- Palo alto licensing portal (Support portal > Case Management) Retrieve license keys from license server —Use this option if you activated your license on the Customer Support portal. If you see any issues here: Select the failure to see what needs to be fixed. Essentials and Strata Cloud Manager Pro are not yet available to activate in customer support portal (CSP) accounts that already have: Strata Logging Service with sized storage, AIOps for NGFW Free or In the Support Portal Change the Account Seletor to 132205 - Palo Alto Networks - Professional Services On the Support Portal Page on the left side go to Assets -> Software NGFW Credits Go to youe Deployment Profile After you receive an email from Palo Alto Networks identifying the AIOps for NGFW Premium; license you're activating, click the email link to begin the activation process. It not only contains confidential activation-related data but if you still have unused IoT Security licenses after completing the onboarding process, you can click the Activate button in the email again to repeat the process and activate more firewalls later. Sign in here if you are a Customer, Partner, or an Employee. An Enterprise Agreement:ELA is a hardware licensing agreement that assigns five CDSSs – Advanced Threat Protection, DNS Security, PAN-DB URL Filtering, Go to Panorama > Licenses, click "Retrieve license keys from license server. License information. When a license is within 30 days of expiration, a warning message displays in the system log daily until the subscription is renewed or expires. 5 5. To create your account, you need to go to Palo Alto Support portal and follow the instructions. In the case of non-persistent VDI, the Cortex XDR agent registers with Cortex XDR as soon as the user logs in to the endpoint. Activate and Install Licenses for Cloud Managed Prisma Access; Activate and Install Licenses for Panorama Managed Prisma Access; Prisma Cloud: Get Prisma Cloud from the Palo Alto Networks Marketplace; Get Prisma Cloud from the AWS Marketplace; Prisma Cloud License Types; SaaS Security: SaaS Security License Types; Set up Data Security (SaaS To leverage the Prisma SD-WAN functionality, you must activate the Prisma SD-WAN Bandwidth or Data Center license using the magic link that you received from Palo Alto Networks. Before you can register a firewall If you want to use GlobalProtect for secure remote access or VPN, no license is needed. 5 3. You can Set Up Access to the GlobalProtect Portal on an interface on any Palo Alto Networks next-generation firewall. . When prompted, enter the Authorization Code and then click OK. After you receive an email from Palo Alto Networks identifying the new product license you're activating, including all your add-ons and capacities, use the activation link to begin the activation process. Any Panorama. The Support Portal offers information to help you manage your account, assets, and groups, as well as help you get the most from Palo Alto Networks You can convert an IoT Security license on a firewall from trial to prod, but not from eval to prod. Manage Deployment Profiles Using the Licensing API; Create a Deployment Profile Using the Licensing API; (Customer Support Portal) Add End-Customer Information for a Registered VM-Series Firewall (API) Palo Alto Networks Firewall Integration with Cisco ACI. AutoFocus Customer Support Portal access roles. Access the AutoFocus portal. A previously expired license will be valid for 30 days from transfer on the defective unit. It gets stuck at installing 1 of 20 or 2 of 20 and after a while it eventually times out. When you want to manually download the license from the Customer Support Portal and install the license keys in the Firewall or Panorama Environment. Palo Alto Networks Firewall Integration with Cisco ACI. To get passed this, I have followed the guidance from Microsoft on whitelisting IPs and FQDNs that are used by the Intune Select a Palo Alto Networks product, e. The article covers all Palo Alto Firewalls including: PA-220, PA-820, PA-850, PA-3220, PA-3250, PA-3260, PA You should be able to see all the current activated license on the device on this path --> Device tab --> Licenses . Login to the Customer Support Portal at https://support. How do we REMOVE them from the Customer Portal, so they are 100% gone? Thank you, Palo Alto Networks subscriptions provide the firewall with added functionality and/or access to a Palo Alto Networks cloud-delivered service. To get the GlobalProtect app for mobile endpoints, end users must download the app from the device store: App Store for iOS, Google Play for Android, Chrome Web Store for Chromebooks, or Microsoft Store for Windows 10 UWP. Verify the Current Account is the account that owns the asset. of firewall traffic logs and identifies potential risks to your network using threat intelligence from the AutoFocus portal. Credit-based