Before you can begin using Panorama for centralized
management, logging, and reporting, you are required to register,
activate, and retrieve the Panorama device management and support
licenses. Every instance of Panorama requires valid licenses that
entitle you to manage firewalls and obtain support. The firewall
device management license enforces the maximum number of firewalls
that Panorama can manage. This license is based on firewall serial
numbers, not on the number of virtual systems on each firewall.
The support license enables Panorama software updates and dynamic
content updates (for the latest Applications and Threats signatures,
as an example). Additionally, Panorama virtual appliances on AWS
and Azure must be purchased from Palo Alto Networks, and cannot
be purchased on the AWS or Azure marketplaces.
After upgrading your Panorama virtual appliance to PAN-OS 8.1,
you are prompted if a capacity license has not been successfully
installed or if the total number of firewalls being managed by Panorama
exceeds the device management license. You have 180 days from the
date of upgrade to install a valid device management license if
no license has been installed. If the number of managed firewalls
exceeds the device management license, you have 180 days to delete
firewalls to meet the device management license requirements or upgrade
your device management license. All commits fail if a valid device
management license is not installed, or the existing device management
license limit is not met, within 180 days of upgrade. To purchase
a device management license, contact your Palo Alto Networks sales
representative or authorized reseller.
If you want to use the cloud-based Cortex Data Lake, you
require a Cortex Data Lake license, in addition to the firewall
management license and premium support license. To purchase licenses,
contact your Palo Alto Networks Systems Engineer or reseller.