Palo Alto Networks Knowledgebase: Error on Commit from Panorama After Migrating Firewalls from BrightCloud to PAN-DB

Error on Commit from Panorama After Migrating Firewalls from BrightCloud to PAN-DB

3773
Created On 07/29/19 17:24 PM - Last Updated 07/29/19 17:51 PM
Cortex Data Lake Panorama
Resolution

Issue

If managed Palo Alto Networks firewalls are migrated from BrightCloud to PAN-DB but Panorama still has BrightCloud, an error may occur when trying to commit from Panorama to the firewalls. The commit error that may appear is:

template > Shared Template > config > devices > localhost.localdomain > deviceconfig > system > update-schedule > url-database Not available for PAN-DB.

Resolution

  1. Disable the shared policies/object and templates settings on the managed devices
    1. Go to Device > Setup > Management tab
    2. Edit Panorama Settings and click 'Disable Panorama Policy and Objects' and 'Disable Device and Network Template'
      Screen Shot 2013-05-21 at 10.16.04 AM.png
    3. Do a local commit on the manage devices
  2. Change the URL-Filtering database on Panorama and managed devices by running the following command (on Panorama and the devices):
    > set system setting url-database (data base name)
  3. On Panorama, run the following commands:
    > configure
    # delete template <template name> config deviceconfig system update-schedule url-database
    # commit
  4. Enable the shared policies/object and templates on the managed devices and commit
  5. Push the template from Panorama to the managed devices.

owner: shasnain



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEDCA0&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language