What are the subscription licenses happened if the hardware license is expired?

[paloalto.netfos]

Dear all,

As the title, for an example, I had a box and it's hardware license (as 'Premium Partner Support" license) is expired now, but the "Threat Prevention" or "Wildfire" license are available, what the box will be?

- We can also update the signatures and the functions work as before ?

- We cannot update the signatures any more, but the functions work as before ?

- We cannot update the signatures any morre, and the functions stop working ?

Which one is possible or correct action before only the hardware license is expired? Is there any documentation discuss about it? please provide me the documentation or url link if have. I'm so appreciated about it.

Thanks,

Sample Wu

[panos]

Without support you cannot update your Panos, you cannot open a case, You cannot also start an RMA when a hardware fail happens.

So it is very important to have that license.But you will be able to use threat and wildfire signatures indeed until expire time.

[panos]

What Happens When Licenses Expire?

https://live.paloaltonetworks.com/docs/DOC-6103

[paloalto.netfos]

Hello panos,

Thanks for your prompt reply, I have a question I want to make it clear after reading the link documents you provide.

As the previous environment : The Threat Prevention license is available, but the Support license is expired.

If the Support license is expired, I knew the softeware update will be not downloaded and install, but I didn't know the action of the dynamic updates.

- I can download and install the dynamic updates, and the TP database is workable

- I cannot download and install the dynamic updates, but the latest TP database is still workable

- I cannot download and install the dynamic updates, and the lastest TP database also stop working

Which one is right? In my understanding, it should be first, or not?

Thanks,

Sample Wu

[panos]

yes it should be first.

[paloalto.netfos]

Hello panos,

Thanks so much. Because this question is a customer's question, so I must confirm it. So that, I'm sorry but I must double confirm with you, are you sure ? or is there any document discuss about this ?

Thanks,

Sample Wu

[panos]

I did not replicate the situation but it is clear for each license description; it should be as you mentioned.When downloading dynamic updates for threats; it is checking your threat license.

You can ask your SE to have an official answer.

[paloalto.netfos]

Hello panos,

I got it, thanks again.

Sample Wu

[paloalto.netfos]

Hello all,

I have another question .

As this example : The Support license is expired, but the Threat Prevention license and the Wildfire license is available.

In dynamic updates :

- TP updates includes Threat and Virus databases, but the Threat should be updated with Application.

- Wildfire update can be update itself.

So it should have the following results :

- Because the Support license is expired and the Threat updates should be downloaded with Application updates, so that I cannot download the Application database, and then I shouldn't download the "app+threat" updates, because they are combined and downloaded with each other or only "app" updates.

- The Wildfire update still can be downloaded and installed.

Are they right?

Thanks,

Sample Wu

[panos]

That is not true.You can download app updates when support license is expired.So you have threat license, you will download app+threats also.

[Mystique]

If you have valid threat license, then you should be able to download panupv2-all-contents package (which contains both apps + threats). If you do not have threat license, then you will be able to download only panupv2-all-apps (which contains only application updates)

[paloalto.netfos]

Hello panos,

Thank you so much, I understand now.

Thanks,

Sample Wu