topic Re: Migration of Palo Alto VM series from one host to another in General Topics

Migration of Palo Alto VM series from one host to another

Radmin_85 — Thu, 05 Apr 2018 11:12:12 GMT

Two PaloAlto Virtual appliances has been deployed in HA mode on Customer site.

Device models: VM-200

We plan to migrate the virtual firewalls to another host via VMWare Vmotion
feature.

Issue is: the status of licenses of the firewalls.

We have information that the licenses will be lost in that case.

What is essential to do to recover removed licenses?

Re: Migration of Palo Alto VM series from one host to another

Raido_Rattameister — Thu, 05 Apr 2018 17:58:22 GMT

Where did you get this information?

I have virtual Palos moving around by DRS without any issues.

Re: Migration of Palo Alto VM series from one host to another

jvalentine — Sun, 15 Apr 2018 23:38:43 GMT

My experience has been much like @Raido_Rattameister. I've v-motioned firewalls between hosts many times over many years. Never had a problem.

Copy, Clone, and some Move operations have the likely potential to invalidate the license. Generally speaking, a v-motion process shouldn't invalidate a license. It is important to note that v-motion of the VM-series firewall is not officially supported by Palo Alto Networks, due to the possibility that traffic is inadvertently discarded as the appliance migrates between hosts.

If push comes to shove, and if your license is somehow invalidated, open a case with TAC and work with them to get things working again.