topic Re: DNS Security Subscription on EXISTING PA-220 Lab Appliance in General Topics

DNS Security Subscription on EXISTING PA-220 Lab Appliance

MarkRosenecker — Fri, 08 Mar 2019 18:32:25 GMT

Is anyone having the same problem as me? I have an existing PA-220 lab appliance (the lab SKU includes all available subs and support) that was deployed prior to the announcement of PAN-OS 9.0 and DNS Securty. I have since upgraded the appliance to 9.0, but I cannot find a way to add the DNS Security subscription to the appliance within the support portal. I can't even add it as an eval (that option doesn't exist on the Lab boxes, since they're supposed to include all of the subs).

Has anyone else had this problem? If so, how did you resolve it?

Thanks!

Mark

Re: DNS Security Subscription on EXISTING PA-220 Lab Appliance

gwesson — Fri, 08 Mar 2019 20:22:59 GMT

DNS Security was introduced in 9.0, so if you last checked your licenses before the upgrade it wouldn't include that one (8.1 and older wouldn't know what to do with that type of license).

In the GUI, go to Device > Licenses, hit Check Now to see if you now have the DNS Security license.

In CLI enter: request license fetch

Re: DNS Security Subscription on EXISTING PA-220 Lab Appliance

MarkRosenecker — Fri, 08 Mar 2019 20:30:24 GMT

Thanks for the reply!

The device does not have the license for it. The problem isn't on the device...it's on the Support portal. I don't have the option to ADD or enable the license to the asset within the support portal, so that when I go to refresh the licensing on the firewall, there's nothing additional for it to include.

Re: DNS Security Subscription on EXISTING PA-220 Lab Appliance

gwesson — Fri, 08 Mar 2019 23:40:42 GMT

Gotcha. If you already paid for the license and it's not showing up, there may be a way to link them. For that, you'll likely need to work with support directly. Lab devices have separate licensing, but I am ignorant of how the DNS Security license is sold/provided to those devices.

If you have not purchased the license for that, then you would want to work with your account team or reseller/integrator to do so.