The following steps describe how to retrieve
new licenses using an authentication (
) code and
push the license keys to managed firewalls. It also describes how
to manually update (refresh) the license status of firewalls that
do not have direct internet access. For firewalls that have direct
internet access, Panorama™ automatically performs a daily check-in
with the licensing server, retrieves license updates and renewals,
and pushes them to the firewalls. The check-in is hard-coded to
occur between 1 a.m. and 2 a.m.; you cannot change this schedule.
cannot use Panorama to activate the support license for firewalls.
You must access the firewalls individually to activate their support
Alto Networks® provided for each firewall that has a new license.
WildFire® subscriptions only
) Perform a
commit on each firewall that has a new WildFire subscription to
complete the activation:
any pending changes.
You must access each firewall web interface to do this.
If no configuration changes are pending, make a minor change and
For example, update a rule description and commit the change. If
the firewalls belong to the same device group, you can push the
rule change from Panorama to initiate a commit on all those firewalls
instead of accessing each firewall separately.