Advanced URL License not showing in Panorama?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Advanced URL License not showing in Panorama?

L3 Networker

I recently renewed some licensing on firewalls.  The URL Filtering subscription changed to Advanced URL Filtering.  On the firewall, under licensing, everything shows fine.

 

In Panorama, for those firewalls, I noticed after doing a refresh, Pano shows them as not having any URL Filtering license.  Is anyone seeing something similar?

 

MikeC_0-1640794406956.png

 

10 REPLIES 10

Cyber Elite
Cyber Elite

Thank you for the post @securehops

 

Have you installed any application content update in Panorama? Advanced URL Filtering License has a dependency on content update. The version 8390-6607 and higher has to be installed. I am not sure whether this could prevent Panorama from fetching the license, but if you have not installed latest content or have installed older than 8390-6607, I would try to install it from: Panorama > Dynamic Updates > Applications and Threats, then refresh license status from: Panorama > Device Deployment > Licenses > Refresh.

 

Kind Regards

Pavel

Help the community: Like helpful comments and mark solutions.

Hi @PavelK 

 

Yes, I am running most recent content update.  I've tried the refresh already but no luck there.   I have a ticket open with support on this.  I'll post back their findings 

Hi,

Even it is not same as your issue, I have some cases related to Adv. URL Filtering.

Did you try to delete expired PAN-DB (=URL4) license from you device and see how it goes?

Currently, PAN have an issue when you have both expired PAN-DB subscription and valid Adv. URL Filtering at same time.

You might need to request to delete PAN-DB from license server (we (I mean 'users') can't delete it)

L0 Member

Hi MIke, experiencing the same issue, what did you do to resolve?

Thanks.

@FunkyD 

 

I meant to come back and post the solution.  I haven't done it yet but the fix is to upgrade Panorama above 10.x.   In those higher versions, there is a new column for Adv URL, which 9.x doesn't have.

 

Pretty silly on Palo's part, but this is what they are saying

 

EDIT:  it is actually 10.1.x that resolves this

Hi MikeC,

 

did they gave any specific document or the release notes which says the particular version has this change, Because one of our customer wanted the document. 

Snow

@SubaMuthuram 

 

It is actually 10.1.x,  

 

MikeC_1-1644605141822.png

 

Cyber Elite
Cyber Elite

Hi @securehops ,

 

What do the licenses show on the firewalls?  Panorama may be accurately showing the license status on the firewalls, in which case it is not a Panorama issue.  This is a common issue when upgrading from URL Filtering to Advanced URL Filtering, and we have seen and are going to see lots of posts on this issue.  Check out SeanDeHarris's response in this post -> https://live.paloaltonetworks.com/t5/threat-vulnerability-discussions/pan-db-vs-advanced/m-p/463874#....

 

I also had to do steps 1-3 for a customer of mine to fix the problem.  The steps in the KB article did not work.

 

Thanks,

 

Tom

Help the community: Like helpful comments and mark solutions.

@TomYoung 

 

The issue is related to Panorama.  Any Panorama version under 10.1, does not have the column for ADV licensing. 

 

 

So yes, Panorama is showing accurate licensing for those firewalls with the old licensing, but until we upgrade to Panorama 10.1, we will not see accurate licensing for the firewalls with Adv

 

Cyber Elite
Cyber Elite

Thanks @securehops !

 

I was looking at your 2nd screen shot with it fixed and thought you wanted A-URL to be green.

 

Tom

Help the community: Like helpful comments and mark solutions.
  • 6794 Views
  • 10 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!