Focus

IoT Security Administrator’s Guide

IoT Security Licenses

Table of Contents

IoT Security Licenses

Extend and convert IoT Security licenses.

You have several options when a license for an IoT Security subscription or a third-party integration add-on expires. If you no longer want a firewall to subscribe to IoT Security services or integrate with third-party systems, you can let the license expire. If you do want to continue using these services or integrations, you can extend trial and eval licenses, renew paid licenses, and even convert licenses from one type to another.

License Extensions

Before buying IoT Security, you might first try it out and evaluate it. The initial term of a trial or eval (evaluation) license is 60 days and can be extended in 30-day increments. To extend the trial or eval term, request a 30-day extension through your Palo Alto Networks sales representative or sales engineer.

License Renewals

As a paid license approaches its expiration date, you can renew it so that there’s no break in service, the next license beginning immediately after the current license ends. You can renew the following licenses:

IoT Security Subscription lab license
IoT Security Subscription prod (production) license
IoT Security, Doesn’t Require Data Lake (DRDL) Subscription lab license
IoT Security, DRDL Subscription prod license
Basic IoT Security Third-party Integrations Add-on license
Advanced IoT Security Third-party Integrations Add-on license

To renew any of these licenses, contact your Palo Alto Networks sales representative.

License Conversions

A license conversion is the change of one license type to another. The license can be for an IoT Security subscription or a third-party integration add-on.

You can convert an IoT Security license on a firewall from trial to prod, but not from eval to prod. An eval license is for an eval firewall, which is Palo Alto Networks property and loaned out for temporary use. However, if you create an IoT Security tenant URL for eval licenses on eval firewalls and then replace them with prod licenses on prod firewalls, you can continue using the same IoT Security tenant URL.

Palo Alto Networks supports the following conversions:

IoT Security license conversions

Trial > Prod
IoT Security Subscription > IoT Security, Doesn't Require Data Lake (DRDL) Subscription
IoT Security, DRDL Subscription > IoT Security Subscription

Activate a Strata Logging Service instance before converting from a subscription that doesn't require a data lake to one that does.

IoT Security Third-party Integrations Add-on license conversions

Basic > Advanced
Advanced > Basic

All conversions can be done after the current license expires at the end of its term, but only conversions considered to be upgrades are allowed midterm. Midterm conversions take place immediately, replacing the previous term with the new term. The following conversions are considered to be upgrades:

IoT Security license upgrades

Trial version of any type of license > Prod version of any type of license
IoT Security Subscription > IoT Security, DRDL Subscription

IoT Security Third-party Integrations Add-on license upgrades

Trial version of any type of add-on > Prod version of any type of add-on
Basic > Advanced

Converting IoT Security licenses from trial to prod generates a new purchase order with a link to a new onboarding workflow. During the onboarding process, you can select the existing IoT Security tenant you were previously using for trial purposes. The rest of the onboarding workflow follows the same mechanism for activating prod licenses on firewalls as it did for activating trial licenses.

To convert any licenses, contact your Palo Alto Networks sales representative.

IoT Security Integration with Prisma Access

Offboard IoT Security Subscriptions