Software NGFW renewal, more credits needed for same deployment profile

[nwmgt-iSOFTNL]

Hi all,

Last year I purchased 30 Software NGFW Credits for my PA-VM's in AWS. Of which I used 29.54 credits in a Deployment Profile.

This year I purchased again 30 credits to renew this Deployment Profile. However, I got a message:

'Failed to Renew Deployment Profile, Please try again or contact Support'

Then I used the credit estimator, and to my astonishment, the amount of credits needed for the same Deployment Profile is 30.27!

You might say well that's normal, prices increase. But the price increase is already in the price per credit: 23% increase compared to last year!

Neither Palo Alto or our ASC Partner informed me of this. Now I have a hard time to fix this before the licenses expire.

Does anyone have similar experiences, or tips to solve this?

Regards,

Albert Bruggeman

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

[BPry]

@nwmgt-iSOFTNL,

Do you need the DNS subscription that's going to be tac'd on by default? Assuming your using the default subscriptions dropping the DNS subscription can drop you down to 28.77/28.98 for what I'm assuming is a simple 4 vCPU deployment and get you up and running.

Going forward I would always recommend using the credit estimator prior to making the purchase though. Your partner doesn't know how your actually using these credits unless they care to look, so they're going to assume that you've already used the estimator to pick what you want. 

[nwmgt-iSOFTNL]

Hi, thank you for your reply. Do you mean drop a subscription from the existing deployment profile (how?), or deactivate a license in the PA-VM?

I already made a new deployment profile with 1 less subscription. But I cannot link my running PA-VM's to that.

Then I tried to deactivate a license on 1 of the running PA-VM's, but this gives:

Server error : Cannot deactivate license key DNS_Security_2021_09_29.key which is part of bundle without parent_id attribute.

So this license is on both firewalls in the cluster. How do I deactivate this?