Commit validation fails with "pbf rule 'XXXX': custom-url-category 'YYYY' is invalid (regex ^(\*\.)?[a-zA-Z0-9_][a-zA-Z0-9_\.\-]*$. Failed plugin validation" message.

Commit validation fails with "pbf rule 'XXXX': custom-url-category 'YYYY' is invalid (regex ^(\*\.)?[a-zA-Z0-9_][a-zA-Z0-9_\.\-]*$. Failed plugin validation" message.

4360
Created On 06/15/22 03:03 AM - Last Modified 01/05/24 12:32 PM


Symptom


Commit validation failure occurs with the following message when executing commit and push from their Panorama.

pbf rule 'XXXX': custom-url-category 'YYYY' is invalid (regex ^(\*\.)?[a-zA-Z0-9_][a-zA-Z0-9_\.\-]*$. Failed plugin validation

 



Environment


  • Prisma Access
  • Panorama with Cloud Service plugin 2.2


Cause


The cause of this commit validation error is Changes to Default Behavior on cloud service plugin 2.2 Preferred.  
https://docs.paloaltonetworks.com/prisma/prisma-access/preferred/2-2/prisma-access-panorama-release-notes/prisma-access-about/changes-to-default-behavior

Trailing Slashes Not Allowed for Traffic Steering URLs

If you created custom URL categories and use them in a traffic steering rule, do not enter a trailing slash (/) to URLs (for example, example.com/). If you have any trailing slashes in URLs and use them in traffic steering rules, you should remove them before you upgrade the plugin to 2.2 Preferred, or you will receive an error when you Commit and Push your changes.


Cloud Service plugin 2.2 blocks trailing slash and causes commit validation error.
 



Resolution


There are two solutions to avoid this issue.

Solution 1

  1. Remove trailing slashes from custom URL categories which is used for Traffic Steering rule with cloud service plugin 2.2.
  2. Then commit and push again.
  3. Note that matching rule might be changed.

 

Solution 2

  1. Upgrade cloud service plugin to 3.0 or later and remove trailing slashes from custom URL categories used for Traffic Steering rule.
  2. Then tickle "Append the ending token to the URLs in the URL filtering configuration" under 'Miscellaneous' tab.
  3. After that, commit and push again.
  4. The tab appears in the following section when using cloud service plugin 3.0 or later.

  Panorama UI > Panorama tab > Cloud services > Configuration >> Service Setup tab >> click gear icon on Settings

image.png

 

 

 

 

 

 

 

 

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000Cq3CCAS&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language