When configuring an NGFW Cluster, selective push fails with the error message "Failed to generate selective push configuration. Schema validation failed. Please try a full push."

When configuring an NGFW Cluster, selective push fails with the error message "Failed to generate selective push configuration. Schema validation failed. Please try a full push."

1171
Created On 09/30/25 06:39 AM - Last Modified 03/25/26 00:20 AM


Symptom


  • Selective push fails after PA-7500 added to NGFW Cluster.
  • Error message "Fail to generate selective push configuration. Schema validation failed. Please try a full push" is seen.
admin@M-300> show jobs id 1381507
Enqueued              Dequeued           ID                              Type                         Status Result Completed
------------------------------------------------------------------------------------------------------------------------------
2025/09/29 14:23:19   14:23:19      1381507                         CommitAll                            FIN   FAIL 100 %
Description:
Details:Type: Admin-based
Failed to generate selective push configuration. Schema validation failed. Please try a full push.
 -     05000XXXXXXX             commit failed   FAIL 09:00:00
 -     05000YYYYYYY             commit failed   FAIL 09:00:00
admin@M-300>


Environment


  • Panorama with Managed PA-7500 Firewall
  • PAN-OS: 11.1.x
  • NGFW Cluster


Cause


Selective push is not supported for clustering.



Resolution


Do a full push instead of a selective push.



Additional Information


Note: Clustering is supported on 7500 and 5500 Firewalls



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000bltlKAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail