Unable to commit to FW from Panorama error Management server failed to send phase 1 to client ikemgr

Unable to commit to FW from Panorama error Management server failed to send phase 1 to client ikemgr

28204
Created On 01/28/20 19:41 PM - Last Modified 07/28/20 22:00 PM


Symptom


  • After upgrading Panorama to 9.1.0 unable to commit template stack to FW.
  • Error Management server failed to send phase 1 to client ikemgr


Environment


  • Panorama 9.1.0
  • FW running 8.1.x < 8.1.15 or 9.0.x < 9.0.9
  • FW has IPsec tunnel configured from panorama with dynamic peer


Cause


SW issue PAN-120614
 


Resolution


Upgrade FW to a release or post release with the fix 8.1.15, 9.0.9 and 9.1.0
Or
Downgrade Panorama back to the previous release from which it was upgraded.
 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PORJCA4&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language