App-ID

[jaah1231]

Good Morning,

I am currently working with a PA 3220 firewall that has no licenses. Does App-ID work right out of the box without a license? On security policies I see under the ‘apps seen’ column it is identifying apps. If you use the apps found under the apps seen column will it work? Can you update apps without a license? I was a last minute addition to this project and am trying to get up to speed. Thank you!

[PavelK · Accepted solution]

Hello @jaah1231

based on my experience from scenario where Firewall did not have any support license nor subscription, it is still possible to download and install dynamic updates that are used to update app-id, however the update will only include application update not threat signatures. The official explanation is in documentation: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/software-and-content-updates/app-and-th...

The behavior you are seeing is expected and all applications are being identified through security policies.

Kind Regards

Pavel

[jaah1231]

Thank you @PavelK !