Error: "application 'DLP App Exclusion Filter' is not a valid reference" seen while editing Session Settings

Error: "application 'DLP App Exclusion Filter' is not a valid reference" seen while editing Session Settings

707
Created On 07/04/25 13:18 PM - Last Modified 05/05/26 09:21 AM


Symptom


The following error appears after clicking the OK button under Device > Setup > Session > Session Settings (regardless of changes made):

deviceconfig -> plugins -> dip -> internal -> dip-data-profiles -> enterprise-dip -> exclusion-list -> application 'DLP App Exclusion Filter' is not a valid reference
deviceconfig -> plugins -> dip -> internal -> dip-data-profiles -> enterprise-dip -> exclusion-list -> application is invalid



Environment


  • Any Palo Alto Networks Firewall with an Enterprise DLP license
  • This issue was introduced in the PAN-OS versions below:
    • 10.2.6
    • 11.0.4
    • 11.1.0
    • 11.2.0


Resolution


This issue was fixed under PAN-257616 in the PAN-OS versions listed below:

  • 10.2.17
  • 11.1.6-h23
  • 11.1.10-h10
  • 11.1.11
  • 11.2.8


The settings can be modified from the CLI to work around this issue:

admin@FW1(active)> configure
admin@FW1(active)# set deviceconfig setting session <your setting that you want to change>
admin@FW1(active)# commit

For example, to change the TCP timeout:

admin@FW1(active)> configure
admin@FW1(active)# set deviceconfig setting session timeout-tcp 10
admin@FW1(active)# commit


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000k9w6KAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail