Not synched

[jdprovine]

My HA pair don't show synched and when I do a manual synched it say it completed successfully but the GUI show otherwise

[BPry]

@jdprovine,

Have you actually verified in the CLI by looking at the job id that it didn't actually error out on something? That would be the first thing I look at. If that's showing fine I would make a nominal change to the firewall, like a "test" object with the address 9.9.9.9, manually sync the config and then export the running-config off the passive firewall and see if "test" is present or not. 

[jdprovine]

@BPry

Yup I did check the CLI and it never shows an error, in fact it shows that it is successful. But it also says that the configs are not in synch. TAC was able to help me and we ended up doing  a commit force on both firewall and then a synch through the command line on the active firewall.  To me it seems like an issue with something that is different but not tracked in the regular logs, maybe a URL block list from the internet? It commits but never shows up in the configuration logs only the system logs

[ErnieLouie]

You may want to see if you have the "Enable Config Sync" option enabled (check-marked).  This is in the "Device > High Availability > General" tabs.

[jdprovine]

@ErnieLouie

Yes it enabled

[ErnieLouie]

@jdprovine  - the other thought... which you may have already looked at, but you may want to verify:

In an HA pair, both peers must be of the same model, must be running the same PAN-OS and Content Release version, and must have the same set of licenses.

[jdprovine · Accepted solution]

@ErnieLouie

TAC was able to help me and we ended up doing  a commit force on both firewall and then a synch through the command line on the active firewall

[Mike.ship]

Would definitely be helpful if you posted the solution on how TAC helped.

[jdprovine]

@Mike.ship

They did a commit force on the Primary firewall followed by a commit force on the secondary firwall

[Mike.ship]

Much appreciated!