Shadow rule warning messages

[johnshaik]

Hi All,

I have PA-5050 with version 6.0.9 with multi Vsys. I am migrating from perticular Vsys configuration from PA-5050 to PA-3050 physical box. I exported the config from one Vsys from PA-5050 to PA-3050. While committing on PA-3050 I can see shadow rule warning messages .. but where as same rules on perticular Vsys on PA-5050 , I am not seeing any warning messages while committing.. Can Anyone help me why I am seeing the warning messages on PA-3050?

[syadav]

@johnshaik   Can you check if the rules which are being shadowed actually a subset of the rule which is shawdowing it ?

 The idea is to check if the shadow warning is actually valid.

[johnshaik]

Hi ... Yes I verified that rules are actually shadowing... But My question is in Shared PA-5050 also rules are shadowing but I am not seeing warning messages on PA-5050 Vsys. where as I can see warning messages on PA-3050 while commiting..

[syadav]

@johnshaik   If the shadow rules are NOT reporting correctly, then it not something which you want as the warning helps in setting up the rules correctly. 

If you are just looking for the reason as why the difference, I would recomm opening a case with Tech support.

[santonic]

Maybe you accidently exported rules from more than one vsys into a single vsys? That's the only way to explain it afaik.