[PANORAMA][ERROR] Can't use export or push device config bundle feature

[SERMA-NES]

Hello,

I got issues using the feature : Panorama > Setup > Operations > Export or push device config bundle.

I try to erase the local configuration of a PA-850 and push the Panorama configuration on it.

I got this error message when I click on push & commit :

 

I would appreciate some help on this, does anyone already saw this error message before ?

Thanks for reading my post.

Best regards,

[BPry]

@SERMA-NES,

I mean it's kind of telling you what the issue is; the config bundle that Panorama is building is to large to push to a PA-850. It also appears as though you are leaving the default config for a smaller device which doesn't always work that wel.. 

Perform these actions. 

• Panorama > Setup > Management, and go into Panorama Settings. 
• Make sure that your 'SHare Unused Address and Service Objects with Devices' check box is not checked so that you only push the objects the config actually needs. 
• Then perform a Panorama Commit.

you should then be able to push and commit to the pa-850 without issues. 

[SERMA-NES]

Thanks for your answer, but I already unchecked that checkbox.

I also unchecked the "Import devices' shared objects into Panorama's shared context" when you Import the device configuration to Panorama.

The PA-850 is a physical appliance so there should not be any storage issues I guess.

The Panorama is a VM with 4 CPU / 4GO RAM / 80GO Storage which seems enough to me.

I find really few informations on internet and I don't really know where to investigate at this point.

[nawaza]

Panorama running on 4GB of memory ...

This could be completely unrelated, but there are a plethora of issues with underspecked installastions of VM Panorma.

Ajaz

[BPry]

@SERMA-NES,

How many firewalls are you managing? 4GBs of RAM is fine if you are managing a relatively low number of firewalls and your configs aren't that large. Palo Alto says that you can get away with up to 10 with 4GBs, in practice I would put that number closer to 5 before I tell people to bump it up simply because I don't know the size of the configs that people are working with. 

[Sydrou]

It looks like I solved the issue.

I had to upgrade my Panorama in 8.0.4 because I needed to add a FW which is in 8.0.3.

I still had the same issue with this new FW but I had a new error message refering to Device Groups.

So, When I imported the configuration, I modified the name of the Template and the Device Group which is the Firewall name by default.

With that custom name, It works.

I'm not sure of what happened but now it is working.

Thank you for your help !