How to add security feature (subscription) to VM-series firewall licensed with Software NGFW Credit?
522
Created On 07/12/24 03:21 AM - Last Modified 10/27/25 20:04 PM
Objective
Add security feature (subscription) to VM-series firewall licensed with Software NGFW Credit.
Environment
- VM-series firewall.
- PAN-OS version 10.2 or later.
- Licensed with Software NGFW Credit.
- Deployment Profile type is Flexible vCPUs.
Procedure
The VM-series firewall initially has 2 security features licensed: Threat Prevention and URL Filtering. From the screenshot below, we verify all the licenses installed on the firewall.
In this article, we are going to add WildFire feature to the firewall. We need to edit the Deployment Profile that is used to license the firewall.
Note: Deployment Profile change requires additional credits and affects ALL firewalls licensed from the same profile (auth-code).
Follow these steps to add a security feature to the firewall:
1. Go to Customer Support Portal > Products > Software NGFW Credits.
2. Click Details on the respective Credit Pool ID.
3. Find the Deployment Profile that is used to license the firewall, i.e. KB-profile.
4. Click on the three dots at the right side of the Deployment Profile, then click Edit Profile.
5. New dialog box opens, showing details of the Deployment Profile including the total credit consumed.
6. Select Wildfire, then click Calculate Estimated Cost to see the amount of additional credits required. Click Update Deployment Profile to apply the change.
7. A confirmation dialog box opens, click Yes to continue.
8. Wait for the web page to refresh, then expand the Deployment Profile to verify the change. Total credits consumed is also updated.
9. Login to the firewall GUI and navigate to Device > Licenses. Click Retrieve license keys from license server. Firewall restart is not required.
10. Verify WildFire license is installed with new issue date (today's date) and expiry date (aligns with Credit Pool expiration date).