Getting errors While commiting the config from panorama to Palo-Alto

Sujanya — Mon, 26 Sep 2022 13:53:03 GMT

We have on-boarded new standalone firewall of model 410 to Panorama and tried to configure them via templates. In Template stack we have added FW template (as priority )+ global. and we are getting below error while commiting the configurations to firewall.

devices -> localhost.localdomain -> template-stack -> FW_stack -> config -> devices -> localhost.localdomain -> deviceconfig -> high-availability is missing 'interface'
devices -> localhost.localdomain -> template-stack -> FW_stack -> config -> devices -> localhost.localdomain -> deviceconfig -> high-availability is invalid
devices -> localhost.localdomain -> template-stack -> FW_stack -> config -> devices -> localhost.localdomain -> deviceconfig is invalid
devices -> localhost.localdomain -> template-stack -> FW_stack -> config -> devices is invalid
devices -> localhost.localdomain -> template-stack -> FW_stack -> config is invalid

Re: Getting errors While commiting the config from panorama to Palo-Alto

PavelK — Mon, 26 Sep 2022 22:16:14 GMT

Hello @Sujanya

thank you for the post!

From this error, it looks like that HA configuration in Template is incomplete. Either HA1 or HA2 links do not have assigned interface. I would recommend to go through Template configuration and review HA part.

Kind Regards

Pavel

topic Re: Getting errors While commiting the config from panorama to Palo-Alto in Next-Generation Firewall Discussions

Getting errors While commiting the config from panorama to Palo-Alto

Re: Getting errors While commiting the config from panorama to Palo-Alto