topic Re: unable to add new object address to existing object address group in General Topics

unable to add new object address to existing object address group

Jeromy — Mon, 20 Mar 2023 18:08:32 GMT

I created a new object address on my PA-5220 and whenever I edit an existing object address group, I cannot find that new object address in the list. I have committed the change to the firewall and confirmed other users see the object address and have the same issue.

I went into the existing object address group and tried to add a new object address through the edit window and whenever I click on 'OK' I get a message that says 'static is invalid'.

How do I begin troubleshooting this issue?

Re: unable to add new object address to existing object address group

franco1797 — Mon, 20 Mar 2023 18:14:40 GMT

I have this exact same issue. Anyone out there, please help!

Re: unable to add new object address to existing object address group

Salathiwe — Thu, 07 Mar 2024 09:10:51 GMT

Hi guys

Having the same issue, did you get any resolution on the matter

Re: unable to add new object address to existing object address group

kiwi — Thu, 07 Mar 2024 09:33:51 GMT

Hi @Salathiwe ,

I encountered 2 scenarios with this behaviour:

I saw this behaviour on a PAN-OS 9.1 device
I was able to fix it by cloning the existing address group. For some reason, I was able to add the object to the cloned address group just fine after that.
I also saw the same issue when the address group was part of the "Shared" Device Group, but the IP address object was not. Here I had to recreate the address group in the relevant Device Group.

I hope either of these scenarios can help you.

Kind regards,

-Kim.

Re: unable to add new object address to existing object address group

Salathiwe — Thu, 07 Mar 2024 09:52:20 GMT

Hi there Kiwi

Thank you for your reply.
I will try this out

Re: unable to add new object address to existing object address group

bgooch — Wed, 02 Apr 2025 13:41:54 GMT

Just wanted to reply that we ran into this on 11.1.6-h1 today and resolved it in a similar way that you did. We cloned the address-objects that we were attempting to add to a pre-existing address-group, deleted the old objects, added the new cloned address-objects to the address-group, and then we were able to commit to Panorama. I'm not sure exactly what was causing the issue with the original objects since the cloned values are exactly the same.

Re: unable to add new object address to existing object address group

kiwi — Thu, 03 Apr 2025 13:06:12 GMT

@bgooch ,

Glad you were able to resolve it !