topic No valid URL filtering license warnings on firewalls that are not supposed to have the license in General Topics

No valid URL filtering license warnings on firewalls that are not supposed to have the license

Rich.H — Wed, 05 May 2021 09:23:56 GMT

I have several firewalls which use URL filtering and are licensed for it, and several that do not. In Panorama, all the firewalls that do not use it constantly have the Warning:

If I click in to the details I see:

. Warning: No valid threat content package exists
. Warning: No valid Antivirus content package exists
. vsys1
. Warning: in vsys1, 3 warnings for profiles and profile groups: No valid URL filtering license,
. (Module: device)

How do I prevent this? it is potentially masking legitimate problems.

Re: No valid URL filtering license warnings on firewalls that are not supposed to have the license

reaper — Wed, 05 May 2021 09:44:16 GMT

this means you are pushing URL filtering profiles to the not-licensed firewalls as well

you can solve this by splitting licensed and non-licensed devices into device groups so the URL filtering profiles are not pushed to the firewalls without license, or create double rules in the same device group and use 'target' to assign URL filtering enabled rules only to licensed firewalls

Re: No valid URL filtering license warnings on firewalls that are not supposed to have the license

Rich.H — Wed, 05 May 2021 11:29:01 GMT

Thanks, I managed to find the rogue rule, which cleared the error on the Policies last commit. To clear the Template last commit state warning, I had to remove the Dynamic Updates for Threats and Antivirus for those firewalls.