topic No valid GlobalProtect Subscription License warning in General Topics

No valid GlobalProtect Subscription License warning

VishnuPS — Fri, 17 Sep 2021 05:24:27 GMT

Dear Team,

I am receiving the below warning while committing,

Warning: Collect HIP Data in vsys (vsys1), GlobalProtect Portal (GP) -> Agent -> config (GP_A91) -> HIP Data Collection will not take effect due to no valid GlobalProtect Subscription License

The same was working on my old PAN-OS after upgrading to the new PAN-OS(10.0.6) I am receiving this warning.

How we can disable this warning.

Regards,

Vishnu

Re: No valid GlobalProtect Subscription License warning

LAYER_8 — Mon, 20 Sep 2021 14:23:06 GMT

Are you able to confirm you have both valid GlobalProtect gateway and portal licenses on your device? They are both required for HIP profiles attached to traffic.

To disable the warnings, please review the "source" tab of all your security policies and remove HIP profiles from each, or if both licenses are on the device please inquire with technical support.

Re: No valid GlobalProtect Subscription License warning

BPry — Mon, 20 Sep 2021 20:03:05 GMT

@VishnuPS,

The portal license that @LAYER_8 mentioned is no-longer relevant. You'll need to insure that your device is showing an active GlobalProtect Gateway subscription under Device -> Licenses in the GUI. If it isn't showing, you may potentially just need to tell your device to retrieve the license keys from the license server via that same page to get the device to refresh its licenses.

If you have let your GlobalProtect Gateway subscription license lapse, you would simply need to go into the GlobalProtect Portal Agent configuration that is being referenced in the warning page and on the 'HIP Data Collection' tab uncheck the 'Collect HIP Data' box and commit and the validation warning will go away.