Configuration Sync is not happening on HA,Server error : Failed to synchronize running configuration

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Configuration Sync is not happening on HA,Server error : Failed to synchronize running configuration

L1 Bithead

Running configuration  sync is not happening between HA peers(PA-5050). We tried manually from Passive firewall CLI by the command request high-availability sync-to-remote running-config but I are getting the error Server error: Failed to synchronize running configuration with HA peer; operation not allowed: URL Database mismatch.

I have restarted the management plane in passive but the result is same.

and the pandb are in same version by 

Show system Info for checking url db on both firewalls.

 

url-db: paloaltonetworks
URL-filtering-version:20200414.20165

 

 

 

NpN
7 REPLIES 7

Cyber Elite
Cyber Elite

Have you tried running this on both members:

 

request url-filtering install pandb-database

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

It is not working in 8.1.11 .I think this command is for PAN 9 version.

NpN

Community Team Member

Hi @NijithPN ,

 

This command is available in 7.1 PAN-OS also .... I'm sure it's available in PAN-OS 8 as well.

 

admin@Lab80-80-PA-2050> request url-filtering install 
> database          Install uploaded BrightCloud database
> pandb-database    Install uploaded Pan DB database
> signed-database   Install signed uploaded BrightCloud database

 

Please add more info ... are you getting any output when executing this cmd ?

 

Cheers,

-Kiwi.

 
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

"it is not working" doesn't really help much...

What is not working? Are you getting a specific message, is the cli throwing an error?

 

This command had been around for a while so if it's not working it would be useful to include any output you're seeing so we can help you 

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

by using the command request url-filtering install pandb-database iam  getting this error

Server error : Image has not been uploaded. Upload and try again

NpN

Community Team Member

Hi @NijithPN ,

 

Looks like the image isn't downloaded...

Have you tried downloading it (again) ? Note that the passive device might not have the connectivity in order to download.

> request url-filtering download paloaltonetworks region <region-name>

 

Could you check the output on both devices :

 

admin@PA-VM> show url-cloud status

 

Cheers,

-Kiwi.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

L1 Bithead

I am using PA-460 in HA mode and am also getting the same error while trying to download the PAD-DB database. Also pandb is showing not connected. I have checked and nothing looks to be blocked. This error is on Standby Firewalls. My Active firewalls looks good.

 

>request url-filtering install pandb-database

Server error : Image has not been uploaded. Upload and try again

 

> show url-cloud status

PAN-DB URL Filtering
License : valid
libcurl resolver : threaded
Cloud connection : not connected
URL database version - device : 0000.00.00.000
URL protocol version - device : pan/0.0.2

  • 10312 Views
  • 7 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!