PA-410 HA Not synchronized error

[S.Kutwal]

Hi Team ,

I have PA-410 HA without PANORAMA. OS: 11.1.6-h3

not synchronized error

When I try to download or install DLP plugin.

Thanks

Sushant

[OtakarKlier]

Hello,

If you dont have the module or plugin on the active, you shouldn't need it. While it could be a bug causing this I would recommend reaching out to tac. What happens if you force a sync from the active node?

Regards,

[S.Kutwal]

Hello
This error shown:  Failed to synchronize running configuration with HA peer; operation not allowed: Version mismatch with Peer for DLP

[PavelK]

Hello @S.Kutwal

Enterprise DLP plugin is supported only on Panorama. Below are quotes from documentation: Install the Enterprise DLP Plugin on Panorama. 

"A Panorama with the Enterprise DLP plugin installed is required; managing the Enterprise DLP configuration on your NGFW isn't supported."

"You only need to install the Enterprise DLP on Panorama. By default, all NGFW have the minimum supported Enterprise DLP plugin version installed based on the currently installed PAN-OS version. The minimum supported plugin installation occurs automatically when you install a new PAN-OS version on your NGFW."

There is no need to install plugin manually. If you have installed plugin, could you try to uninstall it from CLI: "request plugins uninstall dlp"?

Kind Regards

Pavel

[K.Kunjibavu]

check other passive firewall whether there is dlp available if you see there then uninstall