FQDN record keeps wrong ip address

[TranceforLife]

Hi All,

One of our FQDN records keeps wrong ip address (e.g 10.1.12.71) where really it should be  1x6.1x8.1x0.1xx:

> request system fqdn show gives me below output:

When l ping the same FQDN from the FW l get a correct ip address mapping:

> request system fqdn refresh  - didn't make any difference. 

How can I force firewall to refresh this object?

PA-5050

PAN-OS 7.1.8

[kiwi]

Hi @TranceforLife,

Is your FQDN refresh job failing by any chance ?

Cheers !

-Kiwi.

[reaper]

have you tried

> request system fqdn refresh force yes

[TranceforLife]

Hi All,

Thanks.

@kiwi refresh job looks fine:

@reaper what exactly force yes means and how it is different from " request system fqdn refresh" command? Can l do it in the production?

[reaper · Accepted solution]

a regular refresh will refresh stale entries while a force will refresh all entries

anything that's 'stuck' in cache will be refreshed too

[kiwi]

Hi @TranceforLife,

Not sure if it's the same issue ... but seeing this in the 7.1.10 release notes :

PAN-62188 - Fixed an issue where, if you configured a large number of FQDN objects, the firewall required multiple commits to refresh the objects.

--EDIT--

Nvm my last comment ... it seems that was fixed in 7.1.6 already :s

Cheers !

-Kiwi.

[TranceforLife]

Thx force yes did a trick.

MER-POD-LRC3N.xxxx (Objectname MER-POD-LRC3N):

1x6.1x8.1x0.1xx 3572 28

@kiwi I need to check the known issues, but thanks for pointing me in teh right direction 

[kiwi]

I'm just happy everything  worked out fine in the end 😄

-Kiwi.

[TranceforLife]

As always brilliant and powerful community!