Contact the Palo Alto Networks operations team or sales
for information on renewing your licenses/subscriptions.
If the Threat Prevention subscription on the firewall
expires, the following will occur:
A system log entry
is generated; the entry states that the subscription has expired.
All threat prevention features will continue to function
using the signatures that were installed at the time the license expired.
New signatures cannot be installed until a valid license
is installed. Also, the ability to roll back to a previous version
of the signatures is not supported if the license is expired.
Custom App-ID™ signatures will continue to function and can
If the support license expires, threat prevention and threat
prevention updates will continue to function normally.
If your support entitlement expires, software updates will
no be available. You will need to renew your license to continue
access to software updates and to interact with the technical support
If a VM capacity license expires or your VM-ELA expires,
the firewall will continue operating without any changes to session
capacity per the model specifications. However, you will not receive
software or content updates on the firewall until you renew the
Although you might have a valid subscription (threat
prevention or WildFire, for example) and support license, you must
have a valid capacity license to obtain the latest software or content