Error: "application 'DLP App Exclusion Filter' is not a valid reference" seen while editing Session Settings
707
Created On 07/04/25 13:18 PM - Last Modified 05/05/26 09:21 AM
Symptom
The following error appears after clicking the OK button under Device > Setup > Session > Session Settings (regardless of changes made):
deviceconfig -> plugins -> dip -> internal -> dip-data-profiles -> enterprise-dip -> exclusion-list -> application 'DLP App Exclusion Filter' is not a valid reference
deviceconfig -> plugins -> dip -> internal -> dip-data-profiles -> enterprise-dip -> exclusion-list -> application is invalid
Environment
- Any Palo Alto Networks Firewall with an Enterprise DLP license
- This issue was introduced in the PAN-OS versions below:
- 10.2.6
- 11.0.4
- 11.1.0
- 11.2.0
Resolution
This issue was fixed under PAN-257616 in the PAN-OS versions listed below:
- 10.2.17
- 11.1.6-h23
- 11.1.10-h10
- 11.1.11
- 11.2.8
The settings can be modified from the CLI to work around this issue:
admin@FW1(active)> configure
admin@FW1(active)# set deviceconfig setting session <your setting that you want to change>
admin@FW1(active)# commit
For example, to change the TCP timeout:
admin@FW1(active)> configure
admin@FW1(active)# set deviceconfig setting session timeout-tcp 10
admin@FW1(active)# commit