CSC-SSM license problems

Hi,
because of system failure i reinstalled CSC-SSM 6.1.1587.0 version. All was working. Before the reinstallation the license info was this:
# License Information
Product:Base License
License profile host info check OK.
Version:Standard
Activation Code:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Seats:000100 !!!!!!!!!!!!!!! 100 SEATS
Status:Activated
Expiration date:9/20/2008 !!!!!!!
Product:Plus License
License profile host info check OK.
Version:Standard
Activation Code:xxxxxxxxxxxxxxxxx
Status:Activated
Expiration date:5/18/2008 !!!!!
After the installation i entered the same BASE and PLUS license but now i have only 50 seats and the expiration date is not the same, hava a look:
# License Information
Product:Base License
License profile host info check OK.
Version:Standard
Activation Code:xxxxxxxxxxxxxxxxxxxxxxxxxxxx
Seats:000050 !!!!!!!!!!! 50 SEATS
Status:Activated
Expiration date:5/18/2008 !!!!
Product:Plus License
License profile host info check OK.
Version:Standard
Activation Code:xxxxxxxxxxxxxxxxxxxxxxxxxxxx
Status:Activated
Expiration date:5/18/2008 !!!!!!
any idea?
Can anyone direct me to the correct site or give a email contact.

Hi
Contact [email protected] with the information above, they should be able to help.
Regards MJ

Similar Messages

Upload License file to CSC-SSM usling CLI

Hi,
The CSC-SSM license has ben expired into my ASA 5520 having CSC-SSM module..I got the license. But as GUI is not functioning so only option left with CLI.
Can someone guide me the steps for uploading a new license usling CLI into CSC-SSM !!!!

The Activation/License pane lets you configure activation codes for the following two components of the CSC SSM:
â¢ Base License
â¢ Plus License
You can use ASDM to configure CSC licenses only once each for the two licenses. Renewed license activation codes are downloaded automatically with scheduled software updates. Links to the licensing status page and the CSC UI home page appear at the bottom of this window. The serial number for the assigned license is filled in automatically

Overrun nodes license CSC-SSM-10 (100 nodes) ASA5520

Hi all,
I got an ASA5520 with a CSC-SSM-10 (100 nodes) in use. There are about 200 host behind.
What happen, when the node license will be overrun. E.g. all 200 hosts are connecting through the firewall/contentfilter
at the same time?
Thanks,
Norbert

You can issue "sh csc node-count" on the ASA CLI.
http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/s2.html#wp1362072
License upgrade notice Error Message license-upgrade-notice: Your daily node counts (daily_count) has
exceeded your licensed seats (seats) by offset. Please upgrade your license.
Example:
License-upgrade-notice: Your daily node counts (300) has exceeded your licensed seats (100) by 200. Please upgrade your license.
Explanation    This system log message is generated when CSC SSM detects more nodes connected to the CSC SSM than are specified in the current license. In addition to this message, a notification e-mail is sent to the administrator.
•    daily_count—The daily node count that has connected to the CSC SSM •    seats—The number of seats of the CSC SSM license •    offset—The daily count minus the number of seats
Recommended Action    Contact Cisco for a license upgrade.
You can read the above in the csc module admin guide here: http://www.cisco.com/en/US/docs/security/csc/csc62/administration/guide/cscbook.pdf
-KS

Which part number for CSC-SSM with Plus license?

Dear All,
Which part number for CSC-SSM with Plus License? i saw the part number for standard license.
could you let me know?
Best regards,

Hi,
The part number is the following:
ASA-CSCX-YP-ZY
where X is your CSC model, Y is the number of seats of the license and Z is the number of years.
For instance, if you need a 2 year plus license for a CSC10 with 250 seats, the part number would be ASA-CSC10-250P-2Y
Regards,
Nicolas

