topic Re: Not having a Threat license on panos and do the AV and anti-spyware functions even work? in General Topics

Not having a Threat license on panos and do the AV and anti-spyware functions even work?

S_Gibney — Thu, 07 Jun 2018 13:41:33 GMT

I am a little new to PA firewalls. My question is, with an expired Threat license, or no Threat license installed at all, is all the functionality of the AV and anti-spyware components not active? Customer has one with expired license, but I am trying to be specific on what functionality they have lost due to the expired license. Another customer has never had a threat license but thinks the AV/anti-spyware will still work.

These FWs are:

model: PA-5060
sw-version: 8.0.7

Are there any concrete docs or links I may provide to these customers to verify one way or the other?

Thank you in advance for your help.

Re: Not having a Threat license on panos and do the AV and anti-spyware functions even work?

reaper — Thu, 07 Jun 2018 14:22:22 GMT

Hi @S_Gibney

without a license, no new threat prevention content updates vcan be performed

in the case you already downloaded a threatprevention/AV package, these signatures will still be applied after the license expires (they will simply no longer be able to update the content package)

so the customer that has an expired license will still be able to scan traffic for outdated signatures, the customer that never had a license will not be able to scan for anything except custom signatures

(the engine is not disabled, the license provides the ability to load fresh signatures into the engine)

Re: Not having a Threat license on panos and do the AV and anti-spyware functions even work?

S_Gibney — Thu, 07 Jun 2018 15:02:39 GMT

Thank you reaper for your response sir.