What happens when the SD-WAN license on firewall expires?

[Tinkani]

Hello,

I not found any information about the SD-WAN license on firewall expires.

[JayGolf]

Hi @Tinkani ,

For Palo Alto license expiration, some subscriptions continue to function in a limited capacity, and others stop operating completely.The grace period for Prisma SD-WAN Subscriptions is 30 days. 

[SachinGargNTT]

Can you tell me , what is limited capacity?

[ichakarov]

Have you found the answer to this question?

[Tinkani · Accepted solution]

This is what I discovered: https://docs.paloaltonetworks.com/sd-wan/3-2/sd-wan-admin/configure-sd-wan/set-up-panorama-and-firew...

If the SD-WAN license expires, the following occurs:

• A warning displays when you Commit any configuration changes but no commit failure occurs.
• Your SD-WAN configuration no longer functions but is not deleted.
• Firewalls no longer monitor and gather link health metrics and stop sending monitoring probes.
• Firewalls no longer send app and link health metrics to Panorama.
• SD-WAN path selection logic is disabled.
• New sessions round robin on the virtual SD-WAN interface.
• Existing sessions remain on the specific link they were on when the license expired.
• If an internet outage occurs, traffic follows using standard routing and ECMP if configured.