topic Re: Shadow rule warning messages in General Topics

Shadow rule warning messages

johnshaik — Wed, 27 Jan 2016 13:27:58 GMT

Hi All,

I have PA-5050 with version 6.0.9 with multi Vsys. I am migrating from perticular Vsys configuration from PA-5050 to PA-3050 physical box. I exported the config from one Vsys from PA-5050 to PA-3050. While committing on PA-3050 I can see shadow rule warning messages .. but where as same rules on perticular Vsys on PA-5050 , I am not seeing any warning messages while committing.. Can Anyone help me why I am seeing the warning messages on PA-3050?

Re: Shadow rule warning messages

syadav — Wed, 27 Jan 2016 14:13:07 GMT

@johnshaik Can you check if the rules which are being shadowed actually a subset of the rule which is shawdowing it ?

The idea is to check if the shadow warning is actually valid.

Re: Shadow rule warning messages

johnshaik — Wed, 27 Jan 2016 14:16:16 GMT

Hi ... Yes I verified that rules are actually shadowing... But My question is in Shared PA-5050 also rules are shadowing but I am not seeing warning messages on PA-5050 Vsys. where as I can see warning messages on PA-3050 while commiting..

Re: Shadow rule warning messages

syadav — Wed, 27 Jan 2016 14:20:08 GMT

@johnshaik If the shadow rules are NOT reporting correctly, then it not something which you want as the warning helps in setting up the rules correctly.

If you are just looking for the reason as why the difference, I would recomm opening a case with Tech support.

Re: Shadow rule warning messages

santonic — Thu, 28 Jan 2016 10:24:17 GMT

Maybe you accidently exported rules from more than one vsys into a single vsys? That's the only way to explain it afaik.