ASA 5520 : IP address for CSC SSM

Hi All,
I have an ASA 5520 with CSC SSM. I have base and plus license and want to activate it. T he IP address and gateway have to be configured on the CSC SSM. I have configured IP addresses for the INSIDE,OUTSIDE,DMZ and MGMT. The outside is a public IP address. Now for the CSC SSM what range should i give?
There is an ISA server on the DMZ where all user IP's get PATed and on ASA this gets NATed on the ASA. Direct access to the internet exists for the servers (bypassing proxy).
My basic doubt is about the IP address and gateway that the CSC SSM should have and is it related ot the management interface ip address?
Thanks and Regards.
Sonu

Hi
put your CSC ip address as outside interface subnet.because CSC needs automatic updates from internet.and you can able to manage CSC from remote itself.
for EX
your outside ip is 10.0.0.1/24,make CSC IP As 10.0.0.2/24,Gateway 10.0.0.1
Hopes this helps
regs
S.Mohana sundaram

Step to prep CSC SSM on ASA Active/Standby mode

Hi all,
I am trying to setup Active/Standby HA mode for my site.
Currently the site was installed with one unit ASA firewall with CSC-SSM module, the second unit is the new unit ready to be setup.
My question:
01. My concern is second unit CSC-SSM, what is the proper procedure or step need to prep it?
Is it need to prep the CSC-SSM before the ASA in HA mode Or it will auto propagate the configuration when both unit in HA mode?
What else need to concern? am i need to setup different IP for the CSC-SSM management interface?
Thanks
Noel

Hello Yong,
Configuration related to the CSC or SSM modules will never get propagated so you will basically need to configure it manually.
Also it's not like if the Config on both modules is different failover will fail but ofcourse you wanna have the same one
IP addresses for each of the modules will be dedicated ones. Remember that failover will fail if one box has the CSC and the other not.
Looking for some Networking Assistance?
Contact me directly at [email protected]
I will fix your problem ASAP.
Cheers,
Julio Carvajal Segura
http://laguiadelnetworking.com

No outbound smtp traffic via CSC SSM.

Hallo
I have a Problem with my ASA CSC-SSM Module (Version 6.1).
The inspection of http and POP works fine, but i have a problem with the outbound smtp traffic.
If i direct the SMTP Traffic via an Service Policy to my CSC Module no Mail will be send outbound.
If i remove the ACE from my SP smtp works fine again.
The reason why i want to inspect my outbound mailtraffic is that i want to add a disclamer to my outgoing mails.
I read the Admin Guide but there is no example how to Configure outbound SMTP( only inbound SMTP).
Is there something that i have to do?
I hope someone can help me.

Try this config:
access-list csc_out permit tcp host 192.168.200.xxx any eq smtp ---for smtp
access-list csc_out permit tcp 192.168.2xx.0 255.255.255.0 any eq 80
access-list csc_out permit tcp 192.168.2xx.0 255.255.255.0 any eq pop3
access-list csc_out permit tcp 192.168.2xx.0 255.255.255.0 any eq ftp
class-map csc_outbound_class
match access-list csc_out
policy-map csc_out_policy
class csc_outbound_class
csc fail-close
service-policy csc_out_policy interface inside

Is there any architectural difference between CSC-SSM and AIP-SSM modules

Hello security gurus!
I'm wondering if there's any chance to make Content security module (CSC-SSM) work as IPS (AIP-SSM). It seems to me they are absolutely identical in terms of hardware. Is there any chance to make CSC-SSM boot with the flash from AIP-SSM and have the ASA recognize it as an IPS module ?
Eugene

Zheka,
This is not recommended and you will loose support, these are different devices designed for different purposes, you will also have issues with the license, I have seen it one once, and the customer did it by mistake, the module eventually crashed and we had to add the proper image.
Regards,
Felipe.

