[NFX250] Unable to add NFX250-S-ADV license

Summary:

This article throws light on why users may encounter the "license meant for virtual product is not valid for this product" error while trying to add the NFX250-S-ADV license to the NFX250-NextGen device and points out the appropriate license SKUs for the device.

Symptoms:

When trying to execute request system license add by using the license obtained from SKU NFX250-S-ADV, the following error is observed:

terminal:1 error: DemoLabJUNOSxxxxxxxxx: license meant for virtual product is not valid for this product
add license failed (1 errors)

Cause:

The above error is encountered because the SKU NFX250-S-ADV license is meant for a permanent Virtual-Appliance license, loaded in vSRX VNF.

Solution:

The SKU NFX250-S-ADV license is designed for use on NFX250 that ran the legacy nfx-2 software. Additionally, this license was meant to load a permanent license for the Virtual-Appliance license on the vSRX VNF. When properly loaded on NFX250, in the vSRX VNF, you will see the following:

DemoLabJUNOSxxxxxxxxx: successfully added
add license complete (no errors)

root> show system license 
License usage: 
                                 Licenses     Licenses    Licenses    Expiry
  Feature name                       used    installed      needed 
  appid-sig                             0            1           0    2022-02-11 00:00:00 UTC
  logical-system                        1            3           0    permanent
  Virtual Appliance                     1            1           0    2022-02-11 00:00:00 UTC
  remote-access-ipsec-vpn-client        0            2           0    permanent

--- snip ----

Appropriate license SKUs for the NFX250-NextGen product (running nfx-3 software) will include the following:

NFX250-S-ATP-1: 1 year subscription for SkyATP
NFX250-S-ATP-BUN-1: 1 year subscription for bundle of SkyATP, AppSecure, IDP, EWF, and AV
NFX250-S-CS-BUN-1: 1 year subscription for bundle of AppSecure, IDP, EWF, and AV
NFX250-S-IPS-1: 1 year subscription for IDP
NFX250S-THRTFEED-1: 1 year subscription for SkyATP Threat Intelligence Feed Only
NFX250-S-W-EWF-1: 1 year subscription for enhanced web-filtering

Knowledge Base