topic Cant push config due to error in Panorama Discussions

Cant push config due to error

GOC_Virtela — Tue, 12 Oct 2021 16:40:57 GMT

Getting error when trying to push configs from Pan - checked policy and it looks fine was not a problem previously?

Details:
. Validation Error:
. rulebase -> security -> rules -> Deny_Inbound_Internet_Bad_IPsBOTNET -> source-hip unexpected here
. rulebase -> security -> rules is invalid
. Commit failed

Re: Cant push config due to error

PavelK — Thu, 14 Oct 2021 01:37:30 GMT

Thank you for the post @GOC_Virtela

Could you please confirm whether the policy you are pushing: Deny_Inbound_Internet_Bad_IPsBOTNET has attached HIP-Profile? If yes could you please check it is valid reference? What version of Panorama are you on and what is the version of Firewall?

Thank you and Regards

Pavel

Re: Cant push config due to error

nikoolayy1 — Sun, 17 Oct 2021 12:56:43 GMT

Also see:

https://knowledgebase.paloaltonetworks.com/kcSArticleDetail?id=kA10g000000PNIk

Also you have not upgraded the Panorama or the firewall recently right? As if so you may need to delete the firewall then again add it to panorama.

Also never forget to check the disk space on the firewall and to have same latest dynamic updates on the firewall and panorama.