topic Validation failed when committing a changes to managed firewalls from Panorama in General Topics

Validation failed when committing a changes to managed firewalls from Panorama

Kathiravan_R — Thu, 02 Jun 2022 12:33:05 GMT

Last week we made a changes(added new IP addresses as a Source) to the existing security policy and tried verifying by validating template/device group for target firewalls however it results in validation failed with following errors.

user-id-agent unexpected here

Vsys is invalid

Device is invalid

Configuration is invalid

Any help and suggestions are highly appreciated.

Re: Validation failed when committing a changes to managed firewalls from Panorama

aleksandar.astardzhiev — Thu, 02 Jun 2022 14:15:11 GMT

Hi @Kathiravan_R ,

Such error are usually observed after PanOS upgrade, when config is not preperly migrated to the format for the new version.

Have you done any upgrade recently? Either for the FW or for the Panorama?

Re: Validation failed when committing a changes to managed firewalls from Panorama

Kathiravan_R — Thu, 02 Jun 2022 17:22:17 GMT

Hi @aleksandar.astardzhiev

Yes you are correct, there was a PAN OS 10.1.5-h1 upgrade performed for Panorama few days ago.

May I know how to mitigate this issue? will OS downgrading solve this issue ? Please advise.

Re: Validation failed when committing a changes to managed firewalls from Panorama

JayGolf — Fri, 03 Jun 2022 00:14:57 GMT

Hi @Kathiravan_R ,

Try going into the individual components that have failed and re-entering them/clicking ok on them.

Check out this discussion where other users had the same issue. If the issue still persists take a look at the 2nd comment in the discussion.