Deactivate License (Software NGFW Credits)
Deactivate a license before you delete a firewall from
the CSP Software NGFW credits deployment profile.
You must deactivate any licenses from the
CSP
before
you delete a firewall (or the VM hosting the firewall)
or the license credits cannot return to your credit pool. When
you have internet access to the licensing server, deactivating the
firewall on the CSP automatically removes the licenses and the remaining
credits are returned to the deployment profile. After you deactivate
the license you must delete the firewall or it will continue to
consume credits.
If you don’t have internet access, you must
export the license token from the firewall. Then, in the CSP, start
deactivation and upload the token (or paste in the token text) to
complete the deactivation.
- Direct internet access.
- Selectand click theAssetsSoftware NGFW CreditsDetailsbutton on the credit pool you used to create your deployment profile.
- Locate your deployment profile, and on the far right, select the vertical ellipsis (More Options) and selectDeactivate Firewall.
- Check the firewall you want to deactivate, and selectDeactivate Firewall.
- No internet access.
- Log in to the firewall web interface and select.DeviceLicenses
- In the License Management section, selectDeactivate VM.Verify the list of licenses/entitlements to be deactivated on the firewall.
- SelectComplete Manuallyto start the deactivation.Click theExport license tokenlink to save the token file to the client. A token filename looks like this:20150128_1307_dact_lic.01282015.130737.tokAt this point the license has been deactivated on the firewall, but the credits have not been returned to the credit pool.
- Use the token file to register the changes with the Licensing server:
- Log into the Palo Alto Networks Customer Support website.
- Select.AssetsVM-Series Auth-CodesDeactivate License(s)
In the Deactivate Licenses form, paste in the token text, or copy the token to a computer with internet access and upload the token file to the CSP to complete license removal. - Delete the VM
- No internet access—Panorama management
- Log in to the Panorama web interface and select.PanoramaDevice DeploymentLicenses
- Select Deactivate VMsand select the VM-Series firewall that you want to deactivate.
- SelectComplete Manuallyto export the token file.
- Click theExport license tokenlink to save the token file. A token filename looks like this: 20150128_1307_dact_lic.01282015.130737.tokIf the export is successful, a completion message is displayed, and the firewall reboots automatically.
- Use the token file to register the changes with the licensing server.
- Log into the Palo Alto Networks Customer Support website.
- Select.AssetsVM-Series Auth-CodesDeactivate License(s)
In the Deactivate Licenses form, paste in the token text, or copy the token to a computer with internet access and upload the token file to the CSP to complete license removal. - (optional) Remove the deactivated VM-Series firewall as a managed device on Panorama.Instead of deleting the deactivated firewalls, you can create a separate device group and assign them to it.
- Select.PanoramaManaged Devices
- Select the firewall that you deactivated and clickDelete.
Recommended For You
Recommended Videos
Recommended videos not found.