Upgrading the capacity license of the PA-VM causes to supported feature to decrease
14928
Created On 01/07/21 11:18 AM - Last Modified 01/11/22 04:06 AM
Symptom
When a higher capacity license is installed on the firewall (Such as from VM-100 to VM-500), the supported features might decrease instead of increasing.
For Example, the supported number of zones might drop from 40 to 15 after changing the capacity license from VM-100 to VM-500, as opposed to 200 zones, which is the supported number of zones in the VM-500.
Environment
- Palo Alto VM Firewalls
- Any PAN-OS.
- Public or Private clouds.
- License upgrade of VM capacity.
Cause
Upgrading the capacity license to a higher model requires additional memory. If the required memory for the new model was not allocated for the PA-VM, the firewall will fall back to the capabilities of the VM-50.
Additionally, the following message will appear in the "pan_vm_plugin.log" file, which can be checked from the CLI of the PAN-OS (less mp-log pan_vm_plugin.log)
Allocate VM-50 shared memory size due to insufficient memory for license VM-500.Resolution
Ensure the firewall has the minimum memory requirements for the desired capacity license, which are detailed in VM Series System Requirements