Commit failure with validation error "deviceconfig -> setting -> management -> quota-settings -> chassis-quota -> log-card is missing 'decryption'"
8878
Created On 09/19/22 16:50 PM - Last Modified 12/06/23 03:40 AM
Symptom
- When trying to validate or Commit, error message "log card is missing 'decryption' is seen
Validation Error:
deviceconfig -> setting -> management -> quota-settings -> chassis-quota -> log-card is missing 'decryption'
deviceconfig -> setting -> management -> quota-settings -> chassis-quota -> log-card is invalid
deviceconfig -> setting -> management -> quota-settings -> chassis-quota is invalid
deviceconfig -> setting -> management -> quota-settings is invalid
deviceconfig -> setting -> management is invalid
deviceconfig -> setting is invalid
deviceconfig is invalid
devices is invalidEnvironment
- Palo Alto Firewalls or Panorama
- Supported PAN-OS
- Commit Process
Cause
Decryption quota settings is not set.
Resolution
- Go to GUI: Device > Setup > Management > Logging and Reporting Settings > Session Log Storage.
- Navigate to Decryption and allocate the quota for Decryption as shown below.
- Commit the changes.
- If the Firewall is managed by Panorama, Do the similar settings on the template of Panorama.
- Do a local "Commit" on Panorama and "Push" the changes to Firewall.