Commit-All from Panorama to the Firewall fails with error "scanning-activity" is not a valid reference

• URL Filtering configured
• Push from Panorama to the Firewall fails with the following error

profiles -> url-filtering -> XXXXXXXX -> credential-enforcement -> block "scanning-activity" is not a valid reference

• Panorama managed Firewalls
• PAN-OS 9.1 or higher
• content version below 8729
• Advanced URL Filtering

• A new category “scanning-activity” was introduced to the Advanced URL Filtering/PANDB category list in content version 8729.
• Panorama running content version 8729 or higher tries to push the config to firewall with content version lower than  8729. 
• Since the option is not available on the content version of firewall, push fails.

1. Upgrade the content version on the Firewall to match the Panorama.
2. This should be 8729 or higher.