Licensing: S oftware NGFW Credits are a credit-based licensing model that allows customers to purchase credits, rather than Perpetual licenses and VM-Series Enterprise License Agreements (VM-ELAs). Learn about what's supported for each and how to get started. For this, you need to have valid auth-code for the feature subscription and that should be activated on the support portal. Retrieve license keys from license server —Use this option if you activated your license on the Customer Support portal. This article explains how to register and activate your Palo Alto Firewall Appliance to obtain technical support, RMA hardware replacement, product updates, antivirus updates, wildfire, antispam updates, Threat Prevention, URL Filtering, Global Protect and more. (Customer Support Portal) Add End-Customer Information for a Registered VM-Series Firewall (API) Palo Alto Networks Firewall Integration with Essentially Palo Alto doesn't care about the agent, they care about the device you are connecting to and it's license compliance. Strata Cloud Manager supports two new licensing tiers: Essentials and Pro. How to View Enterprise Agreements on the Customer Support Portal. Activate Palo These matrices identify the membership roles and permissions in the Customer Support Portal (CSP). Registration: Register your device and create an account online at: https://support. Enter the AutoFocus auth code and click Agree and Submit to accept EULA and activate the auth code. Support Portal User Role Matrix. Created On 09/25/18 18:07 PM - Last Modified 02/01/25 01:56 AM. Which one is needed for clientless VPN? I have this PA-850 and running on PanOS 9. However, if you create an IoT Security tenant URL for eval licenses on eval firewalls and then replace them with prod licenses on prod firewalls, you can continue using It is important to keep the IoT Security activation email you received from Palo Alto Networks. As far as i know we only need Globalprotect license to use more features, but the support portal made me Wait for a confirmation message in the Support Portal for a successful transfer. Feature: GlobalProtect Portal Description: GlobalProtect Portal License Serial: 0000000xxxxxxxx Issued: March 08, 2017 Expires: Never Expired?: no Base license: PA-VM License entry: Feature: PA-VM Description: Standard VM-100 Serial: 0000000xxxxxxxx Issued: March 08, Note: Since your browser does not support JavaScript, you must press the button below once to proceed. License Service Web API. In general, if you have multiple Customer Support Portal accounts, you will select the Customer Support Portal account that you want to use for managing your product. Because you have only one Customer Support Portal account associated with your username, the Customer Support Account is prepopulated. This guide will walk a user through the steps required to register their Evaluation hardware serial number in the Palo Alto Networks Customer Support Portal. If you have added the Panorama serial number to the same CSP account on which you want to deploy Prisma Access, you can select Learn about Prisma Access licenses. You'll need to insure that your device is showing an active GlobalProtect Gateway subscription under Device -> Licenses in the GUI. Procedure Register the device serial number to activate the licenses. Find the device, click on the Licenses & Subscriptions icon for the device. 0 4. com). Here note that, serial number of a Palo Alto firewall is needed to create an account. If it is an emergency and you need your licenses extended until the renewal is completed, you can reach out to our Renewals Team. paloaltonetworks. With an active license, you can also open an For license renewals, please contact your Reseller or your Palo Alto Account Manager. Members Sign On. The IoT Security solution works with next-generation firewalls to dynamically discover and maintain a real-time inventory of the IoT devices on your network. Without activating these licenses, only a base tenant will be created, which will not have the complete Prisma SD-WAN functionality. One API key per CSP account is assigned for each Palo Alto Network product. 0 3. 61414. At this point, the new VM serial number will be added to the TSG associated with the deployment profiles for Software Select the Palo Alto Networks Customer Support portal account (you can search by account number or name) where you want to Consumption—the number for Software NGFW credits used by a deployment 20) Once all licenses are downloaded and activated, your Licenses screen should look similar to this depending on the licenses you've purchased. The article explains how to retrieve Firewall licenses using the GUI. If you are trying to activate IoT Security with the add-on Enterprise License Agreement (ELA), see activate an add-on enterprise license agreement instead. For more information on licensing, see About GlobalProtect Licenses . 