IoT Security
Licenses and Activation for IoT Security
Table of Contents
Expand All
|
Collapse All
IoT Security Docs
Licenses and Activation for IoT Security
Extend, renew, and convert IoT Security licenses.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Depending on your needs or where you plan to deploy IoT Security, you can choose
from several types of IoT Security licensing subscriptions:
- Enterprise IoT Security Plus, Medical, or Industrial OT Subscription License - supported with next-generation firewalls, VM-Series, CN-Series, and Prisma® Access. These subscription licenses apply on a per-firewall basis, meaning you need one license per firewall that streams logs to IoT Security.
- Device Security X Subscription License - supported with next-generation firewalls, VM-Series, and CN-Series, as well as VM-Series bootstrapped in virtual metadata collector mode (VMC). This subscription license provides individual licenses for each device learned by IoT Security, regardless of how many firewalls or VM-Series VMCs stream logs to IoT Security.
- Enterprise IoT Security Subscription License - supported with next-generation firewalls, VM-Series, and CN-Series. These subscription licenses apply on a per-firewall basis, meaning you need one license per firewall that streams logs to IoT Security.
For some of the licensing subscriptions, except for the
Enterprise IoT Security License, you can choose from different
license types and add-on licenses to fit your requirements.
- Enterprise Plus, Medical, or Industrial OT IoT Security Doesn't Require Data Lake (DRDL) - when you don't need to store streaming logs in a data lake
- Enterprise Plus, Medical, or Industrial OT IoT Security (with Data Lake) - when you have Strata Logging Service and want to store the streaming logs
- Basic IoT Security Third-party Integrations Add-on license
- Advanced IoT Security Third-party Integrations Add-on license
To determine the best subscription and license type for your requirements, reach out
to your Palo Alto Networks sales representative. You can obtain a trial or
eval (evaluation) license to try out IoT Security. The initial term of a trial or
eval (evaluation) license is 60 days and can be extended in 30-day increments. To
extend the trial or eval term, request a 30-day extension through your
Palo Alto Networks sales representative or sales engineer. Not all subscriptions offer
a trial or eval license.
Manage an Expiring License
You have several options when a license for an IoT Security subscription or a
third-party integration add-on expires. If you no longer want a firewall to
subscribe to IoT Security services or integrate with third-party systems,
you can let the license expire. If you do want to continue using these services or
integrations, you can renew paid licenses or convert licenses from one type to
another.
License Renewals
As a paid license approaches its expiration date, you can renew it so that
there is no break in service, the next license beginning immediately after the
current license ends. You can renew the following licenses:
- IoT Security Subscription lab license
- IoT Security Subscription prod (production) license
- IoT Security, Doesn’t Require Data Lake (DRDL) Subscription lab license
- IoT Security, DRDL Subscription prod license
- Device Security X Subscription license
- Basic IoT Security Third-party Integrations Add-on license
- Advanced IoT Security Third-party Integrations Add-on license
To renew any of these licenses, contact your Palo Alto Networks sales
representative.
License Conversions
A license conversion is the change of one license type to another. The license
can be for an IoT Security subscription or a
third-party integration add-on.
You can't convert between a Device Security X per-device license and
a per-firewall IoT Security license of any kind.
Palo Alto Networks supports the following conversions:
IoT Security license conversions
- Trial > ProdYou can convert an IoT Security license on a firewall from trial to prod, but not from eval to prod. An eval license is for an eval firewall, which is Palo Alto Networks property and loaned out for temporary use. However, if you create an IoT Security tenant URL for eval licenses on eval firewalls and then replace them with prod licenses on prod firewalls, you can continue using the same IoT Security tenant URL.
- IoT Security Subscription > IoT Security, Doesn't Require Data Lake (DRDL) Subscription
- IoT Security, DRDL Subscription > IoT Security SubscriptionActivate a Strata Logging Service instance before converting from a subscription that does not require a data lake to one that does.
IoT Security Third-party Integrations Add-on license conversions
- Basic > Advanced
- Advanced > Basic
All conversions can be done after the current license expires at the end of its
term, but only conversions considered to be upgrades are allowed midterm.
Midterm conversions take place immediately, replacing the previous term with
the new term. The following conversions are considered to be upgrades:
IoT Security license upgrades
- Trial version of any type of license > Prod version of any type of license
- IoT Security Subscription > IoT Security, DRDL Subscription
IoT Security Third-party Integrations Add-on license upgrades
- Trial version of any type of add-on > Prod version of any type of add-on
- Basic > Advanced
Converting IoT Security licenses from trial to prod generates a new
purchase order with a link to a new onboarding workflow. During the
onboarding process, you can select the existing IoT Security tenant
you were previously using for trial purposes. The rest of the onboarding
workflow follows the same mechanism for activating prod licenses on
firewalls as it did for activating trial licenses.
To convert any licenses, contact your Palo Alto Networks sales representative.