Unable to perform commit to Firewall from the Panorama due to new URL Filtering Categories.

Unable to perform commit to Firewall from the Panorama due to new URL Filtering Categories.

6549
Created On 12/16/19 05:36 AM - Last Modified 07/06/20 22:49 PM


Symptom
Unable to Push the commit to the Firewall. You are seeing commit failures with categories which are not referenced.
Here is a sample:
 
profiles -> url-filtering -> MS_O365_Allowed_URLs -> credential-enforcement -> block 'cryptocurrency' is not a valid reference
profiles -> url-filtering -> MS_O365_Allowed_URLs -> credential-enforcement -> block 'grayware' is not a valid reference
profiles -> url-filtering -> MS_O365_Allowed_URLs -> credential-enforcement -> block is invalid


 


Environment
  • Any Panorama
  • Any PAN-OS
  • Application and Threat version on the Firewall is a lower version as compared to the Panorama.


Cause

This issue happens when you are running an older Application and Threat version on Firewall as compared to the Panorama.

The Panorama had new URL filtering category that the firewall did not have, as we introduced new URL categories and applications with the newest Application and Threat version.



Resolution

A quick fix is to have the same Application & Threat version on the Panorama and the Firewall.



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNqw&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language