topic Re: PA-410 bug - disable-predefined-reports in Next-Generation Firewall Discussions

PA-410 bug - disable-predefined-reports

jasonroy — Fri, 12 Jan 2024 20:13:48 GMT

PA-410 running PAN-OS 11.1.0. This firewall had been upgrade from 10.2.latest to 11.1.0.

After making an unrelated change to mitigate CVE-2023-48795, validate fails with:

Could not get schema node for xpath /config/devices/entry[@name='localhost.localdomain']/deviceconfig/setting/management/disable-predefined-reports

Commits fail with:

deviceconfig -> setting -> management -> disable-predefined-reports unexpected here

Fix was to save and export the config, find and delete the disable-predefined-reports, then import and load.

nccbhr — Fri, 19 Jan 2024 14:59:36 GMT

Many thanks, had this problem 2 days ago and was hoping to find a fix. this resolved it

Knight5X — Fri, 19 Jan 2024 15:53:52 GMT

Where to go to delete this report?

nccbhr — Fri, 19 Jan 2024 15:57:16 GMT

as Jason outlined

"Fix was to save and export the config, find and delete the "disable-predefined-reports" line, then import and load the config."

Knight5X — Fri, 19 Jan 2024 16:22:58 GMT

Thank you. That worked awesome.

xiangwu — Thu, 25 Jan 2024 20:51:10 GMT

It worked for me too, thanks.