Commit Error After Upgrading to 10.0.9

[SubaMuthuram]

Hi Team,

Getting below commit validation error after upgrading to PAN-OS 10.0.9. 

• Validation Error:
• rulebase -> security -> rules -> QUIC_Deny -> hip-profiles unexpected here.

[AlexNC]

We are facing the issue now to, after upgrading from 10.1.3 to 10.1.5h1.

Downgrade to 10.1.4h4 as suggested would not fix the OpenSSL vulnerability: 
https://security.paloaltonetworks.com/CVE-2022-0778

From the looks of it, this bug was fixed in 10.5.0:
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-5-known-and-addressed...

PAN-171869

Fixed an issue where HIP profile objects in Security policies and authentication policies were replaced with source HIP and destination HIP objects.

After hitting already lovely bugs with 10.1.3 and 10.1.4 with device tag assigned security rules and dynamic object groups. 10.1.x looks like a bullet proof release of PAN-OS.

Regards

[santonic]

And they are announcing EOL for 10.0 and forcing everyone to 10.1.... 

[Tomlinscote_IT]

We also experienced the same issue on 10.1.5-h1, so have reverted to 10.1.4-h4... but as mentioned that leaves us with the OpenSSL vulnerability. Any news on a fix?

[MarcinSt]

Guys, I encountered another problem during committing from Panorama. When I try to push configuration to devices validation fails and all what I can see about is like below. After click on the status a window without content is displayed. None, indeed 😉

So, because both Panorama and my device have exactly same version (10.0.9) I pushed configuration locally (on the device) and it finished successfully. Most likely it is another Panorama bug 😞

I will create support ticket today and provide feedback here if a solution will be found.

All the best 🙂 

[rpanini]

I had the same issue. The policy wrong was under Policy - Authentication. I've deleted and recreated my policy and then the commit was fine. Hope it helps