Configuration Sync is not happening on HA,Server error : Failed to synchronize running configuration

[Nijith.Narayanadas]

Running configuration  sync is not happening between HA peers(PA-5050). We tried manually from Passive firewall CLI by the command request high-availability sync-to-remote running-config but I are getting the error Server error: Failed to synchronize running configuration with HA peer; operation not allowed: URL Database mismatch.

I have restarted the management plane in passive but the result is same.

and the pandb are in same version by 

Show system Info for checking url db on both firewalls.

url-db: paloaltonetworks
URL-filtering-version:20200414.20165

[reaper]

Have you tried running this on both members:

request url-filtering install pandb-database

[Nijith.Narayanadas]

It is not working in 8.1.11 .I think this command is for PAN 9 version.

[kiwi]

Hi @Nijith.Narayanadas ,

This command is available in 7.1 PAN-OS also .... I'm sure it's available in PAN-OS 8 as well.

admin@Lab80-80-PA-2050> request url-filtering install 
> database          Install uploaded BrightCloud database
> pandb-database    Install uploaded Pan DB database
> signed-database   Install signed uploaded BrightCloud database

Please add more info ... are you getting any output when executing this cmd ?

Cheers,

-Kiwi.

[reaper]

"it is not working" doesn't really help much...

What is not working? Are you getting a specific message, is the cli throwing an error?

This command had been around for a while so if it's not working it would be useful to include any output you're seeing so we can help you 

[Nijith.Narayanadas]

by using the command request url-filtering install pandb-database iam  getting this error

Server error : Image has not been uploaded. Upload and try again

[kiwi]

Hi @Nijith.Narayanadas ,

Looks like the image isn't downloaded...

Have you tried downloading it (again) ? Note that the passive device might not have the connectivity in order to download.

> request url-filtering download paloaltonetworks region <region-name>

Could you check the output on both devices :

admin@PA-VM> show url-cloud status

Cheers,

-Kiwi.