Error:Conflict default definition for app and
15547
Created On 02/28/20 21:22 PM - Last Modified 12/06/22 01:35 AM
Symptom
Commit pushed from panorama is failing with Error:
Error: Conflict default definition for app and
Environment
- Any Firewall managed by Panorama
- PAN-OS 9.0
- Custom app configured.
Cause
The duplicate custom app causes this issue.
Resolution
- Run the following command:
tail mp-log devsrv.log
Logs similar to the one displayed below are seen.
2020-02-28 15:39:48.221 -0500 Error: pan_config_set_app_ident_by_def(pan_config.c:1386): both user defined app 3767 3658 use the same
default identification 0x1000d0105
2020-02-28 15:39:48.221 -0500 Error: pan_app_app_from_obj(pan_config_parser.c:4051): pan_app_parse_icmp('icmp_blocked_types') failed
- Run the following command:
debug device-server dump idmgr type vsys-application id 3767 (=> id got from above command)
output will be similar to: vsys1+APP_PJC_ICMP_BLOCKED_TYPES
debug device-server dump idmgr type vsys-application id 3658
output will be similar to: vsys1+icmp_blocked_types
- Search under GUI: Panorama >device-group >object >application see which one is in use and which one needs to be deleted relying on the global search
- Delete the unused duplicate custom-app
- Commit to panorama and push to the device-group