Frequently Asked Questions
Can the OSS be configured for remote management?
Yes, a management IP can be configured on the OSS for remote management.
Can the software be kept up-to-date even though it has no licensing?
App-only content can be updated from Panorama but PAN-OS needs to be uploaded manually using the image file. The system cannot be upgraded from the license servers since this requires license validation.
Can the OSS be configured as a third device in a HA cluster?
Because the spare unit doesn't require a license, it needs to remain completely off the network until used to replace an active licensed unit. Cables from the failed device would need to be physically moved to the OSS.
Can the license transfer be done without either device being on the network?
Yes, the license transfer is done on the Support Portal and neither device needs to be connected. Instead of retrieving license keys from the server, they can be downloaded to a PC and uploaded to the unit.
Can I convert my OSS (on site spare) to a Production device?
Yes, the customer will pay the difference between the purchase price of their OSS and the price of a production device and required to purchase support at the time of conversion. A new device will not be shipped to the customer they will only receive new authorization codes to convert their device. Sales will need to create a new quote that includes a new production device as well as support and subs. Please work with the Palo Alto Networks Sales rep to initiate the conversion.
Can I convert my Production device to OSS device?
No, a conversion from Production to OSS unit is not supported by system design.
Can I use my OSS device to replace a defective Production device temporarily in the network?
Yes, this is why OSS devices are for. If you cannot afford a downtime, in case of a defective production device, you can transfer the licenses to the OSS device until you RMA the defective firewall. However, the expectation is that an OSS device can replace a Production device only until the RMA replacement arrives at the customer site. The licenses then have to be transferred to the RMA replacement device. The OSS device will get back its part number (SKU) and can be used again as a spare. It is not supported to swap SKU between Production and OSS devices per system design. Refer to EULA . Using an OSS device as a Production permanently exhausts the concept of using the OSS "beyond the scope of the use right and/or capacity purchased" stipulated in the EULA.
Another option to avoid downtime in case of a device failure is setting up an HA-pair .
I accidentally activated a license on my OSS device.
If you accidentally activated a license on an OSS device, you would need to create a support case (type Admin) to revert it.An OSS device can be licensed only via license transfer from a Production device.
OSS devices can be upgraded to Production devices, after the upgrade a net new license can be activated on the device (see the question above)