Post 10.1.3-h1 issues - source-hip unexpected here

[SKS7]

•  Validation Error:
• . rulebase -> security -> rules -> *** -> source-hip unexpected here
• . rulebase -> security -> rules is invalid
• . Commit failed

 Do any of you have come across this error post upgrade of Panorama 10.1.3-h1? Not having issues on other firewalls. Current version of the firewall which i am seeing this error is 8.1.15.

Anyone has the solution for this one?

Thank you in advance

[LCMember20111]

You need to upgrade to 8.1.17 or 8.1.18 to get past this. We ran into the same thing and had it tested/vetted before TAC could respond to our ticket.

[SKS7]

Thank you, Will try and check.

[SKS7]

We have not yet upgraded the firewall; Meanwhile Vendor has asked to try "debug software restart process"

[jkim12]

ran into similar with our 8.1 fw's not an issue for 9.0+ fw's restarting the mgmt fixed it 

[Eran_Cohen]

All our FW's are v9.0.9 and after Panorama upgrade to v10.1.3-h1 we get the same error but only for one GW in HA

[Kamlin_Reddy]

We have had the same issue from 10.1.0 to 10.1.5-h2  on a Panorama pushing config to device and error

Validation Error HIP Profile not expected , and was not using any HIP Profile.

Palo Alto has mentioned this is a common issue and the workaround / fix is upgrade to the version you want and run the following command in the cli

> Configure
> load config from running-config.xml
> commit force

The "commit force" will discard all "hip-profiles unexpected here" in security rules and you can do further changes or Commits.