topic Re: Panorama Device Push Fails in Panorama Discussions

Panorama Device Push Fails

EHSErnesto — Mon, 10 Oct 2022 18:14:38 GMT

I am unable to push new configurations to our connected firewalls. It seems to be related to the addition of RADIUS administrators. I can log in with the local admin but even that user can't force the changes through.

Here is an example of the error I am getting. Now, I noticed an issue where my auth profile was listed in panorama as shared in the template, but if you want to the firewall instance it wasn't seen. I tried creating it manually there, but no dice. Now I am stuck not able to commit these pending changes and can't see to remove them to even try to fix the problem. If I could clear what is in the push to devices queue so users can use local accounts for now, that would help.

. Validation Error:
. mgt-config -> users -> radiusadmin -> authentication-profile 'RADIUS with DUO' is not a valid reference
. mgt-config -> users -> radiusadmin -> authentication-profile is invalid
. Commit failed

Re: Panorama Device Push Fails

YEmreSeven — Thu, 13 Oct 2022 21:25:03 GMT

Hi, you can to send device state directly without any commit from Panorama.

Panorama > Setup > Operations > Export or push device config bundle > (select device and OK) > Export

After that load device state from firewall's CLI.

Re: Panorama Device Push Fails

EHSErnesto — Fri, 14 Oct 2022 00:32:42 GMT

I actually solved this with support due to lack of timely response here. Now I was looking at the issues addressed in the 10.2 firmware and I found this which I suspect might have been my issue.

PAN-194782	Fixed an issue on Panorama where, if you added a new local or non-local administrator account or an admin user to a template, authentication profiles were incorrectly referenced.

Going to attempt applying the update next week and then adding my user back to the profile.