Unable to push policy from Strata to Palo Alto

Atul_Jaiswal — Tue, 29 Oct 2024 20:11:45 GMT

Unable to push configuration from Strata Cloud Manager to Palo Alto firewall

Error - Routing stack mode of the device doesn't match the one for the tenant

Re: Unable to push policy from Strata to Palo Alto

mrappard — Fri, 15 Nov 2024 15:23:54 GMT

I was able to solve this by switching to advanced routing on the NGFW.

From the UI you can do it at Device->Setup->Management->General Settings Widget

Or from the CLI:

> show system info | match model\|sw-\|advanced-routing
hostname: abc
sw-version: xyz
advanced-routing: off <<<

> configure
# set deviceconfig setting advance-routing yes

# commit

# run request restart system

In SCM, I also see under Workflows -> NGFW Setup -> Device Management in the Action column an option to "Change Routing Mode".