Getting error "Vsys -> Vsysx -> Address already in use" while trying to push a renamed address object to firewall

Getting error "Vsys -> Vsysx -> Address already in use" while trying to push a renamed address object to firewall

7750
Created On 10/24/22 06:33 AM - Last Modified 09/21/23 21:23 PM


Symptom


  • Panorama is configured with an address object "X" in the shared device group.
  • Panorama also has the same address object "X" configured on a different  device group.
  • Both address objects are already pushed to the firewall.
  • One of the address object X is renamed and committed successfully in Panorama.
  • While trying to push the config to the firewall, validation fails with below error
"Vsys -> Vsysx -> Address already in use"


Environment


  • Panorama managed Palo Alto Firewalls
  • PAN-OS 9.1 or higher
  • Address Objects


Cause


The error is seen when the Address Object with the same name is present on both on shared device group and individual Device Group.

Resolution


  1. Delete the device group specific object X in Panorama.
  2. Do a commit and push to the firewall.
  3. Re-create the object X in the device group with the new name in Panorama
  4. Do a commit and push to the firewall again.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kEhqCAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail