DNS Security

[lcelinski]

Hello,

Is there any way to turn off the following information after commit on 9.0.1 with Anti-Spyware Profile attached to Security Policy?

I can't delete Palo Alto Networks DNS Security option from Anti-Spyware Profile.

Warnings

• Warning: No Valid DNS Security License
• (Module: device)

Lukasz

[aobszynski · Accepted solution]

Try delete it from CLI:

delete profiles spyware XXXXX botnet-domains lists default-paloalto-cloud 

[lcelinski]

I opened a case and it was escalated developers

[aritzposada]

Thank you, this works for me.

You can't delete it from the default anti-spyware profiles, so if you are using them the warning will appear everytime you commit.

I cloned both of them (default and strict). Then I delete that "default-paloalto-cloud" entry from these new profiles and to finish I ensured to change the defaults with the new ones in all the Profiles Groups, Security Policies, etc...

[lcelinski]

I got the confirmation from Engineering that it is expected not to be able to delete default DNS options from GUI. You can use CLI. Fix for the warnings during commit is targeted to be released on 9.0.4