Panorama Template or Device Group fail to commit after upgrading firewalls

Panorama Template or Device Group fail to commit after upgrading firewalls

24809
Created On 09/25/18 19:44 PM - Last Modified 11/06/20 04:41 AM


Symptom


After upgrading firewalls from an older software release to a newer release, Panorama Template or Device Groups may fail to commit.

Example:

Details: 
In VSYS vsys1 from zone Zone-A of type unknown and to zone Zone-B of 
type unknown are incompatible in security rule Test Rule


Environment


  • PAN-OS 7.1 and above.
  • Any Panorama managing Palo Alto Firewalls.
  • Commit Process.

Cause


  • The template virtual system does not have a display name to match the display name on the firewall for each VSYS,
  • So the template push will create a new VSYS instead of reusing the existing VSYS.

Resolution


Add display name in the Panorama template virtual system to match the VSYS name configured in the firewall.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcTCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language