DNS Security

Reply
L1 Bithead

DNS Security

Hello,

Is there any way to turn off the following information after commit on 9.0.1 with Anti-Spyware Profile attached to Security Policy?

I can't delete Palo Alto Networks DNS Security option from Anti-Spyware Profile.

 

Warnings

  • Warning: No Valid DNS Security License
  • (Module: device)

 

Lukasz

L2 Linker

Re: DNS Security

Try delete it from CLI:

 

delete profiles spyware XXXXX botnet-domains lists default-paloalto-cloud 

 

 

L1 Bithead

Re: DNS Security

I opened a case and it was escalated developers

L0 Member

Re: DNS Security

Thank you, this works for me.

 

You can't delete it from the default anti-spyware profiles, so if you are using them the warning will appear everytime you commit.

I cloned both of them (default and strict). Then I delete that "default-paloalto-cloud" entry from these new profiles and to finish I ensured to change the defaults with the new ones in all the Profiles Groups, Security Policies, etc...

L1 Bithead

Re: DNS Security

I got the confirmation from Engineering that it is expected not to be able to delete default DNS options from GUI. You can use CLI. Fix for the warnings during commit is targeted to be released on 9.0.4

L1 Bithead

Re: DNS Security

I am trying to do this in Panoramma using the following command but get an error. The profile I am trying to delete it from is one I created and not a predefined one.

 

delete device-group [device-group] profiles spyware [spyware-profile] botnet-domains lists default-paloalto-cloud

 

No object to delete in delete handler

 

 

Highlighted
L0 Member

Re: DNS Security

Hi Rmarlow,

 

Is it possible that this object is in use? Or maybe shared?
Try cloning this object and deleting the profile "default-paloalto-cloud". If this works, it may be because the original object is referenced.

L1 Bithead

Re: DNS Security

Thanks for the quick response.

 

Looking at it again this profile was located in shared so I needed to use the following.

 

delete shared profiles spyware [spyware-profile] botnet-domains lists default-paloalto-cloud

 

Many Thanks

L1 Bithead

Re: DNS Security

Hi Team 

 

is it possible to share the command to delete the Antispyware profile   

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!