John has renewed his NPTX License but he gets an error (contract for Anti-Bot expired). He wants to check the subscription status on the CLI of the gateway, what command can he use for this?

The show license status command is the standard and most direct method within the Gaia Command Line Shell (Clish) to view the status of all licenses and contracts attached to a Security Gateway. This command provides a comprehensive overview, including the expiration dates for each licensed feature (Software Blade), such as Anti-Bot. It directly addresses the "contract... expired" error message by allowing the administrator to verify the contract's validity as seen by the gateway itself.

A. fwm lie print: The fwm command is executed on the Security Management Server to manage the database and is not used on a Security Gateway to check local license status.
B. fw monitor license status: fw monitor is a powerful kernel-level tool used for capturing and inspecting network packets. It has no functionality related to license management.
C. cpstat antimalware-f subscription status: While cpstat antimalware -f subscriptionstatus (note the space) is a valid expert mode command to check blade subscription, show license status is the more fundamental Clish command for verifying the license contract itself.

1. Check Point Gaia R81.10 Administration Guide, Page 169, "System Management Commands". The guide lists show license status as the command to "Show the status of the installed licenses."

2. Check Point Support Center, sk33089: "How to view license information from the command line". This article explicitly states that on a Security Gateway running Gaia, the Clish command to use is show license status. It also confirms that fwm lic commands are for the Security Management Server.

3. Check Point R81.10 CLI Reference Guide, Page 188, "cpstat". This guide details the cpstat command and its flags, showing its purpose is for viewing statistics of Check Point applications, confirming it's different from primary license verification. It also shows fwm commands are for the Security Management Server (Page 315).