How can I renew my Software NGFW Credit License?
Question
How can I renew my Software NGFW Credit License?
Environment
CSP
Answer
The Prisma NGFW Credits and Virtual NGFW Credits credit pools are now both called Software NGFW Credits credit pools.
This affects your renewal if you have Prisma, or Virtual NGFW Credit license.
When a deployment profile expires, it moves from the "Current Deployment Profiles" tab to the "Renew Profiles" tab.
● Once the deployment profile moved from the "Current Deployment Profiles" tab to the "Renew Profiles" tab.
If you renew your contract and the number of credits is equal to or greater than the amount of credits prior to renewal, your deployment profiles move back to the "Current Deployment Profiles" tab automatically AND no further action is required.
● On the other hand, if you do not have enough credits with your renewal contract to renew the current deployment profile(s), you will need to reduce/adjust the number of credits in your deployment profile(s) when you renew. Therefore, you must manually renew your deployment profiles with the new number of credits.
From the Renew Profiles tab, you can renew any of your deployment profiles without disrupting operations of your VM-Series firewall. After a deployment profile expires and moves to the Renew Profiles tab,
you have 30 days to renew the profile. Any deployment profiles not renewed within 30 days move to the Expired Deployment Profile tab.
Here is a helpful credits estimator:
Software NGFW Credit Estimator: https://www.paloaltonetworks.com/resources/tools/ngfw-credits-estimator
From the Renew Profiles tab, you can renew any of your deployment profiles without disrupting the operations of your VM-Series firewall.
Once a deployment profile expires and moves to the Renew Profiles tab, you have 30 days to renew it. If a deployment profile is not renewed within 30 days, it will move to the Expired Deployment Profiles tab.
Note:
- Select only the licenses you want to renew and ensure that the renewed licenses do not consume more credits than the maximum number of credits in the Pool. If you attempt to renew for more credits, the profile will be stuck in Failed status.
- You do not need to reconfigure the firewalls or activate new auth codes.
- If you miss the 30-day grace period for renewing the profiles, the firewalls will stop receiving updates and will no longer be supported. The deployment profiles that are not renewed will move to the Expired Deployment Profiles tab in CSP.
- If you wish to renew an expired deployment profile, create a support admin case. We can review with our IT team internally to see if it is possible to move the expired deployment profile into Renewal Profiles again for a short period of time, allowing you to proceed with the renewal.
- If the renewal order is processed before the existing pool expires, our system will automatically apply a 30-day grace period to the licenses on the registered firewalls in the profiles, three days prior to the renewal start date.
Additional Information
See also: Renew Your Software NGFW Credit License