topic Re: PA without license in General Topics

PA without license

JesusGonz2020 — Mon, 30 Aug 2021 15:39:33 GMT

Hello.

I hope you can help me. I currently have a customer who wants to leave one of their old APs unlicensed as a VPN concentrator. My question is the following:

What functions would be active in the PA?

For GP I checked this KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClG0CAK in which it says that it allows "Split tunneling based on destination domain, client process, and video streaming application". but will it be the same by IP?

The idea is to tell the client the risks of leaving the NFG that way.

Thanks for your help

Re: PA without license

LAYER_8 — Mon, 30 Aug 2021 16:42:18 GMT

Without a license, you ARE able to split tunnel/create access routes based off IP addresses manually. License is required for picking domains/applications.

Re: PA without license

JesusGonz2020 — Mon, 30 Aug 2021 19:42:29 GMT

If we talk about l7 inspection... this feature will be active after the support licence expire?

Re: PA without license

LAYER_8 — Mon, 30 Aug 2021 20:23:10 GMT

App-ID will work without a license, however, with no support license you will not be able to pull dynamic updates (application signature updates)