Validation errors in Palo Alto software version 10.1.6-h3

Abdur_Rahman — Tue, 24 Jan 2023 07:18:58 GMT

If you found "shared policy & template" are "Not in Sync" with Panorama with the below validation errors.

Security group 'XXXXXXX' is not a valid reference

rulebase->xxx-> profile-setting is invalid

URL filtering profile -> is already in use

This is because of bug in 10.1.6-h3 software version.

Work around is

To execute below command from firewall cli

#load config from running-config.xml

#Commit force

Note: Do this once if same validation error do twice to fix validation errors

topic Validation errors in Palo Alto software version 10.1.6-h3 in Next-Generation Firewall Discussions