Impact of installing licenses on firewall in production

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Impact of installing licenses on firewall in production

L2 Linker
Hi
As the subject suggests, I have 3020 for which license have to be installed after being in production. What's the impact on traffic in such a case? I have noticed the VM firewall takes a restart so...
1 accepted solution

Accepted Solutions

The instructions are the same on 7.1. Most of the documentation will be the same, you can just change the URI to reflect the version you're on:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/getting-started/activate-licenses-an...

 

Nothing is mentioned about impact or interruption because it doesn't interrupt anything. It's not really feasible to list all the things that installing a license does *not* do.

 

You mentioned you're running 7.1.5 - that version was released almost 2 years ago (October 3, 2016), and has several significant and critical vulnerabilities. I'd highly encourage you to upgrade to 7.1.18 or 7.1.19.

 

If you genuinely are concerned about impact, you're putting your infrastructure at risk by using that old of a code revision unless you've taken steps to mitigate all of the issues. 

https://securityadvisories.paloaltonetworks.com/

 

View solution in original post

3 REPLIES 3

L7 Applicator

Good news! You won't need to restart the firewall to apply new licenses:

https://www.paloaltonetworks.com/documentation/81/pan-os/pan-os/getting-started/activate-licenses-an...

 

The only action needed is a commit, but even that is only required for a Wildfire license if you want to forward advanced file types.

awesome

although the link you shared is for 8.1 and i am on 7.1.5

secondly it doesnt mention impact or interrruption anywhere

The instructions are the same on 7.1. Most of the documentation will be the same, you can just change the URI to reflect the version you're on:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/getting-started/activate-licenses-an...

 

Nothing is mentioned about impact or interruption because it doesn't interrupt anything. It's not really feasible to list all the things that installing a license does *not* do.

 

You mentioned you're running 7.1.5 - that version was released almost 2 years ago (October 3, 2016), and has several significant and critical vulnerabilities. I'd highly encourage you to upgrade to 7.1.18 or 7.1.19.

 

If you genuinely are concerned about impact, you're putting your infrastructure at risk by using that old of a code revision unless you've taken steps to mitigate all of the issues. 

https://securityadvisories.paloaltonetworks.com/

 

  • 1 accepted solution
  • 2890 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!