02-17-2023 02:00 PM
I found the solution to the "No Valid DNS Security License" error caused by the Anti-Spyware profile. In addition to changing the POLICY ACTION to allow and PACKET CAPTURE to disable, you need to change the LOG SEVERITY to none. I hope this helps someone. (This worked successfully on PAN-OS 10.2.2 & 10.2.3-h2)