No valid URL filtering license warnings on firewalls that are not supposed to have the license

[Rich.H]

I have several firewalls which use URL filtering and are licensed for it, and several that do not.  In Panorama, all the firewalls that do not use it constantly have the Warning:

If I click in to the details I see:

• . Warning: No valid threat content package exists
• . Warning: No valid Antivirus content package exists
• . vsys1
• . Warning: in vsys1, 3 warnings for profiles and profile groups: No valid URL filtering license,
• . (Module: device)

How do I prevent this?  it is potentially masking legitimate problems. 

[reaper · Accepted solution]

this means you are pushing URL filtering profiles to the not-licensed firewalls as well

you can solve this by splitting licensed and non-licensed devices into device groups so the URL filtering profiles are not pushed to the firewalls without license, or create double rules in the same device group and use 'target' to assign URL filtering enabled rules only to licensed firewalls

[Rich.H · Accepted solution]

Thanks,  I managed to find the rogue rule, which cleared the error on the Policies last commit.  To clear the Template last commit state warning, I had to remove the Dynamic Updates for Threats and Antivirus for those firewalls.