Unable to perform commit to Firewall from the Panorama due to new URL Filtering Categories.
25258
Created On 12/16/19 05:36 AM - Last Modified 07/06/20 22:49 PM
Symptom
Unable to Push the commit to the Firewall. You are seeing commit failures with categories which are not referenced.
Here is a sample:
profiles -> url-filtering -> MS_O365_Allowed_URLs -> credential-enforcement -> block 'cryptocurrency' is not a valid reference profiles -> url-filtering -> MS_O365_Allowed_URLs -> credential-enforcement -> block 'grayware' is not a valid reference profiles -> url-filtering -> MS_O365_Allowed_URLs -> credential-enforcement -> block is invalid
Environment
- Any Panorama
- Any PAN-OS
- Application and Threat version on the Firewall is a lower version as compared to the Panorama.
Cause
This issue happens when you are running an older Application and Threat version on Firewall as compared to the Panorama.
The Panorama had new URL filtering category that the firewall did not have, as we introduced new URL categories and applications with the newest Application and Threat version.
Resolution
A quick fix is to have the same Application & Threat version on the Panorama and the Firewall.