Commit failure with validation error "deviceconfig -> setting -> management -> quota-settings -> chassis-quota -> log-card is missing 'decryption'"

Commit failure with validation error "deviceconfig -> setting -> management -> quota-settings -> chassis-quota -> log-card is missing 'decryption'"

8878
Created On 09/19/22 16:50 PM - Last Modified 12/06/23 03:40 AM


Symptom


  • When trying to validate or Commit, error message "log card is missing 'decryption' is seen
Validation Error:
deviceconfig -> setting -> management -> quota-settings -> chassis-quota -> log-card is missing 'decryption'
deviceconfig -> setting -> management -> quota-settings -> chassis-quota -> log-card is invalid
deviceconfig -> setting -> management -> quota-settings -> chassis-quota is invalid
deviceconfig -> setting -> management -> quota-settings is invalid
deviceconfig -> setting -> management is invalid
deviceconfig -> setting is invalid
deviceconfig is invalid
devices is invalid


Environment


  • Palo Alto Firewalls or Panorama
  • Supported PAN-OS
  • Commit Process


Cause


Decryption quota settings is not set.

Resolution


  1. Go to GUI: Device > Setup > Management > Logging and Reporting Settings > Session Log Storage.
  2. Navigate to Decryption and allocate the quota for Decryption as shown below.
  3. Commit the changes.
  4. If the Firewall is managed by Panorama, Do the similar settings on the template of Panorama.
  5. Do a local "Commit" on Panorama and "Push" the changes to Firewall.
image.png

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000wlalCAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language