Transitioning from Trial URL Filtering to Paid

[cmateam]

I am currently using a trial of the URL filtering license and have made the purchase for the full license.  Does anyone happen to know if it's a seamless transition from the expired trial to the full license with out any interruption?  To initially enable the service I had to reboot my firewalls one at a time, It doesn't make sense that I'd have to do that again, but wondered what the experience was in this transition.

[HULK]

Hello Cmateam,

It should be in a seamless manner.

Please refer below mentioned DOC:

What Happens When Licenses Expire?

Is the Firewall Automatically Aware of License Renewals?

Thanks

[kadak · Accepted solution]

Hello cmateam,

The transition should be pretty smooth and a reboot is not required.

1.) You can delete the expired license using :

> delete license key <key name for the the expired license>

2.) From the web interface, you can Fetch the license under Device > License tab.This should fetch the purchased licenses with new expiration key.

If you are using PAN-DB, you activate it using the following documents:

How to Install and Activate PAN-DB for URL Filtering

Hope that helps!

Thanks and regards,

Kunal Adak

[hshah]

For valid license upgrade you dont have to reboot firewall, Devce > License > Retrieve key from Server, will pull new licenses on firewall.

Apply New auth code to Serial No.

[cmateam]

Thanks - So I'm a little confused.  Is the BrightCloud only use for the trail license, and then when you actually buy its a PAN-DB license for content filtering? I don't see any options under the Trail license to select the Database Download location. This is what I see.

This was in reference to your link: How to Install and Activate PAN-DB for URL Filtering

[kadak]

Hello,

Have you fetched the new licenses for PAN-DB? That option would only populate once the licenses are fetched.

Here is the document that explains the same:

How to Move from PAN-DB to BrightCloud on the Palo Alto Networks Device

Hope that helps!

Thanks and regards,

Kunal Adak

[jtyler]

Those are two separate options for URL filtering. The BrightCloud license utilizes the BrightCloud URL database whereas the PAN-DB license utilizes a database architecture provided directly from Palo Alto. Either will provide similar URL filtering functionality, but both work a little bit differently.

Since PAN-DB is fully owned and managed by Palo Alto Networks, it provides better integration with WildFire. It allows for a single point of contact for all support issues. The cached URL database on the firewall is dynamic and tailored to the actual traffic seen within each environment, resulting in quicker URL lookups. It also remains in-sync with the cloud at all times, eliminating the need for daily database updates.

Hope this helps!

[cmateam]

Thanks! We just purchased the license and will hopefully implementing it this weekend. So this explains why I don't see that option. :smileyhappy:  All this is helpful - it sounds like going the PAN-DB route is good for our situation. Thanks all!

[pulukas]

I'm not sure, but it sounds like you did the demo on Bright Cloud and purchased PanDB.  If that is the case your original question about the reboot is then yes.

You will be turning off Bright Cloud and activating Pan-DB.  See this setup process for the Pan-DB

PAN-DB Activation/Installation

There are also subtle differences in the category names you will need to note in converting your rules and profiles.

BrightCloud to PAN-DB Category Mapping

[cmateam]

You are correct. I just installed the license and its wanting me to activate - which can't be done until the appliance is in a suspend state.  Thanks!