Firewall details on Network tab and Device tab is not showing on GUI, but all details are intact on CLI

[SIIX_Support]

Hello,

We have a offshore  Palo Alto firewall that recently we noticed the details under the Network tab and Device tab is not showing on the GUI.

But on the CLI the details are there. (ip address, settings etc) and the firewall is still operational

have you guys encounter this before?

for your advice.

[PavelK]

Hello @SIIX_Support

could you please give more details? The setting you are not able to see in GUI, but it is in CLI, was it Panorama pushed or local configuration? What PAN-OS are you running on Firewall?

Kind Regards

Pavel

[SIIX_Support]

Hi PavelK,

It was previously pushed on Panorama but the result was failed, the version is 9.1.14h4.

When device is onboarded on panorama, device group can be imported but template is not imported.

for your advice.

Thanks

[PavelK]

Thank you for reply @SIIX_Support and sorry for late response.

Unfortunately, I never came across this issue where there is a large portion of configuration missing in GUI. I came across issues where only certain config was missing in GUI and this was related to a bug that was addressed in later releases of PAN-OS. Based on what you described, I feel opening a TAC ticket would be better place to start.

Regarding Panorama commit/push errors, here is a collection of all KBs for these failures: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UglCAE To troubleshoot this issue further, I would recommend to check details of error message and if this is not intuitive/self explanatory, then check logs from CLI:

Panorama: tail follow yes mp-log configd.log
FW: tail follow yes mp-log devsrvr.log

Kind Regards

Pavel

[BPry · Accepted solution]

@SIIX_Support,

If you're seeing the proper information in the CLI and the device has the actual correct running configuration, have you tried just restarting the management server process and seeing if it clears the GUI discrepancy? It's not noted in the post from what I've seen if this was tried yet or not.

The other thing that you could try is navigating to https://<Firwallip>/debug and validating that this isn't showing any errors regarding file access when trying to load those pages.