topic Re: DNS license expired. in General Topics

DNS license expired.

Learn-PaloAlto — Wed, 07 Jul 2021 04:19:51 GMT

I have PA820 with image 10.0.

Will I still able use URL feature after DNS license expried?

Is true that once the license expired the PA820 next generation no longer function and it looks like it only work as standard firewall?

Thanks

Re: DNS license expired.

NikolayDimitrov — Wed, 07 Jul 2021 07:15:39 GMT

The two licenses are not related:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/subscriptions/all-subscriptions.html

Check your URL filtering license:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/device/device-licenses.html

I also recommend to learn Palo Alto for you to take the Palo Alto free digital learning palo alto edu-110 and edu-120 (free registration to Palo Alto beacon is needed https://beacon.paloaltonetworks.com/student/catalog😞

https://live.paloaltonetworks.com/t5/blogs/edu-110-and-edu-120-available-for-pan-os-9-0/ba-p/260257

Also CBT nuggets and INE have good palo alto trainning.

Re: DNS license expired.

Learn-PaloAlto — Wed, 07 Jul 2021 15:48:24 GMT

I understand without the URL filter license and we won't get any new update from the DB.

My question was when the URL filter license expired, will the URL context filter feature still work with old DB?

Thanks

Re: DNS license expired.

NikolayDimitrov — Wed, 07 Jul 2021 16:05:28 GMT

You can find article easily if you just check in google:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXoCAK

Also read this for if a reboot happens what will happen to the database:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/pan-db-categorization.html

Re: DNS license expired.

OtakarKlier — Wed, 07 Jul 2021 16:45:29 GMT

Hello,

Yes the URL filter will still function and as long as your license is valid, it will still function as you have it setup. There are other DNS solutions available if you still wish to use a secure DNS provider instead of Palo Alto, however they work just like any other DNS solution, they dont integrate into the PAN.

Regards,