topic Re: Commit error profile compiler can not find tid 40006 in threat database in General Topics

Commit error profile compiler can not find tid 40006 in threat database

SoporteITS — Mon, 01 Jul 2019 06:55:50 GMT

Hi,

We are having issues with commit in the FWs from last Wednesday. The error that we receive is: "Error: Profile compiler : can not find tid 40006 in threat database". The commit finishes correctly, but with the warning of the error.

We have revert the content update of the apps and threats to a previous one and the commit finishes correctly. With the latest content updates we are having issues too.

¿Any idea why are we receiving the error? We have checked that the threat ID 40006 exists.

Regards.

Re: Commit error profile compiler can not find tid 40006 in threat database

OtakarKlier — Mon, 01 Jul 2019 18:05:55 GMT

Hello,

Try to install a newer version or revert to the previous one and try upgrading again. If this doesnt work, perhaps a call to tech support.

Regards,

Re: Commit error profile compiler can not find tid 40006 in threat database

gwesson — Mon, 01 Jul 2019 21:22:09 GMT

You might have an exception for Threat ID 40006 in one or more of your security profiles. A simple way to check your whole config for that can be done in CLI:

> show config running

hit / (forward slash) to begin searching, and enter:

You'll have to scroll up (using the "J" key, may also work with arrow keys) to the top of that entry to find the profile name, and there may be multiple profiles that have it.

Re: Commit error profile compiler can not find tid 40006 in threat database

Suraj.Kushwaha — Tue, 02 Jul 2019 07:12:53 GMT

Warning message comes from firewall because Threat ID 40006 was disabled starting from Application version 8165 and later.

Please find below release note.

https://downloads.paloaltonetworks.com/content/content-8165-5521.html?__gda__=1562631311_252c3916cadd2e116a76623846f2a624

Re: Commit error profile compiler can not find tid 40006 in threat database

CTW1983 — Wed, 10 Jul 2019 17:53:43 GMT

I did what you suggested from the CLI and found the 40006 threat exception. The WebUI did not show it in the exceptions list for me to delete from there. I went back to the CLI, and fumbled my way through it using the following...

This is used to get the output in "set" format. (This helps those of us who are not overly familiar with PAN-OS CLI.)

> set cli config-output-format set

Enter Config mode.

> configure

Show configuration and search for Threat ID 40006.

# show
/40006

or

# show | match 40006

Use the above output results to create a "delete" command.

# delete profiles vulnerability "vuln-profile-name" threat-exception 40006

Commit changes.

# commit

Problem solved.

Re: Commit error profile compiler can not find tid 40006 in threat database

SoporteITS — Thu, 11 Jul 2019 12:39:06 GMT

Hi,

We opened a tech support case, and they confirm that the treat id was disabled. Actually we have received a update that they are going to include the threat id next week.

Thank you everyone for the help!!

Re: Commit error profile compiler can not find tid 40006 in threat database

itsNetwork — Tue, 16 Jul 2019 16:46:47 GMT

New Threat update is out 8171-5557 and it does not include threat ID 40006.

Re: Commit error profile compiler can not find tid 40006 in threat database

SoporteITS — Wed, 17 Jul 2019 10:51:39 GMT

Hi,

Yes, we are still waiting for the update.

Regards.

Re: Commit error profile compiler can not find tid 40006 in threat database

itsNetwork — Thu, 18 Jul 2019 04:09:28 GMT

We have also opened escalation case with TAC. Will let you know if something fruitful comes out.

Re: Commit error profile compiler can not find tid 40006 in threat database

SoporteITS — Mon, 05 Aug 2019 11:04:02 GMT

Hi,

Actually with the latest content update, it has been included.

Regards.