Unable to commit to FW from Panorama error Management server failed to send phase 1 to client ikemgr

Unable to commit to FW from Panorama error Management server failed to send phase 1 to client ikemgr

16153
Created On 01/28/20 19:41 PM - Last Modified 07/28/20 22:00 PM


Symptom
  • After upgrading Panorama to 9.1.0 unable to commit template stack to FW.
  • Error Management server failed to send phase 1 to client ikemgr


Environment
  • Panorama 9.1.0
  • FW running 8.1.x < 8.1.15 or 9.0.x < 9.0.9
  • FW has IPsec tunnel configured from panorama with dynamic peer


Cause
SW issue PAN-120614
 


Resolution
Upgrade FW to a release or post release with the fix 8.1.15, 9.0.9 and 9.1.0
Or
Downgrade Panorama back to the previous release from which it was upgraded.
 


Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PORJ&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language