topic Config push from Template stack failing for one HA pair, without any error message in General Topics

Config push from Template stack failing for one HA pair, without any error message

AmitSailWish — Wed, 04 Nov 2020 05:48:43 GMT

We recently added a new firewall to Panorama (Pan OS 9.1.4) and included it in the existing Template stack. The deployment went fine.

However, the config push to this template stack is failing without any error.

If we click "Commit All", we don't see any error message. It just get stuck at this screen:

Validation also fails without giving any information.

It seems that the firewall is not receiving any Template config from Panorama. We confirmed that the firewall in concern is accepting the config, pushed locally.

Config push to all other Template Stacks is working fine. We also tried pushing the config from the HA Panorama, which yielded identical results.

Any help would be appreciated

Re: Config push from Template stack failing for one HA pair, without any error message

SutareMayur — Wed, 04 Nov 2020 06:38:48 GMT

@AmitSailWish,

I am not sure if you tried it. Could you please click on "Commit All" option and see if it shows any details there?

Re: Config push from Template stack failing for one HA pair, without any error message

AmitSailWish — Wed, 04 Nov 2020 16:34:08 GMT

Yes we tried it, but no luck.

It seems to be a bug with the VM series plugin version 1.0.13

Downgrading it fixed the issue

Re: Config push from Template stack failing for one HA pair, without any error message

AmitSailWish — Wed, 04 Nov 2020 22:39:33 GMT

Further investigation revealed that the issue was caused because Panorama had a lower VM-Series plug-in version than the firewall in concern.

That is the reason, downgrading the plug-in version on firewall fixed the issue