Panorama commit errors about hip-profile

Panorama commit errors about hip-profile

3801
Created On 10/31/19 21:10 PM - Last Modified 11/06/20 01:05 AM


Symptom
Validation Error:
shared -> profiles -> hip-profiles -> Antivirus-Installed-Win-Profile -> match '"Antivirus-Installed-Win" or 
"Antivirus-Installed-Obj"' is invalid. Invalid match criteria
shared -> profiles -> hip-profiles -> Antivirus-Installed-Win-Profile -> match is invalid
devices -> localhost.localdomain -> device-group -> DFW-DA6 -> profiles -> hip-profiles -> OS-Profile -> 
match '"Windows" and "MAC-OS" ' is invalid. Invalid match criteria
devices -> localhost.localdomain -> device-group -> DFW-DA6 -> profiles -> hip-profiles -> OS-Profile ->
 match is invalid
devices -> localhost.localdomain -> device-group -> TLV-NEW -> profiles -> hip-profiles -> Antivirus-NotInstalled-Profile
 -> match '("Win" or "Mac" ) and "Antivirus-NotInstalled"' is invalid. Invalid match criteria
devices -> localhost.localdomain -> device-group -> TLV-NEW -> profiles -> hip-profiles -> Antivirus-NotInstalled-Profile 
-> match is invalid

 


Environment
  • Any Panorama.
  • PAN-OS 8.1.x


Cause
SW issue PAN-97784

Resolution
Upgrade to SW post 8.1.11 or post 9.0.0 as these releases have the fix.

or Apply the workaround:
  1. Restart the management server on Panorama. Read the note below prior to restarting the management server.
debug software process restart management-server
  1. Then commit.
Note: Restarting the management server causes candidate config to be deleted and management sessions need to be established after the process restarts. Although no issues are expected, the suggestion is to restart during maintenance hours after backing up the configuration and device state.


Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kcSArticleDetail?id=kA10g000000PNIk&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkcSArticleDetail

Attachments
Choose Language