3. As needs change over time, Software NGFW Credits can be reallocated to new and other firewall-as-a-platform solutions without having to Select Assets > Site Licenses. Here you can read To activate authorization codes in Devices: Login to Customer Support Portal with the account which owns the asset. Palo Alto Networks is here to assist you during these unprecedented times, which is why we’ve pulled out all the stops on offering extended trial license periods for GlobalProtect and others. After Access the Palo Alto Networks Customer Support Portal for assistance with technical support, account management, and resources. CSR Customer Support Portal Customer Support Portal (CSP) You can view the used licenses, consumption, usage cap and other information under the To verify the status of your licenses on each portal and gateway, select Device Licenses. Click the Activate License button, select Activate Trial License and select desired trial licenses. Sign In. Service Graph Templates; See the license activation topics in this guide for details about activating specific products. Contact your Palo Alto Networks Sales Engineer or Reseller if you do not have the required licenses. As long as you have the respective licenses, you can enable Autonomous DEM for your GlobalProtect Mobile Users connecting to Prisma Access or Prisma SD-WAN remote sites that are connected to Prisma Strata Cloud Manager Essentials and Strata Cloud Manager Pro are available to activate in customer support portal (CSP) accounts that don't have: Strata Logging Service with sized storage, AIOps for NGFW Free or Premium, or Migrate from a model-based license to flexible Software Next Generation firewall credits. All Firewall models; All Panorama models; Resolution. For information about Prisma Access licensing, see the Prisma Access Activation and Onboarding Guide. Sign in to view and activate apps. To create an IoT Security user with owner privileges plus the ability to generate one-time passwords (OTPs) and pre-shared keys (PSKs), add a user account in the Customer Support Portal and assign a Superuser role in the relevant tenant service group (TSG) in Identity & Access (this is described in the following steps. Welcome to License Service Web API! Prisma Access offers a licensing model that enables you to implement and use the capabilities of Prisma Access aligned to your business needs in a way that delivers the fastest return on investment. Create a Deployment Profile Using the Licensing API; (Customer Support Portal) Add End-Customer Information for a Registered VM-Series Firewall (API) Set Up a VM-Series Firewall on an ESXi Server. Service Graph Templates; Activate a Panorama Support License; Activate/Retrieve a Firewall Management License when the Panorama Virtual Appliance is Internet-connected; Activate/Retrieve a Firewall Management License when the Panorama Virtual Appliance is not Internet-connected; Activate/Retrieve a Firewall Management License on the M-Series Appliance A: There are three big differences between Software NGFW Credits and our legacy licensing and consumption model: 1. Enhanced application logging is a feature that comes with a Strata Logging Service subscription—it allows the firewall to collect data specifically for Cortex XDR to use to detect anomalous network activity. Whenever you purchase any additional Palo alto The following Palo Alto Networks subscriptions unlock certain firewall features or enable the firewall to leverage a Palo Alto Networks cloud-delivered service (or both). 206130. View the AutoFocus Our licensing model allows you to consume the capabilities of Prisma Access aligned to your business needs in the manner that delivers the fastest return on investment (ROI). An eval license is for an eval firewall, which is Palo Alto Networks property and loaned out for temporary use. If you are using the Host Information Profile (HIP) feature, the portal also defines what information to collect from the host, including any custom information you require. Service Graph Templates; Hi all, I need a clarify about GP Portal license and GP Gateway license. A firewall type is defined by the firewall SKU. The licenses will be updated. 0 Likes Likes 0. Click on Products > Devices. Service Graph Templates; Starting October 2024, Strata Logging Service supports a new licensing scheme. Each time you install a new Cortex XDR agent on an endpoint, the Cortex XDR agent registers with Cortex XDR to obtain a license. If the cloud service licenses do not appear, contact Palo Alto Networks Support for assistance. The portal license that @LAYER_8 mentioned is no-longer relevant. The portal does not distribute the GlobalProtect app for use on mobile endpoints. 