I have a bunch of PA440s and some of them cannot be upgraded as I keep getting an "An active license is required for this feature" message when clicking on Check Now under Device > Software. Device is correctly licensed and activated on the support portal, NTP is activated and sync'd. Dynamic Updates can be retrieved from the Cloud but PAN-OS cannot.
(I have already tried clicking on "Retrieve license keys from license server " with no success)
Current PAN-OS version: 10.1.3
Device Certificate Status: Valid
Anyone having the same problem?
currently have a call logged for this. accidently deleted a profile for "Software NGFW Credits" that had our Panorama and log collectors on it. Have been able to get support to reattach serials (with cpuid and uuid to be able to be migrated). we migrated all serials to another deployment profile for management and everything took except our primary panorama. Same message as above. Shows as licensed ok and yes can get app updates etc just not panOS updates. Awaiting what fix might be needed.....running 10.1.6 here....
Fix for our situation with the new Software NGFW credits and Deployment profiles and active license message (once Palo fixed restoring serials in backend - with matching UUID and CPUID and we attached again to another deployment profile that was active) was to run the software check from the CLI not from the GUI.
This fixed up the state that Panorama was in despite license showing as ok after license update and GUI throwing the non active license message in the software tab.
Hope this helps someone.....try CLI update first post license checks and then GUI post this if the CLI looks ok.
By default it will use the management port to try and grab the licenses and updates etc. Does the traffic log show why its getting denied? Could be a lot of things, please check the configuration for the following: valid DNS servers, valid time servers, traffic allowed out the management port to the internet, you are bypassing ssl decryption.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!