Running Config Not Synchronized after Upgrading One Peer in HA Pair

Running Config Not Synchronized after Upgrading One Peer in HA Pair

80028
Created On 09/25/18 19:38 PM - Last Modified 02/27/26 22:53 PM


Symptom


  • Upgrade attempted on Firewall HA pair.
  • After upgrade of one of the Firewall, the running configuration shows out of sync. The mismatch is shown in the High Availability widget.

Environment


  • Next-Gen Firewalls
  • Supported PAN-OS
  • High Availability (HA)
  • Software Upgrade

Cause


  • Configuration mismatch seen after upgrading only one device in the pair is expected.
  • The message that the running config is not synchronized is caused by the possible different layout of the XML configuration file in the new version.

Resolution


  1. Complete the upgrade of the second peer Firewall.
  2. The warning disappears as soon as the upgrade procedure on the second peer is completed when the software version on both peers are identical.
  3. If the upgrade is completed on both peers and the issue is still seen, Open a Support case.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaXCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language