Panorama push scope indicate to push the keys and secret every time
9252
Created On 09/11/22 07:46 AM - Last Modified 10/27/22 02:29 AM
Symptom
Everytime a change is made on the panorama, commit is complete and push is initiated, the push scope indicates that there are changes like phash are modified.
Environment
- Any Panorama
- PAN-OS 10.1.6, 10.1.5-h2, 10.1.6-h3
Cause
- During "Preview Changes", operation, In panorama, key was not decrypted before sending to firewall because firewall device software version was not updated correctly.
- Due to this key is encrypted twice (as firewall encrypts it again) when displaying diff.
- No issues are seen during push. (only diff will show it as modified)
Resolution
- There are no impacts for this issue and the keys are not actually changed during the push.
- The issue is fixed on the PAN-OS 10.1.8 and 10.2.4.