topic Re: Cannot push from Panorama to new Devices in Panorama Discussions

Cannot push from Panorama to new Devices

S_Williams901 — Mon, 13 Mar 2023 21:45:11 GMT

Keep getting an error when trying to push to new devices.

Details:
. Failed to refresh EDL config
. Commit failed

I cant seem to fix this issue...Thoughts?

Re: Cannot push from Panorama to new Devices

PavelK — Mon, 13 Mar 2023 22:02:38 GMT

Hello @S_Williams901

have you applied any certificate profile? Could you check this KB whether this applies to you?

Kind Regards

Pavel

Re: Cannot push from Panorama to new Devices

S_Williams901 — Mon, 13 Mar 2023 22:03:25 GMT

None of my EDL lists have cert used.

Re: Cannot push from Panorama to new Devices

PavelK — Mon, 13 Mar 2023 22:36:15 GMT

Thank you for reply @S_Williams901

- What EDLs are failing? Custom or built-in one from Palo Alto? Those coming from Palo Alto (Known malicious IP addresses, High risk IP addresses. etc..) require Threat Prevention license on Firewall.

- I would recommend to go to CLI and get more detailed logs to drill down root cause:

Panorama: tail follow yes mp-log configd.log

FW: tail follow yes mp-log devsrvr.log

Kind Regards

Pavel