Can't Send or Receive Email from Exchange behind ASA 5510 with CSC SSM

We are upgrading from a Pix 515e to a ASA 5510 with CSC SSM. We cannot send outbound email or receive any email from the outside world. I have placed a call with Cisco Support with no luck. Here is a copy of my config: Any Help would be appreciated.
show config
: Saved
: Written by enable_15 at 07:17:44.760 CST Wed Jan 18 2012
ASA Version 8.4(3)
names
interface Ethernet0/0
nameif outside
security-level 0
ip address 216.XXX.XXX.XXX 255.XXX.XXX.XXX
interface Ethernet0/1
nameif inside
security-level 100
ip address 192.168.0.5 255.255.255.0
interface Ethernet0/2
shutdown
no nameif
no security-level
<--- More --->
no ip address
interface Ethernet0/3
shutdown
no nameif
no security-level
no ip address
interface Management0/0
shutdown
nameif management
security-level 100
no ip address
management-only
boot system disk0:/asa843-k8.bin
ftp mode passive
clock timezone CST -6
clock summer-time CDT recurring
object network obj-192.168.5.0
subnet 192.168.5.0 255.255.255.0
object network obj-192.168.0.0
subnet 192.168.0.0 255.255.255.0
<--- More --->
object network obj-192.168.9.2
host 192.168.9.2
object network obj-192.168.1.65
host 192.168.1.65
object network obj-192.168.1.0
subnet 192.168.1.0 255.255.255.0
object network obj-192.168.2.0
subnet 192.168.2.0 255.255.255.0
object network obj-192.168.3.0
subnet 192.168.3.0 255.255.255.0
object network obj-192.168.6.0
subnet 192.168.6.0 255.255.255.0
object network obj-192.168.8.0
subnet 192.168.8.0 255.255.255.0
object-group service DM_INLINE_TCP_1 tcp
port-object eq ftp
port-object eq www
port-object eq pop3
port-object eq smtp
object-group network Red-Condor
description Email Filtering
network-object host 66.234.112.69
network-object host 66.234.112.89
object-group service NetLink tcp
<--- More --->
port-object eq 36001
object-group network AECSouth
network-object 192.168.11.0 255.255.255.0
object-group service Email_Filter tcp-udp
port-object eq 389
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
object-group service DM_INLINE_TCP_0 tcp
group-object Email_Filter
port-object eq pop3
port-object eq smtp
object-group network Exchange-Server
description Exchange Server
network-object host 192.168.1.65
access-list global_mpc extended permit tcp any any object-group DM_INLINE_TCP_1
access-list outside_access extended permit tcp any object obj-192.168.9.2
access-list outside_access extended permit icmp any any
access-list outside_access extended permit tcp any object-group Exchange-Server eq https
access-list outside_access extended permit tcp object-group Red-Condor object-group Exchange-Server eq smtp
access-list outside_access extended permit tcp object-group Red-Condor object-group Exchange-Server eq pop3
access-list outside_access extended permit object-group TCPUDP object-group Red-Condor object-group Exchange-Server object-group Email_Filter
access-list inside_access_in extended permit ip any any
access-list inside_access_in extended permit icmp any any
<--- More --->
pager lines 24
logging enable
logging console debugging
logging asdm informational
mtu outside 1500
mtu inside 1500
mtu management 1500
ip local pool vpnpool 192.168.5.1-192.168.5.254 mask 255.255.255.0
icmp unreachable rate-limit 1 burst-size 1
icmp permit any outside
icmp permit any inside
asdm image disk0:/asdm-647.bin
no asdm history enable
arp timeout 14400
object network obj-192.168.9.2
nat (inside,outside) static 216.XXX.XXX.XXX no-proxy-arp
object network obj-192.168.1.65
nat (inside,outside) static 216.XXX.XXX.XXX no-proxy-arp
object network obj-192.168.1.0
nat (inside,outside) dynamic interface
object network obj-192.168.2.0
nat (inside,outside) dynamic interface
object network obj-192.168.3.0
<--- More --->
nat (inside,outside) dynamic interface
object network obj-192.168.6.0
nat (inside,outside) dynamic interface
object network obj-192.168.8.0
nat (inside,outside) dynamic interface
access-group outside_access in interface outside
access-group inside_access_in in interface inside
route outside 0.0.0.0 0.0.0.0 216.XXX.XXX.XXX 1
route inside 192.168.0.0 255.255.0.0 192.168.0.1 1
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
aaa-server isaconn protocol radius
aaa-server isaconn (inside) host 192.168.1.9
timeout 5
key XXXXXXX
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
<--- More --->
http server enable
http 192.168.0.0 255.255.0.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set AEC esp-des esp-md5-hmac
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs group1
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map outside_map interface outside
crypto ca trustpoint _SmartCallHome_ServerCA
crl configure
crypto ca server
shutdown
<--- More --->
smtp from-address [email protected]
crypto ca certificate chain _SmartCallHome_ServerCA
certificate
quit
crypto ikev1 enable outside
crypto ikev1 policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
telnet 192.168.0.0 255.255.0.0 inside
telnet timeout 5
ssh 192.168.0.0 255.255.0.0 inside
ssh timeout 5
console timeout 0
management-access inside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ntp server 208.66.175.36 source outside prefer
webvpn
username cisco password 3USUcOPFUiMCO4Jk encrypted privilege 15
<--- More --->
class-map global-class
match access-list global_mpc
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
<--- More --->
inspect netbios
inspect tftp
inspect ip-options
class global-class
csc fail-close
service-policy global_policy global
prompt hostname context
call-home reporting anonymous