0. Welcome to IoT Security activation. CSP provides a portal feature for developers to get API keys for specific Palo Alto Network product REST endpoints. Log into the Customer Support Portal (https://support. Hi Team, please help me out,I have a new firewall PA440 Configuration that has been done, but wanted to activate the license to the license - 592429 The Palo Alto Networks Support Portal houses all of the resources you need in a single location, giving you easier support case navigation and faster, easier access to the support answers you need. Migrate the configuration from the previous Panorama appliance to the To activate trial licenses in Assets page: Login to Customer Support Portal with the account which owns the asset. Before you begin, you must decide how you want to manage Prisma Access. However, if you 'refresh' the licenses on that FW, those expired licenses come right back, as they are still listed in the Customer Portal. X **** Manage Assets capability enables a user to manage any product in Palo Alto Networks' product portfolio. com I have 'trial' licenses that I have removed from the actual FW (delete license key <key file>) via the CLI, and that works fine. Then, click Add Site License. To get more information: View Documentation or visit Customer Support PortalDocumentation or visit Customer Support Portal Objective Retrieve License on the Firewall ( if the subscription auth codes are activated on the Customer Support Portal ) Environment Physical and Virtual Firewalls; Any PAN-OS. 4. By default, the new Strata Logging Service license comes with a one year log retention period. If you have any trouble during this process, please contact your account Systems Engineer or Palo Alto Networks Support. Log Learn about Enterprise License Agreement Add-on activation. Service Graph Templates; During product activation, you can select an existing Panorama to manage Prisma Access, if you have registered Panorama, installed the licenses, and activated the support license on the Customer Support Portal (CSP). The new license will be available to all qualifying users (users who activate Strata Logging Service after October 2024 and do not currently have an existing Strata Logging Service license). GlobalProtect Gateway Create a Deployment Profile Using the Licensing API; (Customer Support Portal) Add End-Customer Information for a Registered VM-Series Firewall (API) Set Up a VM-Series Firewall on an ESXi Server. How to View Enterprise Agreements on the Support Portal. 13, on support portal it shown that I have GP Gateway license active but GP Portal license is expired. 5 2. Learn about activation links, license activation, and managing licenses and devices through Common Services. g. To see the SKU for a firewall, log in to your Customer Support Portal account and select Assets Devices and check the entry for the serial number of your firewall in the Manage Deployment Profiles Using the Licensing API; Create a Deployment Profile Using the Licensing API; (Customer Support Portal) Add End-Customer Information for a Registered VM-Series Firewall (API) Palo Alto Networks Firewall Integration with Cisco ACI. In the Log in to the WebGui of the Firewall. ; Activate feature using authorization code —Use this option to enable purchased subscriptions using an authorization code for licenses that have not been previously activated on the support portal. The To activate licenses and subscriptions, you need to create an account in Palo Alto support portal. CSP displays a new API key. Updated on . Palo Alto Networks Device; If the firewall does not have internet connection, manually download the license key from Customer Support Portal: (Assets > Devices > filter by SN > click the download icon next to the License name However, some license types, such as eval, trial, and Enterprise License Agreement (ELA) are compatible with any firewall model. 5 4. Convert Your Evaluation Panorama to VM-Flex Licensing with Local Log Collector; Convert Your Evaluation Panorama to VM-Flex Licensing without Local Log Collector; Make sure that your Panorama has been registered to Customer Support portal and has Support license: VM Panorama licenses are tied to UUID (universal unique identifier) of VM that is generated during the boot up Cortex XDR manages licensing for all endpoints in your organization. Read through the EULA Customer Support Portal (CSP) purchase Enterprise Agreements to easily assign subscriptions and support programs in bulk to assets purchased from Palo Alto Networks. Activate feature using authorization code —Use this option to enable The following Palo Alto Networks subscriptions unlock certain firewall features or enable the firewall to leverage a Palo Alto Networks cloud-delivered service (or both). However, advanced features like HIP checks, mobile app support, IPv6, split tunneling, and Clientless VPN require a GlobalProtect Gateway license. If it isn't showing, you may potentially just need to tell your device to retrieve the license keys from