Commit failed with "Error: Duplicate application name '****" message.
66434
Created On 10/28/21 06:17 AM - Last Modified 11/02/22 00:04 AM
Symptom
- Not able to commit on a firewall.
- The following errors are appeared in "ms.log". For example:
Error: Duplicate application name 'addp-base' (Module: device) 2021-10-16 09:29:46.244 +0900 client device reported Phase 1 FAILED 2021-10-16 09:29:46.244 +0900 Error: pan_mgmt_client_table_do_commit(pan_cfg_commit_jobs.c:3764): phase 1 failed 2021-10-16 09:29:46.255 +0900 Error: pan_cfg_commit_to_local_device(pan_cfg_commit_handler.c:3281): Commit failedIn this sample, it caused by 'addp-base'.
Environment
- Firewall
- The customer uses "download-only" action in Dynamic Updates for Content Update.
- The Content(App) version on Panorama is higher than the Content(App+Threat) version on Firewall.
Cause
There can be multiple causes for the issue.
- When "download-only" option is used under the schedule for dynamic updates, the newer application versions will not get installed.
- It happens when the Content (App version) on the Panorama is higher than the Firewalls Content (App+Threat) version and Panorama is pushing a config with reference to a new application ID like security policy etc.
- The Firewall will not understand this new App-ID and hence the commit will fail.
- In this sample, app-version never updated from 769-4439.
> show system info ... time: Tue Oct 19 13:59:01 2021 uptime: 132 days, 23:18:44 ... sw-version: 8.1.17 global-protect-client-package-version: 0.0.0 app-version: 769-4439 <<<---!!! Never updated content version app-release-date: av-version: 0 av-release-date: threat-version: 0 threat-release-date: wf-private-version: 0
Resolution
- Update the content release to the latest one from Device > Dynamic Updates
- Commit. (If issue persist continue to Step 3.)
- Go to Device > Dynamic Updates > click "Check Now"
- Download the latest "Applications and Threats" version
- Wait until download completes
- Go to CLI of the firewall and run the command to
> request content upgrade install force yes commit no file <file name of the content downloaded>
- Go to firewall dashboard and verify Application version is updated
- Verify if commit is successful