Zone Protection profile pushed from Panorama to VM-100 in Azure

tonyrobson — Wed, 08 Apr 2020 09:31:41 GMT

Hi all,

I am having recurring issues deploying zone protection profiles for VM series firewalls in Azure, from Panorama templates, revolving around SCTP settings, whenever I try to push the template the commits are failing with the below error -

Details:
. Validation Error:
. network -> profiles -> zone-protection-profile -> Untrusted_Zone-VM100 -> flood -> sctp-init constraints failed : SCTP security is not enabled
. network -> profiles -> zone-protection-profile -> Untrusted_Zone-VM100 -> flood -> sctp-init is invalid

However the SCTP settings are not configured on the profile, the tick box is unchecked and settings unchanged.

Enabling SCTP allows for it to be accepted, but I don't want to unnecessarily enable it across all the firewalls, it's not enabled on the hardware based firewalls, so why should I have to on the VM series firewalls? Has anyone else had this issue before, I feel it must be something obvious I am missing but I can't seem to see it?

Thanks.

Tony.

Re: Zone Protection profile pushed from Panorama to VM-100 in Azure

EnsanOdeh — Tue, 02 Nov 2021 02:45:42 GMT

Tony I have the same issue. Was your resolved ?

Re: Zone Protection profile pushed from Panorama to VM-100 in Azure

tonyrobson — Tue, 02 Nov 2021 10:45:48 GMT

It was but I can't 100% remember what I did to solve it unfortunately, is it enabled on your panorama?

topic Zone Protection profile pushed from Panorama to VM-100 in Azure in VM-Series in the Public Cloud

Zone Protection profile pushed from Panorama to VM-100 in Azure

Re: Zone Protection profile pushed from Panorama to VM-100 in Azure

Re: Zone Protection profile pushed from Panorama to VM-100 in Azure