Behavior on License Expiry

Contact the Palo Alto Networks operations team or sales for information on renewing your licenses/subscriptions.
  • If the Threat Prevention subscription on the firewall expires, the following will occur:
    • A system log entry is generated; the entry states that the subscription has expired.
    • All threat prevention features will continue to function using the signatures that were installed at the time the license expired.
    • New signatures cannot be installed until a valid license is installed. Also, the ability to roll back to a previous version of the signatures is not supported if the license is expired.
    • Custom App-ID™ signatures will continue to function and can be modified.
  • If the support license expires, threat prevention and threat prevention updates will continue to function normally.
  • If your support entitlement expires, software updates will no be available. You will need to renew your license to continue access to software updates and to interact with the technical support group.
  • If a VM capacity license expires or your VM-ELA expires, the firewall will continue operating without any changes to session capacity per the model specifications. However, you will not receive software or content updates on the firewall until you renew the license.  
    Although you might have a valid subscription (threat prevention or WildFire, for example) and support license, you must have a valid capacity license to obtain the latest software or content updates.

Related Documentation