What Happens When the Threat Prevention License Expires?

Overview

The following sample screenshots show the current system time and expiration date for Threat Prevention on a Palo Alto Networks firewall running PAN-OS 5.0.8:

This document describes what happens when the Threat Prevention license expires, as in the example shown above.

Details

1. Alerts will appear in the System Log reporting that the license has expired:
   
2. Threat profiles will still continue to be applied, using the versions of Antivirus and Apps & Threats that were installed when the license expired. For example, when downloading an eicar test file, the threat profiles are still applied:
   
3. The firewall will not be able to install a new version of App & Threats or Antivirus or roll back to a previous version:
   
   Attempting to do so, either through the updates page or by manually uploading the file, will result in the following error:
   
4. Any custom signatures that were created can still be modified, as well as, the time attributes on signatures that support that feature.

Note: To only update Apps, download the latest version of Apps only from the support site at https://support.paloaltonetworks.com.

owner: cstancill