License Expiry for TZ 80 Firewall

This section provides an overview of the different operational modes and functionalities of a firewall based on its licensing status. It covers unregistered devices, active licenses, and expired licenses. The firewall offers various features during the 30-day, 60-day, and 90-day grace periods that follow a license expiration. Some of the key features include configuration mode, packet forwarding capabilities, registration requirements, feature availability, system reset options, user interface (UI) and command-line interface (CLI) notifications, and administrative privileges.

Unregistered Device	Active License	Expired License
		30-day Grace Period	60-day Grace Period	90-day Grace Period
The firewall will be in configuration mode.	The firewall will be in configuration mode.	The firewall will be in configuration mode.	The firewall will be in non-configuration mode.	The firewall will be in non-configuration mode.
Packet Forwarding is not allowed.	The firewall allows end-to-end functionality to be performed.	A banner or message is displayed in the firewall UI and CLI to prompt license renewal during the 30-day grace period.	A banner or message is displayed in the firewall UI and CLI to prompt license renewal during the 60-day grace period.	A banner or message is displayed in the firewall UI and CLI to prompt license renewal during the 90-day grace period.
Successful registration requires valid MSW credentials.	Firewall features that require a license can be configured.	Firewall features that require a license can be configured, except for security services.	Firewall configuration is not allowed.	Firewall configuration is not allowed.
License data not available.	Licensed features are fully operational in the firewall.	Licensed features are fully operational in the firewall, except for security services.	Restart and restore factory defaults are permitted via the UI, CLI, or API.	Restart and restore factory defaults are permitted via the UI, CLI, or API.
The banner and message are displayed in the Firewall UI and CLI.	Licensed features are configurable accordingly to user privilege	Licensed features are configurable accordingly to user privilege, except for security services.	Safemode is allowed.	Safemode is allowed.
	Licensed features function according to user privileges.	Licensed features function according to user privileges, except for security services.	Packets forwarding is allowed.	Packets forwarding is not allowed.
	Packets forwarding is allowed.	Packets forwarding is allowed.	The backup of firewall settings to both local and cloud storage is not allowed.	The backup of firewall settings to both local and cloud storage is not allowed.
	Multiple users are allowed to log in with full administrator privileges.	Multiple users are allowed to log in with full administrator privileges.	Upgrading the firmware is not allowed.	Upgrading the firmware is not allowed.
		End to End functionality is allowed, except for security services.	EXP/TSR/Logs and Packet Capture is allowed.	EXP/TSR/Logs and Packet Capture is allowed.