08-30-2021 08:39 AM
Hello.
I hope you can help me. I currently have a customer who wants to leave one of their old APs unlicensed as a VPN concentrator. My question is the following:
What functions would be active in the PA?
For GP I checked this KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClG0CAK in which it says that it allows "Split tunneling based on destination domain, client process, and video streaming application". but will it be the same by IP?
The idea is to tell the client the risks of leaving the NFG that way.
Thanks for your help
08-30-2021 09:42 AM
Without a license, you ARE able to split tunnel/create access routes based off IP addresses manually. License is required for picking domains/applications.
08-30-2021 12:42 PM
If we talk about l7 inspection... this feature will be active after the support licence expire?
08-30-2021 01:23 PM
App-ID will work without a license, however, with no support license you will not be able to pull dynamic updates (application signature updates)
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
