About Traps Licenses

A Traps license enforces the expiration date and maximum number of endpoints that you can manage from the ESM Console. Endpoints retrieve their licenses from the ESM Server and each license specifies the license type (server, workstation, or VDI), agent pool size, and expiration date.
To determine which license to use for a VDI environment, see VDI Agent Licenses.
Each database instance requires a valid license that entitles you to manage the endpoint security policy, enable WildFire, and obtain support. To purchase licenses, contact your Palo Alto Networks Account Manager or reseller.
You can manage licenses in the following ways:
  • View license utilization—Use the License Capacity chart on the Dashboard to view the current utilization of all client, server, and VDI licenses.
  • Add a Traps license—Use the SettingsLicense page to add support for additional features or users. See Add a Traps License Using the ESM Console.
  • Update alicense—To update the license for an endpoint, create an action rule specifying the target endpoints that require a license update. See Update or Revoke the Traps License on the Endpoint.
  • Revoke alicense—To temporarily revoke a license from an endpoint, you can Detach a Traps License from an endpoint on the ESM Console. This action immediately updates the available pool of licenses and frees up the license for use by another Traps agent. The Traps agent remains unlicensed until the Traps service or endpoint reboots. At this time, the agent attempts to establish communication with the ESM Server and requests a new license. To permanently revoke a license from an endpoint, you can create an action rule for the target endpoint (see Update or Revoke the Traps License on the Endpoint). When Traps receives the action rule at the next heartbeat communication with the ESM Server, Traps releases the license and turns off Traps protection.

Related Documentation