Hello Scott,
So Exchange server ip is obj-192.168.1.65 natted to 216.x.x.x
object network obj-192.168.1.65
"nat (inside,outside) static 216.XXX.XXX.XXX no-proxy-arp"
The ACL says
access-list outside_access extended permit tcp object-group Red-Condor object-group Exchange-Server eq smtp
access-list outside_access extended permit tcp object-group Red-Condor object-group Exchange-Server eq pop3
From witch ip addresses are you trying to send traffic to the exchange server?
Please do a packet-tracer and give us the output
packet-tracer input outside tcp x.x.x.x( Outside host ip) 1025 216.x.x.x.x 25
Regards,
Julio
Rate helpful posts!!!

New hard drive and photoshop license problem

I have a Dell Inspiron 6000 with a 1.5 Ghz Pentium processor, 2 GB of RAM, and Win Xp/Pro SP3.
The hard drive in this computer failed, and it has been replaced. I used an image backup from Acronis True Image 10 to "restore" the new disk.
Now, when I try to open Phostoshop CS2, I receive a message that the license is no longer valid (I have been using this version of Photoshop for a long time).
I don't have this problem with InDesign CS3 (v. 5.0.2), FrameMaker 7.2b144, or Acrobat 8.1.6.
I didn't find any helpful info on the "Product Activation" web page.
I tried a forum search and a search of Adobe.com using the search criteria "new hard drive and photoshop license problem."
The only relevant item I could find is this:
"Backup and restoration of your system using standard tools do not require reactivation. While reactivation after backing up or restoring the system was required in early versions of Adobe software (such as Adobe Photoshop® CS), Adobe has continued to improve the activation process with new technology that eliminates the need to reactivate after system restoration. In complex situations where the system is being upgraded, we recommend deactivating the Adobe software before commencing the system upgrade. Once the system upgrade is completed, the subsequent install/restore will require reactivation, which is typically accomplished without difficulty and is completely transparent to the user."
So does that mean I have to "reactivate" Photoshop CS2? If so, do I use the Activation window that is displayed when I open Photoshop? The serial number has 20 characters. Will the Adobe (re)activation recognize this old serial number? If not, what do I have to do to get this product usable again?
Please help.

>replaced your hard drive and CS2 DRM is looking for the old hard drive number and not finding it
Interesting... I use http://www.terabyteunlimited.com/image-for-linux.htm which creates a bootable CD and runs outside of Windoze
I have made image files and loaded those files to a new hard drive (I use drive swap hardware to make a backup and create a new drive every time I install or uninstall major software) and have never had any program complain about needing activation
But, since the program I use is Linux on a bootable CD, it copies EVERYTHING on a hard drive, even the hidden registration areas as far as I can tell, so when I do a restore to a new drive, everything is put on the new drive

ASA5510-SEC with CSC-SSM and Plus lic

I have setup the ASA5510-SEC with the CSC-SSM and it is working great. What I need is to be able to provide, for the client, reports of how much time particular users spend on the Internet, where they go on the Internet etc. Do I need more product to do this reporting? Would also like to have email reports
Thanks,

