Panorama Commit Validation error about hip-profile running PAN-OS 8.1.x
17372
Created On 10/31/19 21:10 PM - Last Modified 01/21/22 01:45 AM
Symptom
- Validation Error when pushing commit on Panorama
Validation Error:
shared -> profiles -> hip-profiles -> Antivirus-Installed-Win-Profile -> match '"Antivirus-Installed-Win" or
"Antivirus-Installed-Obj"' is invalid. Invalid match criteria
shared -> profiles -> hip-profiles -> Antivirus-Installed-Win-Profile -> match is invalid
devices -> localhost.localdomain -> device-group -> DFW-DA6 -> profiles -> hip-profiles -> OS-Profile ->
match '"Windows" and "MAC-OS" ' is invalid. Invalid match criteria
devices -> localhost.localdomain -> device-group -> DFW-DA6 -> profiles -> hip-profiles -> OS-Profile ->
match is invalid
devices -> localhost.localdomain -> device-group -> TLV-NEW -> profiles -> hip-profiles -> Antivirus-NotInstalled-Profile
-> match '("Win" or "Mac" ) and "Antivirus-NotInstalled"' is invalid. Invalid match criteria
devices -> localhost.localdomain -> device-group -> TLV-NEW -> profiles -> hip-profiles -> Antivirus-NotInstalled-Profile
-> match is invalid
Environment
- Panorama
- PAN-OS 8.1.x
Cause
Validated configurations due to a race condition which is addressed with PAN-97784
Resolution
Upgrade to PAN-OS 8.1.11 to address PAN-97784
or
Workaround:
- Restart the management server on Panorama. Read the note below prior to restarting the management server.
debug software process restart management-server
- Then commit.