topic Validation Error after upgrading to 10.2.3-H4 in General Topics

Validation Error after upgrading to 10.2.3-H4

CAllen — Tue, 28 Mar 2023 20:42:52 GMT

Recently upgraded my PA-5220 to version 10.2.3-H2 from version 9.*, (took me 5 version upgrades to get into the 10.2.3-H2). Which now is causing some commit issues. The issue is a Validation Error as follows:

vsys>vsys1>service-group>DM_INLINE_SERVICE_1>members 'domain' is already in use

vsys>vsys1>service-group>DM_INLINE_SERVICE_1>members is invalid

Re: Validation Error after upgrading to 10.2.3-H4

kiwi — Wed, 29 Mar 2023 10:38:29 GMT

Hi @CAllen ,

That error usually indicates there are duplicate entries.

Is this being pushed from Panorama ?

The schema changed from 9.* to 10.*.

In 9.0 and earlier, the Panorama config would overwrite the config on the firewall, but in 9.1 and later the schema was changed so that this would cause a validation error. Issue can be resolved by removing the duplicate entries from the firewall side.

Kind regards,

-Kiwi.