I would recommend posting in netpro for this. This community doesn't work with the ASA series.
www.cisco.com/go/netpro

Old Mac died. Have PE 9 and while it installs I get a licensing problem I have the original discs and the serial

Old Mac died. Have PE 9 and while it installs I get a licensing problem I have the original discs and the serial. How do I fix this? I don't need the new version and I just want to use what I have already paid for. Error 213:5

Did you migrate over the data from your old computer? If so, there's probably something you brought over that knows it's not on the same hardware as before. In that case you need to run this:
http://helpx.adobe.com/creative-suite/kb/cs5-cleaner-tool-installation-problems.html
and then go around and manually remove all the bits and bobs, not just from applications but also from hard drive>library>application support>adobe and from your username>library>preferences. Spotlight will not help you. You have to go looking on your own.
If that's not it--you just a message that you've used up your activations, you need activation support:
Activation & Deactivation Help
Start a chat session and they can get you straightened out.

License Problem .. what do I need ...

Dear all !
I have some license problems .. and want kindly ask for
advise ..
I had time fixed license which works fine ..
and then I got an update for the license ..
and merged the old and the new license with
the updateLicensefile.sh script ..
But when I start a container with > startWebLogic.sh
I got WebLogic: license has expired on Thu Sep 13 12:00:00 CEST 2001!
. and he seems not recognize the new license ..
So I tried to check which parts are missing ..
Expried is Connector, QASuite .. do I need them ?
For WebLogic, "SSL/Export, 2PC, In-memory Replication - Servlet,
In-memory Replication - EJB. EJB 1.1, EJB 2.0, JMS, Cluster,
Clustered JMS, jDrivers ..I have new licenses .. but
they are in a new license-group .. not
longer in release="6.1"
<license-group format="1.0" product="WebLogic Server" release="*">
So I'm really confused, what to do .. and
what is the missing license ?
My customer number is : DEU100683
Can anybody be so kind to help me out of this ?
The other question is, does BEA also provide normal
access to the newsgroups via nntp .. I would
prefer this .. which one is the nntp server ?
Thanks a lot !
Frank

Frank,
The java weblogic.Admin LICENSES utility lists the license that the server
is using.
If you had multiple licenses and did not know which one was being picked
this utility will help you.
http://e-docs.bea.com/wls/docs61//////adminguide/cli.html#1134397
Regarding the documentation error can you paste the url where you found the
error. I will make sure I inform the person responsible for that.
Regarding the information returned by the license utility I will follow up
with Engineering to check if it would be possible to change the format
returned.
Thanks
Raj Alagumalai
Frank Grützmacher <[email protected]> wrote in
news:[email protected]:
>
>
Raj Alagumalai wrote:
Frank ,
Regarding the UpdateLicense-script issue, the order in which the new
license is appended should not matter. As long as the server is able
to read the information from that file.
Please refer to this url for more information on the showLicenses
utility. This utility will provide information on what license the
server is using.
http://e-docs.bea.com/wls/docs61/////adminguide/utils.html#1117307
Hope this information helpsDear Raj !
Thanks a lot at first ..
but :
java utils.showLicenses .. doesn't really help , because
on the workstation it brings me : java.lang.NullPointerException ..
without
any further information and without stack trace ( this should be added
of course )
I also used .. weblogic.Admin which works to show the licens
information ..
but t seems only to list the contents of the license.bea in another way
not whether any of the liences makes sense and is valid ..
Then I also tried :
java utils.writeLicense ..
not very helpful too in this case .. also list only
the contents .. something like : you have a valid license
until xxx .. of this yyy components would help
more ..
BTW .. the documentation is wrong .. the Property is : bea.home ..
not bea.system.home .. and the example on a unix console with
-Dbea.home=d:\bea60 shows two things
a) this was not updated for 6.1 ..
b) you differ not , whether you are on unix or dos .. but you should
But this is all not important .. shows only that also BEA if far away
from being perfect,
this is from a developer point of view good .. because everyone is
failing somehow
every day .. but the license problem should not occure !
I sent the problem on Thuesday to the support , to see what can be done
so far no answer !
Thanks again for your kind help and hints !
Frank

