Commit failed due to Validation Error-profiles -> custom-url-category is invalid as already in use
13583
Created On 02/12/23 22:05 PM - Last Modified 02/10/25 21:03 PM
Symptom
Commit to firewall or push to managed firewall fails with the validation error message below:
Validation Error:
profiles -> custom-url-category -> Test_Custom_URL 'Test_Custom_URL' is already in use
profiles -> custom-url-category is invalid
Error: Internal Error(Module: device)
client device phase 1 failure
Commit failedEnvironment
- Any Panorama
- PAN-OS 9.1 or later
- Commit push to firewall
Cause
- This validation fails when the firewall detects a duplicate object being pushed from Panorama with the same name that already exists on the firewall
- It may be an object that is already created locally on the firewall or pushed from another DG to the firewall.
Resolution
- Locate the duplicate object on the Firewall
- Rename the object to a different name or delete the object (if it is local).
- This can be performed either from CLI or GUI.
- commit to the Firewall.
- Push from Panorama should work fine now.
Additional Information
In 9.0 and earlier, the Panorama config would overwrite the existing object config on the firewall. However, in 9.1 and later the schema was changed so that this would cause a validation error.