Update licenses of firewalls that don’t have direct internet
Activate a license on firewalls—To activate a license on
, select the firewalls
and, in the Auth Code column, enter the authorization codes that
Palo Alto Networks provided for the firewalls.
Deactivate all the licenses and subscriptions/entitlements
installed on VM-Series firewalls—Click
select the firewalls (the list displays only firewalls running PAN-OS
7.0 or later releases), and click:
the licenses and automatically registers the changes with the licensing
server. The licenses are credited back to your account and are available
—Generates a token
file. Use this if Panorama does not have direct Internet access.
To complete the deactivation process, you must log in to the Support portal, select
, upload the token
file, and click
. After you complete
the deactivation process.
You can also view the current license status for managed firewalls.
For firewalls that have direct internet access, Panorama automatically
performs a daily check-in with the licensing server, retrieves license
updates and renewals, and pushes them to the firewalls. The check-in
is hard-coded to occur between 1 and 2 A.M.; you cannot change this
The firewall name.
Indicates whether the firewall does
or does not
Indicates whether the license
, or expired
(along with the
Indicates whether this is
or is not
a VM-Series firewall.