the license server via that same page to Download and install the latest PAN-OS content release. Fri Mar 14 15:24:02 UTC 2025. Find the device, click on the pencil icon (in Actions column). x and later to identify URLs that have been categorized using the real-time-detection category introduced withx Advanced URL Filtering. Copy and paste the API key into your app endpoint. Complete the one-time password (OTP) verification; procedure and verify the Panorama appliance. I have been working with Palo Alto Networks devices since 2012 and one of the more confusing topics that I have helped with has almost always been: How do I activate, register or license a Palo Alto Networks device? Although you may be able to search the Live Community and find an article or two REGISTER YOUR DEVICE AND CREATE A SUPPORT PORTAL ACCOUNT. " If your Panorama is being used offline, you will need to download the license keys from the Support Portal on the Assets > Devices screen, then use the link in Customer Support Portal (CSP) account with a Software NGFW Credits deployment profile enabled When the license database sees the auth code request come in from the VM, it will automatically call hub with this information. 5 1. Use your active Palo Alto Networks® Customer Support account to register your firewalls on our Customer Support Portal and then automatically configure your firewall with our recommended Day 1 Before you can activate support and other licenses and subscriptions, you must first register the firewall. Now, you tried to " retrieve the license key" licenses from license server. Learn how to activate your trial license today. 0 Wait for a confirmation message in the Support Portal for a successful transfer. , Licensing, Threat Vault, DNS. Click on Products > Assets. 0 1. Whether your applications are migrating to the cloud, your users are working from anywhere, or if you're looking to gain operational efficiencies, Prisma Access Any Palo Alto Firewall. PAN-OS Applications and Threats content release 8390-6607 and later allows firewalls operating PAN-OS 9. If not, click the Account Selector box and select the I have been working with Palo Alto Networks devices since 2012 and one of the more confusing topics that I have helped with has almost always been: How do I activate, For this, you need to have valid auth-code for the feature subscription and that should be activated on the support portal. Entitlement: Support is available to you for registered devices with active support licenses. Procedure *** The user must be an admin user to be able retrieve the licenses, non admin users will not have the option to retrieve or manually upload the licenses Palo Alto Networks Device; If the firewall does not have internet connection, manually download the license key from Customer Support Portal: (Assets > Devices > filter by SN > click the download icon next to the License name Thanks for the previous answer, you can indicate in the portal, the menu from where I can download the license and how to load it on the device if it is through a pendrive It is important to mention that today activates the transfer of the license of the equipment that failed the new equipment in the portal successfully Get started with Autonomous DEM in Prisma Access to continually monitor the digital experience across all users, applications, and remote sites in your SASE environment. Created On 09/25/18 19:38 PM - Last Modified 03/27/25 20:50 PM Licensing API. The problem we're seeing is that every time we run this process behind a palo alto firewall the downloading of the programs hangs. 0 2. Palo Alto Networks; Support; Live Community; Knowledge Base; Panorama Administrator's Guide: Activate a Panorama Support License. Both Prisma Access (Managed by Strata Cloud Manager) To activate trial licenses in Assets page: Login to Customer Support Portal with the account which owns the asset. Sign in with SSO. Click on " Retrieve License keys from License server ". The defective device will be given licenses valid for 30 days from the date of transfer regardless of the status of the license before the transfer. com. Click the Activate Certain cloud services, like Cortex XDR™, do not integrate with the firewall directly, but rely on data stored in Strata Logging Service for visibility into network activity. Cortex XDR issues licenses until you exhaust the Note: If a license expires prior to the transfer, it will be expired on the replacement. Enter the serial number of your Palo Alto Networks firewall and customer account number from your Manage and monitor credits via the Palo Alto Networks customer support portal. ) For example, this might happen if you change your license type, and a configuration that was previously valid, is no longer supported with the new license type. jrrevugf jksc anipyc ecndg pjrv xlrajli cjkzs vvfgjn cdpb maso cgcd ljyga tkgt fwvvpw arifp