invalid configuration. Schema verification failed. profiles -> decryption unexpected here.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

invalid configuration. Schema verification failed. profiles -> decryption unexpected here.

L1 Bithead


Hello,

Out of the box PA-500 steps taken,

1. down graded version to 4.1.10 successfully.

2. under device -> setup -> management, i changed the management interface IP, and on commit I get the following error.

commit failed

invalid configuration. Schema verification failed.

profiles -> decryption unexpected here

Did some searching on support but could not find something that relates to the above error.

thank you

6 REPLIES 6

Cyber Elite
Cyber Elite

Hi Dimitri

please try this from CLI:

>configure

#load config from running-config.xml

#commit force

regards

Tom

Tom Piens
PANgurus - (co)managed services and consultancy

Thank you for your quick response.

Unforunately I got the same error from CLI also.

i am doing a factory reset.

Thank you again.


Another option is to run request system private-data-reset from the CLI

This will clear the configuration from the device but maintain the software version and dynamic updates/

L5 Sessionator

Sounds you were previously using 5.0 or above.

If correct, PA supports SSL Decryption profile from 5.0 as new feature.

In the process of downgrade PANOS, PA does not automatically convert configuration file for 4.1, so you need to delete new schema manually.

To delete them, you first need to export current config, delete it, then import and load new one.

I think you can find following part in your config file (xml file)

<profiles>
  <decryption/>
</profiles>

Regards,

Emr

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!