topic Re: Threat Prevention License for PAN OS upgrade in Next-Generation Firewall Discussions

Threat Prevention License for PAN OS upgrade

A.LopezRodriguez — Thu, 07 Nov 2024 12:30:34 GMT

We have a PA-220 firewall and we are updrading the PAN OS from version 10.1.13 to version 10.2.0. When we try to update the following error appears: "Upgrading from 10.1.13 to 10.2.0 requires a content version of 8529 or greater and found 8408-6715". To solve this issue, we tried to install a more recent Applications and Threats content version. After downloading a newer version of the Applications and Threats content and trying to install it the following message appears: "No threat content update is applied. No valid Threat prevention license". Indeed, we do not have this license because this is a package we do not need. Is there any way we could disable/remove this package? Or is the Threat prevention license necessary for the update of the PAN OS?

Re: Threat Prevention License for PAN OS upgrade

TomYoung — Thu, 07 Nov 2024 16:22:35 GMT

Hi @A.LopezRodriguez ,

The Threat Prevention license is NOT necessary to upgrade PAN-OS. You should be able to install the Applications and Threats update without a license. I have done it many times. Without a license, supposedly only the applications portion is installed.

Are you getting the encfilesize error? That may indicate a corrupt license file. Please see the 1st URL below. The 2nd URL simply mentions that the applications portion of the package does not require a license.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLPtCAO

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/software-and-content-updates/app-and-threat-content-updates

Thanks,

Tom