License usage limit approaching for Palo Alto Networks


Palo Alto Networks


Some licenses are limited to a certain number of elements (such as maximum users). If any of the licenses is nearing its limit, an alert will be issued.

Remediation Steps

Consider purchasing additional licenses.

How does this work?

This alert logs into the Palo Alto Networks firewall through SSH and retrieves the state table. In there it looks for the maximum number of vsys's allowed.

Why is this important?

Certain features have a license limitation on a Palo Alto Networks firewall. One such feature is the "vsys" feature ( ). Knowing when the limitation on number of possible vsys's is nearing would help avoid issues during a maintenance.

Without Indeni how would you find this?

An administrator would be required to write a script. Alternatively, when creating a new vsys after the limit was reached, the web interface will provide an error message.

View Source Code