Template Push to Firewall Failing With Error "Plugin version in the device is greater than the version present in tpl config"

Template Push to Firewall Failing With Error "Plugin version in the device is greater than the version present in tpl config"

5839
Created On 08/28/20 20:35 PM - Last Modified 09/07/21 00:35 AM


Symptom


  • Pushing config from Panorama to firewall commit-all shows push is failed and we see following progress.
          Push is stuck in pending state and progress bar shows 0%
         User-added image
 
  • From the configd.logs on the Firewall we see Error "Plugin version in the device is greater than the version present in tpl config"
2020-08-27 19:04:40.760 -0400 Commit All job 3154 scheduled
2020-08-27 19:04:40.761 -0400 CommitAll job started processing. Dequeue time=2020/08/27 19:04:40. JobId=3154.User: admin
2020-08-27 19:04:40.763 -0400 Error:  pan_commitall_tpl_task_func(pan_ops_cms.c:2140): Plugin version in the device is greater than the version present in tpl config
2020-08-27 19:04:40.763 -0400 Error:  pan_commitall_tpl_task_func(pan_ops_cms.c:2140): Plugin version in the device is greater than the version present in tpl config


 


Environment


  • Panorama configured with managed Firewalls connected
  • Plugin installed on both Panorama and Firewall


Cause


Firewall plugin is higher version than the Panorama. This causes push to fail.

Resolution


Install same versions on both Firewall and Panorama.
  1. Panorama: Navigate to Panorama> Plugin
  2. Firewall: Navigate to Panorama>Device deployment> Plugin or directly on Firewall GUI: Device> Plugin


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAYTCA4&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail