topic Re: Not synched in General Topics

Not synched

jdprovine — Wed, 07 Feb 2018 17:36:28 GMT

My HA pair don't show synched and when I do a manual synched it say it completed successfully but the GUI show otherwise

Re: Not synched

BPry — Wed, 07 Feb 2018 20:49:38 GMT

@jdprovine,

Have you actually verified in the CLI by looking at the job id that it didn't actually error out on something? That would be the first thing I look at. If that's showing fine I would make a nominal change to the firewall, like a "test" object with the address 9.9.9.9, manually sync the config and then export the running-config off the passive firewall and see if "test" is present or not.

Re: Not synched

jdprovine — Wed, 07 Feb 2018 21:02:01 GMT

@BPry

Yup I did check the CLI and it never shows an error, in fact it shows that it is successful. But it also says that the configs are not in synch. TAC was able to help me and we ended up doing a commit force on both firewall and then a synch through the command line on the active firewall. To me it seems like an issue with something that is different but not tracked in the regular logs, maybe a URL block list from the internet? It commits but never shows up in the configuration logs only the system logs

Re: Not synched

ErnieLouie — Wed, 07 Feb 2018 21:17:30 GMT

You may want to see if you have the "Enable Config Sync" option enabled (check-marked). This is in the "Device > High Availability > General" tabs.

Re: Not synched

jdprovine — Thu, 08 Feb 2018 00:50:42 GMT

@ErnieLouie

Yes it enabled

Re: Not synched

ErnieLouie — Thu, 08 Feb 2018 02:50:17 GMT

@jdprovine - the other thought... which you may have already looked at, but you may want to verify:

In an HA pair, both peers must be of the same model, must be running the same PAN-OS and Content Release version, and must have the same set of licenses.

Re: Not synched

jdprovine — Thu, 08 Feb 2018 13:14:37 GMT

@ErnieLouie

TAC was able to help me and we ended up doing a commit force on both firewall and then a synch through the command line on the active firewall

Re: Not synched

Mike.ship — Fri, 16 Feb 2018 14:43:49 GMT

Would definitely be helpful if you posted the solution on how TAC helped.

Re: Not synched

jdprovine — Fri, 16 Feb 2018 14:45:24 GMT

@Mike.ship

They did a commit force on the Primary firewall followed by a commit force on the secondary firwall

Re: Not synched

Mike.ship — Fri, 16 Feb 2018 14:51:45 GMT

Much appreciated!