Day 1 Configuration of PAN-410 model firewall

[Sujanya]

I created day 1 config file for my PA-410 model firewall and loaded the configuration. But while commiting Got below error:

"email-scheduler -> Possible Compromise -> report-group 'Possible Compromise' is not a valid reference
email-scheduler -> Possible Compromise -> report-group is invalid "

When I double checked the file I downloaded from Palo-alto portal all these configuration are inside <shared..</shared> xml tag, Not sure why shared tag is coming in picture for palo-alto

Kindly suggest on the same.

[JayGolf]

Hi @Sujanya ,

Can you try removing the report group "Possible Compromise" and commit once removed? 

[Sujanya]

Hi @Jay ,

Thank you so much. It worked after deleting the report Group. Now I can see certain templates in the firewall configuration named "ztp-profile". Is this the expected configurations we will get once Day 1 configuration is uploaded to the firewall.

[023101004283]

Hello am having same issue

[APiccione]

How do you do this if you don't have that option in the Montior Tab? I only have Logs, Packet Capture and Session Browser on my 410.

Thanks!

[MynhardtvdWalt]

By design, the new firmware and PAN-410 don't have local data logging ability so the monitor tab reduces. The day1 config breaks due to the report group config on a device that doesn't support logging. Worked around it by removing the "Possible Compromise" section in the day1 XML and then uploading it.