topic Re: Impact of license expiry in General Topics

Impact of license expiry

SachinGargNTT — Fri, 05 Jan 2024 08:00:24 GMT

I need the impact below license expiry. This is not in terms of any OS version. This is a gen query.

-SD WAN License
-BrightCloud URL Filtering
-GlobalProtect Portal
-GlobalProtect Gateway

I intend to get the below bullets:-

-What one can still do,

-What one can no longer do,

Re: Impact of license expiry

Claw4609 — Fri, 05 Jan 2024 15:53:46 GMT

sd-wan license: LIVEcommunity - What happens when the SD-WAN license on firewall expires? - LIVEcommunity - 541649 (paloaltonetworks.com)

For brightcloud I would assume it would be similar to the url filtering license expiring, I dont believe you can renew a brightcloud license anymore: What Happens When Licenses Expire? (paloaltonetworks.com)

Globalprotect portal license no longer exists, there is just the one GP license now. What happens with GP is listed here: What Happens When Licenses Expire? (paloaltonetworks.com)

When are the Global Protect Portal and Gateway Licenses Require... - Knowledge Base - Palo Alto Networks

Obviously your license needs depend on your environment but at the vary least I would recommend getting the advanced url filtering license to put in place. Hope this helps.

Re: Impact of license expiry

SachinGargNTT — Mon, 15 Jan 2024 08:11:31 GMT

As per "https://live.paloaltonetworks.com/t5/general-topics/what-happens-when-the-sd-wan-license-on-firewall-expires/td-p/541649#:~:text=For%20Palo%20Alto%20license%20expiration,WAN%20Subscriptions%20is%2030%20days." for SD WAN license, what are the limitations?

Re: Impact of license expiry

sawjain — Tue, 16 Jan 2024 13:18:46 GMT

Hi Sachin,

When license for SD-WAN expires sites connected via SD-WAN will not go down but these below mentioned will take place.

>>Tunnels may go down due to keep-alive timeouts.

>>traffic will not get impacted.

>>You can't make any changes and also you can't push any changes.

>>You will not be able to add interfaces.

>>You can't make any changes on VIF.

>>Phase 2 may go down if you have SASE configured.

Regards,

Sawan Jain