Shared Objects and Policies deleted from a device group show up in the Push Scope of Panorama

Shared Objects and Policies deleted from a device group show up in the Push Scope of Panorama

8812
Created On 12/31/22 01:12 AM - Last Modified 10/02/26 05:12 AM


Symptom


  • Shared Objects and Policies deleted from a device group still show up in the Push Scope.

shared objects appear in the Push Scope even though there were no new changes in the configuration and even though a Full push was just applied successfully.

 

  • Logs can be seen in "configd.log" (less mp-log configd.log) file

/var/log/pan/configd.log

2022-11-05 04:05:16.639 +0700 Error: pan_cfg_replaydb_update_pushed(pan_cfg_replaydb.c:3601): Unable to get minimum version!

Environment


  • Panorama
  • Shared Objects and Policies
  • Push Scope

Cause


Stale/Old entries are still stored in replay database.

Resolution


  1. Login to Panorama CLI as a super admin user
  2. Issue the command to clear the replay db record:
request clean-replay entries all
  1. Full Push (all firewalls/vsys) for all admins

Additional Information


 The "request clean-replay entries all" command will also cause the "Commit Date" and "Object Changes" fields in the Config Audit (Panorama > Config Audit) to be cleared.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kFyOCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language