceeding-110-of-user-count-on-sophos-utm

No comments: