I recently renewed some licensing on firewalls. The URL Filtering subscription changed to Advanced URL Filtering. On the firewall, under licensing, everything shows fine.
In Panorama, for those firewalls, I noticed after doing a refresh, Pano shows them as not having any URL Filtering license. Is anyone seeing something similar?
Thank you for the post @securehops
Have you installed any application content update in Panorama? Advanced URL Filtering License has a dependency on content update. The version 8390-6607 and higher has to be installed. I am not sure whether this could prevent Panorama from fetching the license, but if you have not installed latest content or have installed older than 8390-6607, I would try to install it from: Panorama > Dynamic Updates > Applications and Threats, then refresh license status from: Panorama > Device Deployment > Licenses > Refresh.
Even it is not same as your issue, I have some cases related to Adv. URL Filtering.
Did you try to delete expired PAN-DB (=URL4) license from you device and see how it goes?
Currently, PAN have an issue when you have both expired PAN-DB subscription and valid Adv. URL Filtering at same time.
You might need to request to delete PAN-DB from license server (we (I mean 'users') can't delete it)
I meant to come back and post the solution. I haven't done it yet but the fix is to upgrade Panorama above 10.x. In those higher versions, there is a new column for Adv URL, which 9.x doesn't have.
Pretty silly on Palo's part, but this is what they are saying
EDIT: it is actually 10.1.x that resolves this
Hi @securehops ,
What do the licenses show on the firewalls? Panorama may be accurately showing the license status on the firewalls, in which case it is not a Panorama issue. This is a common issue when upgrading from URL Filtering to Advanced URL Filtering, and we have seen and are going to see lots of posts on this issue. Check out SeanDeHarris's response in this post -> https://live.paloaltonetworks.com/t5/threat-vulnerability-discussions/pan-db-vs-advanced/m-p/463874#....
I also had to do steps 1-3 for a customer of mine to fix the problem. The steps in the KB article did not work.
The issue is related to Panorama. Any Panorama version under 10.1, does not have the column for ADV licensing.
So yes, Panorama is showing accurate licensing for those firewalls with the old licensing, but until we upgrade to Panorama 10.1, we will not see accurate licensing for the firewalls with Adv
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!