: Migrate Panorama to a Software NGFW License
Focus
Focus

Migrate Panorama to a Software NGFW License

Table of Contents

Migrate Panorama to a Software NGFW License

Migrate a single Panorama, or an HA pair from fixed VM-ELA or a perpetual virtual Panorama licensing to a Software Next Generation Firewall license.

Migrate a Panorama with Access to the CSP

Complete the following procedure to migrate your VM-ELA or perpetual virtual Panorama license to a Software NGFW license. This migration allows you to move your existing Panorama devices to the Software NGFW license without disruption while retaining your existing serial number. Because your serial number does not change, your logs and existing policies are retained.
  1. Select
    Products
    Assets
    Software NGFW Credits
    and click the
    Details
    link on the credit pool you used to create your profile.
  2. On the far right, select the vertical ellipsis (More Options) and select
    Provision Panorama
    and then click
    Migrate Existing
    .
    The CSP displays all virtual Panorama devices associated with your account.
  3. Select the check box for each virtual Panorama to be migrated.
  4. Click
    Migrate
    .
    Verify that the
    Current Support Expiration Date
    has been updated. Additionally, you can expand each row to view the individual licenses applied to the selected Panorama.

Migrate a Panorama HA Pair that Can Access the CSP

Complete the following procedure to migrate an HA pair with VM-ELA or perpetual licenses to a Software NGFW licensing. This migration allows you to move your existing Panorama devices to the Software NGFW license without disruption while retaining your existing serial number. Because your serial numbers do not change, your logs and the existing policies are retained.
  1. Select
    Products
    Assets
    Software NGFW Credits
    and click the
    Details
    link on the credit pool you used to create your profile.
  2. On the far right, select the vertical ellipsis (More Options) and select
    Provision Panorama
    and then click
    Migrate Existing
    .
    The CSP displays all virtual Panorama devices associated with your account.
  3. Check the box for each virtual Panorama to be migrated.
  4. Select
    Migrate
    .
    Verify that the
    Current Support Expiration Date
    has been updated. Additionally, you can expand each row to view the individual licenses applied to the selected Panorama.

Migrate a Standalone Panorama that Cannot Access the CSP to a Flexible License

Complete the following procedure to migrate your VM-ELA or perpetual virtual Panorama license to a Software NGFW license even though your Panorama cannot access the CSP. Migration without the CSP requires a serial number change, but it allows your Panorama devices to migrate to Software NGFW licenses and retain your existing policies.
The minimum version for Panorama support is 8.1. If you must upgrade PAN-OS, do it before you start the migration process. If you want to manage firewalls that are using flexible vCPUs and advanced services, the PAN-OS version must be 10.0.4 or later.
  1. On your Panorama, upgrade if necessary, and note the serial number and the current support expiration date.
  2. In the CSP, select
    Products
    Assets
    Software NGFW Credits
    and click the
    Details
    link on a credit pool. Select a deployment profile, or create one.
  3. On the far right, select the vertical ellipsis (More Options) and select
    Provision Panorama
    and select
    Migrate Existing
    .
    The CSP displays all virtual Panorama devices associated with your account.
  4. Check each virtual Panorama to be migrated and select
    Migrate
    .
  5. On Panorama, replace the serial number with the serial number from the Panorama you provisioned in the CSP. Wait one minute, then refresh the page.
  6. In the CSP select your provisioned Panorama and download all licenses (the support license, the management license, and Panorama as a log manager if your deployment profile includes it.
    Securely pass the licenses to your Panorama.
  7. Upload all Software NGFW licenses.
  8. Verify that the
    Current Support Expiration Date
    has been updated. Additionally, you can expand each row to view the support license and/or logging license applied to the selected Panorama.

Migrate An HA Pair that Cannot Access the CSP to a Flexible License

Use this procedure when your HA pair cannot communicate with the CSP. This procedure initiates a failover.
  1. Select
    Products
    Assets
    Software NGFW Credits
    and click the
    Details
    button on the a credit pool.
  2. On the far right, select the vertical ellipsis (More Options) and select
    Provision Panorama
    .
    The CSP displays all virtual Panorama devices associated with the current support account.
  3. Select
    Provision New
    , and check the box for each virtual Panorama to be migrated and select
    Migrate
    .
    The migrated Panoramas are displayed as Software NGFW Devices.
  4. Verify that the
    Current Support Expiration Date
    has been updated. Additionally, you can expand each line to view the individual licenses applied to the selected Panorama.

Recommended For You