Export and Push to Mutli-Vsys Firewall cause duplicates Vsys entries

• On the Firewall, the virtual system appears with a duplicate entry.
   
  
  
• On the Panorama, the managed device view shows the duplicate virtual systems.
   

• Panorama managed Next Gen Firewalls (NGFW)
• PAN-OS 10.2 and above
• Managed Firewalls in multi-vsys mode

Change in behavior introduced in PAN-OS 10.2 requires a full push after the initial export push to a multi-vsys firewall.

On Panorama, after the initial configuration export,  it is expected to perform a full push to the device.

1. Go to Commit
2. Click on Push to Devices
3. Select the option Push All changes
4. (optional) Edit the selection to push only to the specific device(s)
5. Click on Push

Once the push is successful, the duplicates entries will disappear.

• In multi-VSYS configuration Push from Panorama fails with message "already in use" after PAN-OS upgrade
• Changes to Default Behavior in PAN-OS 10.2