Before you can begin using Panorama for centralized
management, logging, and reporting, you are required to register,
activate, and retrieve the Panorama device management and support
licenses. Every instance of Panorama requires valid licenses that
entitle you to manage firewalls and obtain support. The firewall
device management license enforces the maximum number of firewalls
that Panorama can manage. This license is based on firewall serial
numbers, not on the number of virtual systems on each firewall.
The support license enables Panorama software updates and dynamic
content updates (for the latest Applications and Threats signatures, as
an example). Additionally, Panorama virtual appliances on AWS and
Azure must be purchased from Palo Alto Networks, and cannot be purchased
on the AWS or Azure marketplaces.
After upgrading your Panorama virtual appliance to PAN-OS 8.1,
you are prompted if a capacity license has not been successfully installed
or if the total number of firewalls being managed by Panorama exceeds
the device management license. You have 180 days from the date of
upgrade to install a valid device management license if no license
has been installed. If the number of managed firewalls exceeds the
device management license, you have 180 days to delete firewalls
to meet the device management license requirements or upgrade your
device management license. All commits fail if a valid device management
license is not installed, or the existing device management license
limit is not met, within 180 days of upgrade. To purchase a device
management license, contact your Palo Alto Networks sales representative
or authorized reseller.
If you want to use the cloud-based Logging Service, you require a Logging
Service license, in addition to the firewall management license
and premium support license. To purchase licenses, contact your
Palo Alto Networks Systems Engineer or reseller.