Post 10.1.3-h1 issues - source-hip unexpected here

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Post 10.1.3-h1 issues - source-hip unexpected here

L1 Bithead
  •  Validation Error:
  • . rulebase -> security -> rules -> *** -> source-hip unexpected here
  • . rulebase -> security -> rules is invalid
  • . Commit failed

 Do any of you have come across this error post upgrade of Panorama 10.1.3-h1? Not having issues on other firewalls. Current version of the firewall which i am seeing this error is 8.1.15.

Anyone has the solution for this one?

Thank you in advance

6 REPLIES 6

L2 Linker

You need to upgrade to 8.1.17 or 8.1.18 to get past this. We ran into the same thing and had it tested/vetted before TAC could respond to our ticket.

Thank you, Will try and check.

L1 Bithead

We have not yet upgraded the firewall; Meanwhile Vendor has asked to try "debug software restart process"

L1 Bithead

ran into similar with our 8.1 fw's not an issue for 9.0+ fw's restarting the mgmt fixed it 

L0 Member

All our FW's are v9.0.9 and after Panorama upgrade to v10.1.3-h1 we get the same error but only for one GW in HA

L1 Bithead

We have had the same issue from 10.1.0 to 10.1.5-h2  on a Panorama pushing config to device and error

Validation Error HIP Profile not expected , and was not using any HIP Profile.

Palo Alto has mentioned this is a common issue and the workaround / fix is upgrade to the version you want and run the following command in the cli

> Configure
> load config from running-config.xml
> commit force

The "commit force" will discard all "hip-profiles unexpected here" in security rules and you can do further changes or Commits.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!