2012 Licensing Problem

I would like to make everyone aware of an issue with RDS and the FIX from Microsoft services which I consider unacceptable.
The setup is as follows. One 2012 DC with Terminal server licensing installed. Two 2012 servers with RDS enabled. Take note that RDS was NOT deployed using the wizard as there is no need
for all of the resources of a server farm for 2 servers. On each of the RDS enabled servers, group policey was used to enable and specify the RDS server and licensing mode. The RD Licensing Diagnoser was used to verify, and report that no licensing
problems for the Remote Desktop Session Host Server existed, and the tray icon that reports that you are running a trial version of RDS does NOT appear.
Advance forward a few months and users start reporting that they cannot login and that they are receiving “The remote session was disconnected because there are no RDS license servers available
to provide a license."
After doing all that I could I filed a case with Microsoft Support at the Highest Level Possible. After a month I finally was able to talk to someone. After 2 more weeks, here is the solution
they gave me….
Open the registry, Navigate to HKLM\System\CurrentControlSet\Control\TerminalServer\RCM
Delete the GracePeriod Key
Reboot
This continues to occur every few months. I wish someone at MS would FIX the problem.
Lee

sure.
i have 5x 2012 RDS farms, nearly identical in configuration dispersed throughout the globe, each farm has:
2x RDSH
1x RDCB, RDWeb, RDLicense server with 2012 CALs deployed as User Mode
We are pointing directly to the license server in our collection settings (only 1 collection per farm) and also again via GPO settings to override license server auto discovery options
These systems were rolled out using scenario-based installs so while RDWeb is there, it's not actually being used (nothing published to it), users are leveraging session-based desktops via RDP client both internally and externally
systems are all domain joined, we're still on 2003 functional level in AD
i first encountered this issue around the 120 days mark after the first farm went into production, we saw that users could not login and event ID 1130 was being thrown for every login attempt.
i saw this article and followed the steps to resolve it:
http://www.360ict.nl/blog/no-remote-desktop-licence-server-availible-on-rd-session-host-server-2012/
however, after another 120 days passed, i ran into the same issue again, realizing this was not a permanent fix. after just opening the case with MS on this a couple of weeks ago, they've told me it's a bug and so for now, i proactively purge the
L$RTMTIMEBOMB_nnnn key under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\RCM\GracePeriod, i restart
TermService so i don't have to reboot the whole box and it's fine for another 120 days
during the issue and even when it's not occurring, licensing diagnostics come up clean, i haven't taken a report while the issue is occurring but when it's not occurring the reports show CALs being assigned to all users by the license server.
basically, it seems like even though we have a license server that is activated with user CALs, the Review section shows green checks under both sections, and reporting is fine - the system is stuck in 120 day trial mode for some reason.
now MS did say they know about this and they're working on a fix, hopefully not to just get me off the phone, but they didn't have a different workaround and advised that i continue doing what i'm doing.
what i don't really understand is that when i remove the L$RTMTIMEBOMB_nnnn
key from the registry, it gets recreated upon the first user logon that has to go talk to the license server. in a working 2012 environment, should this key even exist if an active license server is already available?

HTTPS Filtering on CSC SSM-10

Hello,
One of our customers has an ASA5510 with CSC SSM-10 security module. The software version of the module is 6.6.1125.0.
Is it possible to do https filtering with this module ? The cutomer is complaining that this is not possible..., They cannot do this.
Please any help or suggestion how to assist them ?
p.s. from Cisco I've read the following:
• HTTPS Filtering
     – Able to allow or block HTTPS traffic.
     – Supports group-based and user-based HTTPS policies.
     – Includes URL blocking/URL exception list support for HTTPS domains.
Thank you and best regards,
Ilir

This should help:
http://www.cisco.com/en/US/docs/security/csc/csc66/administration/guide/csc1.html

CSC-SSM license problems

Similar Messages

Maybe you are looking for