Anti-Virus section is not visible on PA-TAC Team

[tamilvanan]

 Hi Team,

We have 3 PA-410 installed with PAN-OS 10.1.3. We have Advanced threat prevention license installed on the firewall and we are not able to see the Anti-virus update on the firewall .

The firewall is able to communicate with the Update server, License is installed on the firewall, App and threat update is also installed on the firewall. 

Restarted the management plane and firewall but still we are not able to see the Anti-virus section on the firewall. 

Regards,

Tamilvanan

[LukaZupancic1]

Exactly same problem with mine PA-410. Even tried manual install, downloaded AV definition and it does not allow me to install them.

Few more things I find a bit strange:

- Palo Alto's dynamic URL lists are missing in configuration (it should be there as our firewall is licensed)

- When editing Security Profiles, I can see message at the bottom of the screen saying: "Threat Prevention License required for antivirus, anti-spyware, and vulnerability protection to function."
As with OP, we have valid license via professional bundle.

Edit: PAN-OS 10.1.4-h4, Application/Threat version: 8537-7273

[tamilvanan]

Raised an TAC case for this issue. Will see what happens. Also do you have threat prevention license or Advanced threat prevention license. 

For boxes only with advanced threat prevention license we are facing this issue. Not for boxes with threat prevention license.

[shoot0267]

I have the same problem on a PA-220 lab unit with 10.0.9 code.  I just recently got a renewed lab license that included the Advanced Threat Prevention and Advanced URL filtering and others.  I am also not seeing the Antivirus section section in the Dynamic Updates web page.  I did verify that Antivirus updates were still updating but just not showing in the Web GUI.  I also have a TAC case opened for this problem.

[LukaZupancic1]

Hi, yes same for me. Have Advance Threat license. Anyways I was able to get trial for "Threat Prevention" from our distributor so I'm at least able to continue with implementation.

[reaper]

 regular threat protection installed before you added the Adv. TP ? if so, go into CLI and delete the regular threat prevention license

[LukaZupancic1]

No. Advance Threat Protection was installed first. After not being able to install AV definitions our local support got me trial licence for "Threat Prevention". So now I was able to install AV definitions.

[shoot0267]

In my case, I had regular Threat Prevention first and with renewal got the Advanced license.  I had to delete the old Threat Prevention and URL Filtering licenses from the CLI command.  It appears to be a Web GUI issue.  I have seen a couple of cases opened similar to this problem.  In particular, PAN-189214 was discovered in 10.2.  and PAN-172274 is related to Advanced URL filtering licenses in 10.1.4

[Pras]

I have the same issue, no Antivirus section in the GUI, whereas this is a totally new box (no licenses installed previously) and spoke with TAC to reissue the authcodes.(whidch was done no the issue still persists)
No solution yet.

[KFleshner]

I had this problem and the solution was to download and update the Applications and Threats to the latest version.  After the latest version is installed, click the Check Now button at the bottom of the page, and the Antivirus section will appear in the GUI. 

[tamilvanan · Accepted solution]

Hi Folks,

This is an Pan-OS bug and confirmed by the  TAC team. Had provided the document link below:

LICENSING ISSUES RELATED TO ATP IN PAN-OS:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004NOKCA2&lang=en_US%E2%80%A...