Duplice Object IDs in Panorama XML

Chacko42 — Fri, 26 Mar 2021 13:09:25 GMT

Hi Community,

We went from 9.1 to 10.0 on Panorama and recently did an Expedition merge (latest version) with an ASA.

Since then, a few objects which are unreferenced in global-find, are unable to be deleted.

When checking panorama running config, I noticed, that a group-name is duplicate in the shared section, with different object ID's:

Manually cleaning that up, seems to work, but what went wrong?

Shouldn't expedition or the commit validate that kind of stuff?

Re: Duplice Object IDs in Panorama XML

Chacko42 — Wed, 14 Apr 2021 06:41:31 GMT

After manually deleting the duplicate objects from xml config, panorama is working fine again.

I guess the used expedition versioned we used then (can't tell exactly which one it was) had a little problem with the new pan-os-10 config.

I noticed the problem, when importing the panorama xml to expedition, "invalid xml" was alerted.