Validation error commit failed with application-status is invalid
53467
Created On 10/29/20 15:51 PM - Last Modified 11/17/20 19:50 PM
Symptom
After Application and threat upgrade to 8333-6359 or 8334-6362
Details: . Validation Error: . vsys -> vsys1 -> application-status -> amazon-chime 'amazon-chime' is not a valid reference . vsys -> vsys1 -> application-status is invalid . Commit failed
Environment
- PAN-OS
- Dynamic updates
Cause
These were disabled from Panorama and the change was pushed to the FW prior to the upgrade:
- amazon-chime-base
- amazon-chime-conferencing
- amazon-chime-instant-messaging
- amazon-chime-screen-sharing
Resolution
- Enable the following applications on Panorama:
- amazon-chime-base
- amazon-chime-conferencing
- amazon-chime-instant-messaging
- amazon-chime-screen-sharing
- under the device-group of the particular firewall.
- Commit that change on Panorama.
- Downgrade the firewall to same older version of content which is now installed on Panorama 8332-6358
- Push the config from panorama to firewall in order to enable those applications on firewall for pushed Panorama apps changes.
- Check under both Panorama > device-group which is related to firewall that you have those 5 apps enabled.
- Check under the local Firewall that you have those 5 apps enabled.
Now upgrading the content version to 8334-6362 or later contents on Panorama and firewall should no longer cause the validation errors related to amazon-chime app.