IoT Security Licenses
Table of Contents
Expand all | Collapse all
-
- Firewall and PAN-OS Support of IoT Security
- IoT Security Prerequisites
- Onboard IoT Security
- Onboard IoT Security on VM-Series with Software NGFW Credits
-
- DHCP Data Collection by Traffic Type
- Firewall Deployment Options for IoT Security
- Configure a Pre-PAN-OS 10.0 Firewall with a DHCP Server
- Configure a Pre-PAN-OS 10.0 Firewall for a Local DHCP Server
- Use a Tap Interface for DHCP Visibility
- Use a Virtual Wire Interface for DHCP Visibility
- Use SNMP Network Discovery to Learn about Devices from Switches
- Use ERSPAN to Send Mirrored Traffic through GRE Tunnels
- Use DHCP Server Logs to Increase Device Visibility
- Plan for Scaling when Your Firewall Serves DHCP
- Prepare Your Firewall for IoT Security
- Configure Policies for Log Forwarding
- Control Allowed Traffic for Onboarding Devices
- Support Isolated Network Segments
- IoT Security Integration with Prisma Access
- IoT Security Licenses
- Offboard IoT Security Subscriptions
-
- Introduction to IoT Security
- IoT Security Integration with Next-generation Firewalls
- IoT Security Portal
- Vertical-themed Portals
- Device-to-Site Mapping
- Sites and Site Groups
- Networks
- Reports
- IoT Security Integration Status with Firewalls
- IoT Security Integration Status with Prisma Access
- Data Quality Diagnostics
- Authorize On-demand PCAP
- IoT Security Integrations with Third-party Products
- IoT Security and FedRAMP
IoT Security Licenses
IoT Security
LicensesExtend
and convert
IoT Security
licenses.You have several options when a license for an
IoT Security
subscription or a third-party integration add-on expires. If you
no longer want a firewall to subscribe to IoT Security
services
or integrate with third-party systems, you can let the license expire.
If you do want to continue using these services or integrations,
you can extend trial and eval licenses, renew paid licenses, and even convert licenses
from one type to another.License Extensions
Before buying
IoT Security
,
you might first try it out and evaluate it. The initial term of
a trial or eval (evaluation) license is 60 days and can be extended
in 30-day increments. To extend the trial or eval term, request
a 30-day extension through your Palo Alto Networks sales representative
or sales engineer.License Renewals
As a paid license approaches
its expiration date, you can renew it so that there’s no break in
service, the next license beginning immediately after the current
license ends. You can renew the following licenses:
- IoT Security Subscription lab license
- IoT SecuritySubscription prod (production) license
- IoT Security, Doesn’t Require Data Lake (DRDL) Subscription lab license
- IoT Security, DRDL Subscription prod license
- BasicIoT SecurityThird-party Integrations Add-on license
- AdvancedIoT SecurityThird-party Integrations Add-on license
To
renew any of these licenses, contact your Palo Alto Networks sales
representative.
License Conversions
A license conversion
is the change of one license type to another. The license can be
for an
IoT Security
subscription or a third-party integration add-on. You can convert an
IoT Security
license on a firewall from trial to prod, but not from eval
to prod. An eval license is for an eval firewall, which is Palo Alto Networks
property and loaned out for temporary use. However, if you create an IoT Security
tenant URL for eval licenses on eval firewalls and then
replace them with prod licenses on prod firewalls, you can continue using the
same IoT Security
tenant URL.Palo Alto Networks supports the
following conversions:
IoT Security
license conversions- Trial > Prod
- IoT SecuritySubscription >IoT Security, Doesn't Require Data Lake (DRDL) Subscription
- IoT Security, DRDL Subscription >IoT SecuritySubscriptionActivate aCortex Data Lakeinstance before converting from a subscription that doesn't require a data lake to one that does.
IoT Security
Third-party Integrations Add-on license conversions- Basic > Advanced
- Advanced > Basic
All conversions can be done
after the current license expires at the end of its term, but only
conversions considered to be upgrades are allowed midterm. Midterm
conversions take place immediately, replacing the previous term
with the new term. The following conversions are considered to be
upgrades:
IoT Security
license upgrades- Trial version of any type of license > Prod version of any type of license
- IoT SecuritySubscription >IoT Security, DRDL Subscription
IoT Security
Third-party Integrations Add-on license upgrades- Trial version of any type of add-on > Prod version of any type of add-on
- Basic > Advanced
Converting
IoT Security
licenses from trial to prod generates a new purchase order with
a link to a new onboarding workflow. During the onboarding process,
you can select the existing IoT Security
tenant you were previously
using for trial purposes. The rest of the onboarding workflow follows
the same mechanism for activating prod licenses on firewalls as
it did for activating trial licenses.To convert any
licenses, contact your Palo Alto Networks sales representative.