Firewall onboarding to Panorama is fails with error message "Config bundle is too large to be exported to device"

Firewall onboarding to Panorama is fails with error message "Config bundle is too large to be exported to device"

1000
Created On 04/16/25 11:54 AM - Last Modified 02/06/26 21:54 PM


Symptom


  • "Export or push device config bundle" step of the Panorama onboarding process is executed.
  • The commit now fails with the following error message: 
    Config bundle is too large to be exported to device <serial number>. Disable share-unused-objects flag to reduce configuration size.


Environment


  • Panorama managed Firewalls
  • Supported PAN-OS
  • Dynamic updates are not installed on the firewall


Cause


  • Dynamic updates are not installed on the firewall before importing the configuration to Panorama.
  • This causes extra information to be added in the configuration, Thereby increasing the size of configuration beyond the supported values.


Resolution


  1. Install the dynamic updates on the firewall.
  2. Push the config bundle from the Panorama to Firewall again.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000TN4nKAG&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail