Reported By: POSB BANK

Attended By: Fortune Tafadzwa Madzivo (Systems Engineer)

Product: ManageEngine Firewall Analyzer

Issue/Introduction:
When our client tries to login on ManageEngine Firewall Analyzer Web Console, client sees
an error indicating that the application was inaccessible indicating the below error:
Unable to start ManageEngine Firewall Analyzer Service.
License validation failed. Probable causes are listed below:

• License file is either invalid or might have been edited.

• The license file might have corrupted.

Fig: 1 Firewall Analyzer error

Resolution:
1. Upon checking the logs, we see that the product was stopped due to trail license was
expired.
Fig: 2 FWA Logs indicating cause of the error

2. Downloaded the attached License.zip and extract the files and the follow the below steps
to apply the license:

1) Stop the ManageEngine OpManager service from services.msc. (Open cmd run as
admin, navigate to \ManageEngine\OpManager\bin and
execute shutdown.bat and stopPgSQL.bat to make sure service is stopped)

2) Under \ManageEngine\OpManager, if there is .lock file present then please cut the
.lock file and paste it outside the ManageEngine folder

3) Open \ManageEngine\OpManager\lib folder and copy the existing files petinfo.dat,

product.dat and AdventNetLicense.xml file and paste it on a desktop

4) Download the attached license.zip file and extract the files (AdventNetLicense,
Petinfo and Product).

5)Copy the extracted files and paste it inside the lib directory present under
the \ManageEngine\OpManager\lib directory to replace the existing files.

6)Start the ManageEngine OpManager service from services.msc and check

the status from the Web Console.
Changes made:
The ManageEngine Firewall Analyzer is now accessible on port 8061, the new url is
http://esetserver-pc:8061

Fig: 3 Indicating New URL Login Page

We also changed the Administrator password from:

Username: admin

Old Password: admin

New password: P0S$$#NK
We went through the reports and we discovered that when a user connects on VPN more
than once within 24hrs period, the assigned IP address will only be indicated on the 1st
connection since the DHCP Lease is still valid.