topic Re: invalid configuration. Schema verification failed. profiles -> decryption unexpected here. in General Topics

invalid configuration. Schema verification failed. profiles -> decryption unexpected here.

DimitrisK — Mon, 16 Jun 2014 12:04:51 GMT

Hello,

Out of the box PA-500 steps taken,

1. down graded version to 4.1.10 successfully.

2. under device -> setup -> management, i changed the management interface IP, and on commit I get the following error.

commit failed

invalid configuration. Schema verification failed.

profiles -> decryption unexpected here

Did some searching on support but could not find something that relates to the above error.

thank you

Re: invalid configuration. Schema verification failed. profiles -> decryption unexpected here.

reaper — Mon, 16 Jun 2014 12:12:32 GMT

Hi Dimitri

please try this from CLI:

>configure

#load config from running-config.xml

#commit force

regards

Tom

Re: invalid configuration. Schema verification failed. profiles -> decryption unexpected here.

DimitrisK — Mon, 16 Jun 2014 12:36:36 GMT

Thank you for your quick response.

Unforunately I got the same error from CLI also.

i am doing a factory reset.

Thank you again.

Re: invalid configuration. Schema verification failed. profiles -> decryption unexpected here.

jcostello — Tue, 17 Jun 2014 21:07:24 GMT

Another option is to run request system private-data-reset from the CLI

This will clear the configuration from the device but maintain the software version and dynamic updates/

Re: invalid configuration. Schema verification failed. profiles -> decryption unexpected here.

emr_1 — Wed, 18 Jun 2014 01:50:54 GMT

Sounds you were previously using 5.0 or above.

If correct, PA supports SSL Decryption profile from 5.0 as new feature.

In the process of downgrade PANOS, PA does not automatically convert configuration file for 4.1, so you need to delete new schema manually.

To delete them, you first need to export current config, delete it, then import and load new one.

I think you can find following part in your config file (xml file)

	<profiles>
	<decryption/>
	</profiles>

Regards,

Emr

Re: invalid configuration. Schema verification failed. profiles -> decryption unexpected here.

DimitrisK — Wed, 18 Jun 2014 05:53:40 GMT

Emr and Jcostello thank you for your suggestions will try it again on the third PA that needs to be configured.

Yes it was a downgrade from 5.0, needed to downgrade in order to install it on a HA environment.

Re: invalid configuration. Schema verification failed. profiles -> decryption unexpected here.

pulukas — Sun, 22 Jun 2014 13:28:03 GMT

If this is going into an HA you could export the config from the HA existing member. Then import into the newly downgraded one replacing the version 5 config.

Now just change the node specific stanzas from here before commit.