unable to add new object address to existing object address group

[Jeromy]

I created a new object address on my PA-5220 and whenever I edit an existing object address group, I cannot find that new object address in the list.  I have committed the change to the firewall and confirmed other users see the object address and have the same issue.

I went into the existing object address group and tried to add a new object address through the edit window and whenever I click on 'OK' I get a message that says 'static is invalid'.  

How do I begin troubleshooting this issue?

[franco1797]

I have this exact same issue. Anyone out there, please help!

[Salathiwe]

Hi guys 

Having the same issue, did you get any resolution on the matter 

[kiwi]

Hi @Salathiwe ,

I encountered 2 scenarios with this behaviour:

1. I saw this behaviour on a PAN-OS 9.1 device
   I was able to fix it by cloning the existing address group. For some reason, I was able to add the object to the cloned address group just fine after that.
2. I also saw the same issue when the address group was part of the "Shared" Device Group, but the IP address object was not. Here I had to recreate the address group in the relevant Device Group.
   

I hope either of these scenarios can help you.

Kind regards,

-Kim.

[Salathiwe]

Hi there Kiwi

Thank you for your reply.
I will try this out 

[bgooch]

Just wanted to reply that we ran into this on 11.1.6-h1 today and resolved it in a similar way that you did. We cloned the address-objects that we were attempting to add to a pre-existing address-group, deleted the old objects, added the new cloned address-objects to the address-group, and then we were able to commit to Panorama. I'm not sure exactly what was causing the issue with the original objects since the cloned values are exactly the same.

[kiwi]

@bgooch ,

Glad you were able to resolve it !