Not a Valid Reference Error when Pushing a Commit from Panorama
95001
Created On 09/26/18 13:51 PM - Last Modified 05/12/22 14:05 PM
Symptom
- Pushing a commit from Panorama to a managed Firewall or Device group reports a reference validation error:
Details: . Validation Error: . profiles -> virus -> <av_profile_name> -> mlav-engine-filebased-enabled -> MSOffice 'MSOffice' is not a valid reference . profiles -> virus -> <av_profile_name> -> mlav-engine-filebased-enabled is invalid . Commit failed
Environment
- Palo Alto Panorama
- Palo Alto Firewall
- All PAN-OS versions
Cause
The Panorama Apps & Threat version doesn't match with Firewall's Apps & Threat version. Due to this mismatch the Firewall is not aware of the content that the Panorama is trying to push as it does not exist in its local database yet.
Resolution
Update the Application & Threats database on the Firewall to match the version on Panorama
- On Firewall, navigate to:
- Device > Dynamic Updates > Applications and Threats > download and install the desired version.