- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
07-23-2021 09:55 AM
Hi
I did an self requested Eval of Advanced URL Filtering on a PA-220@10.1.x
When the trial expires, the URL filter (or its license) is broken. Even if there is a legacy URL Filter license available.
XX@pan> show running url-license
URL license expired
License entry:
Feature: Advanced URL Filtering
Description: Palo Alto Networks Advanced URL License
Serial: XX
Authcode: XX
Issued: June 16, 2021
Expires: July 16, 2021
Expired?: yes
I can delete the license token from the firewall
delete license key Advanced_URL_Filtering_2021_06_16_IXX.key
The URL filter is working then (with the normal url license)
XX@pan> show running url-license
URL license is valid
But as soon the firewall fetches the licenses the expired Adv URL has higher priority and the URL filter stops.
I think i can't delete the Trial license in the CSP.
Does I really need to open a license case for this.
Also it's pretty ugly in a PoC situation...
Regards
07-23-2021 11:24 AM
Unfortunately you do need to contact support to have them remove the license file on the backend. Simply opening a support ticket is how I've dealt with this and since it's just an administrative task it's usually handled within a couple hours.
That being said the trial license being expired shouldn't be causing your PA-220 to register to that license, and it should be falling back to the normal license without any issue. I've got the same thing on one of my LAB units and it successfully failed back to the normal license once the eval license expired.
07-23-2021 11:24 AM
Unfortunately you do need to contact support to have them remove the license file on the backend. Simply opening a support ticket is how I've dealt with this and since it's just an administrative task it's usually handled within a couple hours.
That being said the trial license being expired shouldn't be causing your PA-220 to register to that license, and it should be falling back to the normal license without any issue. I've got the same thing on one of my LAB units and it successfully failed back to the normal license once the eval license expired.
07-25-2021 11:12 PM
thanks for sharing your experience @BPry
03-23-2022 04:12 PM
For anyone looking for how to delete a trial license and avoid it to be fetched again, you can proceed like that.
1. At your device:
request license fetch
request licence deactivate key features DNS_xxxxxxxx.key mode manual
show license-token-files name dact_lic.xxxxxxxx.tok
copy the content and at license site click on Deativate License(s) and paste the content on text field.
Voilá. Good Bye expired trial license forever.
You cant request another trial license of same feature, but it wont came back at your firewall.
11-30-2022 06:53 PM
this is what support tried to have me do as well and it didn't work... i'm waiting patiently for them to remove the trial license as I originally requested.
11-30-2022 06:57 PM
request license deactivate key features PAN_DB_xxxxxxxxxx.key mode manual
Server error : Failed to generate encrypted token
11-30-2022 07:04 PM
ok sorry, ran it again and it worked , successfully removed the PAN-DB license, and now ONLY the Advanced URL license is showing.... still says "license required for URL filtering to function"
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!