Transitioning from Trial URL Filtering to Paid

Reply
Highlighted
L3 Networker

Transitioning from Trial URL Filtering to Paid

I am currently using a trial of the URL filtering license and have made the purchase for the full license.  Does anyone happen to know if it's a seamless transition from the expired trial to the full license with out any interruption?  To initially enable the service I had to reboot my firewalls one at a time, It doesn't make sense that I'd have to do that again, but wondered what the experience was in this transition.

L7 Applicator

Re: Transitioning from Trial URL Filtering to Paid

Hello Cmateam,

It should be in a seamless manner.

Please refer below mentioned DOC:

What Happens When Licenses Expire?

Is the Firewall Automatically Aware of License Renewals?

Thanks

L5 Sessionator

Re: Transitioning from Trial URL Filtering to Paid

Hello cmateam,

The transition should be pretty smooth and a reboot is not required.

1.) You can delete the expired license using :

> delete license key <key name for the the expired license>

2.) From the web interface, you can Fetch the license under Device > License tab.This should fetch the purchased licenses with new expiration key.

If you are using PAN-DB, you activate it using the following documents:

How to Install and Activate PAN-DB for URL Filtering

Hope that helps!

Thanks and regards,

Kunal Adak

L6 Presenter

Re: Transitioning from Trial URL Filtering to Paid

For valid license upgrade you dont have to reboot firewall, Devce > License > Retrieve key from Server, will pull new licenses on firewall.

Apply New auth code to Serial No.

L3 Networker

Re: Transitioning from Trial URL Filtering to Paid

Thanks - So I'm a little confused.  Is the BrightCloud only use for the trail license, and then when you actually buy its a PAN-DB license for content filtering? I don't see any options under the Trail license to select the Database Download location. This is what I see.

URL_Trial.JPG

This was in reference to your link: How to Install and Activate PAN-DB for URL Filtering

L5 Sessionator

Re: Transitioning from Trial URL Filtering to Paid

Hello,

Have you fetched the new licenses for PAN-DB? That option would only populate once the licenses are fetched.

Here is the document that explains the same:

How to Move from PAN-DB to BrightCloud on the Palo Alto Networks Device

Hope that helps!

Thanks and regards,

Kunal Adak

L1 Bithead

Re: Transitioning from Trial URL Filtering to Paid

Those are two separate options for URL filtering. The BrightCloud license utilizes the BrightCloud URL database whereas the PAN-DB license utilizes a database architecture provided directly from Palo Alto. Either will provide similar URL filtering functionality, but both work a little bit differently.

Since PAN-DB is fully owned and managed by Palo Alto Networks, it provides better integration with WildFire. It allows for a single point of contact for all support issues. The cached URL database on the firewall is dynamic and tailored to the actual traffic seen within each environment, resulting in quicker URL lookups. It also remains in-sync with the cloud at all times, eliminating the need for daily database updates.

Hope this helps!

L3 Networker

Re: Transitioning from Trial URL Filtering to Paid

Thanks! We just purchased the license and will hopefully implementing it this weekend. So this explains why I don't see that option. :smileyhappy:  All this is helpful - it sounds like going the PAN-DB route is good for our situation. Thanks all!

L7 Applicator

Re: Transitioning from Trial URL Filtering to Paid

I'm not sure, but it sounds like you did the demo on Bright Cloud and purchased PanDB.  If that is the case your original question about the reboot is then yes.

You will be turning off Bright Cloud and activating Pan-DB.  See this setup process for the Pan-DB

PAN-DB Activation/Installation

There are also subtle differences in the category names you will need to note in converting your rules and profiles.

BrightCloud to PAN-DB Category Mapping

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
L3 Networker

Re: Transitioning from Trial URL Filtering to Paid

You are correct. I just installed the license and its wanting me to activate - which can't be done until the appliance is in a suspend state.  Thanks!

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!