Commit failed with "Error: Duplicate application name '****" message.

Commit failed with "Error: Duplicate application name '****" message.

66434
Created On 10/28/21 06:17 AM - Last Modified 11/02/22 00:04 AM


Symptom


  • Not able to commit on a firewall.
  • The following errors are appeared in "ms.log". For example: 
Error: Duplicate application name 'addp-base'
(Module: device)
2021-10-16 09:29:46.244 +0900 client device reported Phase 1 FAILED
2021-10-16 09:29:46.244 +0900 Error:  pan_mgmt_client_table_do_commit(pan_cfg_commit_jobs.c:3764): phase 1 failed

2021-10-16 09:29:46.255 +0900 Error:  pan_cfg_commit_to_local_device(pan_cfg_commit_handler.c:3281): Commit failed
In this sample, it caused by 'addp-base'.
 


Environment


  • Firewall
  • The customer uses "download-only" action in Dynamic Updates for Content Update.
  • The Content(App) version on Panorama is higher than the Content(App+Threat) version on Firewall. 


Cause


There can be multiple causes for the issue.
  • When "download-only" option is used under the schedule for dynamic updates, the newer application versions will not get installed.
  • It happens when the Content (App version) on the Panorama is higher than the Firewalls Content (App+Threat) version and Panorama is pushing a config with reference to a new application ID like security policy etc.
  • The Firewall will not understand this new App-ID and hence the commit will fail. 
  • In this sample, app-version never updated from 769-4439.
> show system info

...
time: Tue Oct 19 13:59:01 2021
uptime: 132 days, 23:18:44
...
sw-version: 8.1.17
global-protect-client-package-version: 0.0.0
app-version: 769-4439   <<<---!!! Never updated content version
app-release-date:
av-version: 0
av-release-date:
threat-version: 0
threat-release-date:
wf-private-version: 0


Resolution


  1. Update the content release to the latest one from Device > Dynamic Updates
  2. Commit. (If issue persist continue to Step 3.)
  3. Go to Device > Dynamic Updates > click "Check Now"
  4. Download the latest "Applications and Threats" version
  5. Wait until download completes
  6. Go to CLI of the firewall and run the command to  
    > request content upgrade install force yes commit no file <file name of the content downloaded>
  7.  Go to firewall dashboard and verify Application version is updated
  8.  Verify if commit is successful


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMh2CAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language