Automating upgrade from PAN-DB license to advanced URL licensing

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Automating upgrade from PAN-DB license to advanced URL licensing

L2 Linker

Hello,

 

 In a previous post in the LiveCommunity forums ( PAN DB vs Advanced ) @SeanDeHarris advised how he manually solved an issue with updating URL Filtering from PAN-DB to Advanced URL filtering usin the article LICENSE ERRORS WHEN MIGRATING FROM PAN-DB URL4 TO ADVANCED URL FILTERING :

 

Here's the steps taken to fixed the PAN-DB lic issue in PANOS 8.1 by the following steps, and A-URL subscription can be shown in Web

1)            Manually download the A-URL license file from the customer support portal (Fetch from the WebUI not working)
2)            Install the A-URL lic key on your firewall (thru WebUI)
3)            Use CLI to remove the old existing (PAN-DB) license

 

 

My question is - what is a good way to automat this as we have a customer with over 150 devices and it just doesn't make sense to fix each device maually ?

 

 Thank you in advance,

Kobi


Please mark helpful responses, so others know as well
1 accepted solution

Accepted Solutions

L5 Sessionator

Hi @Kobiher,

 

In your choice of scripting/programming language, you could perform the steps from the KB article programmatically for each firewall:

 

Screenshot 2022-02-17 at 11.24.59.png

 

  • 1) Use the PAN-OS API to fetch all updated licences:

 

https://{{host}}/api?key={{key}}&type=op&cmd=<request><license><fetch/></license></request>

 

 

  • 2) Use the PAN-OS API to delete the PAN-DB license key files:

 

https://{{host}}/api?key={{key}}&type=op&cmd=<delete><license><key>PAN_DB_URL*</key></license></delete>

 

 

  • 3) Use the PAN-OS API to perform a "commit force":

 

https://{{host}}/api/?key={{key}}&type=commit&cmd=<commit><force></force></commit>

 

 

  • 4) Use the PAN-OS API to check the status of URL filtering:

 

https://{{host}}/api?key={{key}}&type=op&cmd=<show><url-cloud><status/></url-cloud></show>

 

 

 

Hope this helps

Help the community: "Like" helpful comments, and click "Accept as Solution" if you found your answer 🙂

View solution in original post

1 REPLY 1

L5 Sessionator

Hi @Kobiher,

 

In your choice of scripting/programming language, you could perform the steps from the KB article programmatically for each firewall:

 

Screenshot 2022-02-17 at 11.24.59.png

 

  • 1) Use the PAN-OS API to fetch all updated licences:

 

https://{{host}}/api?key={{key}}&type=op&cmd=<request><license><fetch/></license></request>

 

 

  • 2) Use the PAN-OS API to delete the PAN-DB license key files:

 

https://{{host}}/api?key={{key}}&type=op&cmd=<delete><license><key>PAN_DB_URL*</key></license></delete>

 

 

  • 3) Use the PAN-OS API to perform a "commit force":

 

https://{{host}}/api/?key={{key}}&type=commit&cmd=<commit><force></force></commit>

 

 

  • 4) Use the PAN-OS API to check the status of URL filtering:

 

https://{{host}}/api?key={{key}}&type=op&cmd=<show><url-cloud><status/></url-cloud></show>

 

 

 

Hope this helps

Help the community: "Like" helpful comments, and click "Accept as Solution" if you found your answer 🙂
  • 1 accepted solution
  • 2401 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!