Commit error on Panorama for Prisma Access sub-tenants : interface "-' is not a valid reference

Commit error on Panorama for Prisma Access sub-tenants : interface "-' is not a valid reference

2348

Created On 08/14/22 17:05 PM - Last Modified 06/28/24 02:28 AM

Mobile Users

Multi-tenant

Prisma Access

Prisma Access (Panorama Managed)

Symptom

Commits on Panorama with multi-tenancy enabled throws commit errors for sub-tenants:

commit-validation-error

Under GlobalProtect Portal Network settings there is no interface configured from the Panorama UI:

gp-portal-interface-from-PanoramaUI

However when we check the configuration from the CLI of the Prisma Access MU instance we see the GP interface value set to ' - ' :

interface-value-from-CLI

Deleting the interface value ' - ' from the CLI does not help.

Environment

Panorama managed - Prisma Access
Prisma Access - multi tenant environment

Cause

Multi-tenant configuration is imported on Panorama incorrectly. OR
The multi-tenant configuration on Panorama is incorrect and not as per documentation: Add Tenants to Prisma Access.

Resolution

Import the configuration and re-configure Panorama by using the steps outlined in the following article.
How to import configuration file containing Prisma access Multi-tenant into panorama.

Additional Information

Note: Once multi-tenant is enabled and the tenants are created, a local commit on Panorama is needed before configuring any onboarding entries