A grey import is not usually counterfeit hardware in a convincing box, although that exists too. It is more often genuine equipment or genuine licence keys that have travelled outside the channel they were sold into: stock intended for a different region, licences bought under agreement terms that never permitted resale, or keys unbundled from an OEM system they were legally tied to. The product works. The entitlement attached to it does not follow you.
That distinction stays invisible for as long as nothing goes wrong. It becomes concrete the first time you need a warranty replacement, a firmware release to close a published vulnerability, or a support engineer to look at a fault you cannot reproduce. At that point the conversation stops being technical and becomes a question of entitlement, which is not a question you want to open during an outage.
Licence compliance follows the same pattern with a longer fuse. Under-licensing discovered at audit is settled at the prevailing list price, not the price you believed you had paid, and it is settled on the vendor’s timetable rather than your budget cycle. Several years of apparent saving can be absorbed in a single reconciliation, and the finance conversation that follows is difficult for exactly the wrong reasons.
We buy through authorised distribution and we document the entitlement, which occasionally means our quote is not the cheapest number in the room. Where that happens, ask the other supplier for the same evidence: entitlement on the quote, serials registered to you, warranty level and expiry stated, firmware path confirmed. If they can produce it, take their price with our blessing. If they cannot, you now know what the difference was paying for.