Fail to migrate Palo HA FW to Panorama Mgmt

[zinkt101]

Hello,

I tried to migrate Palo HA FW to Panorama mgmt as per below guideline link, but fail in step 5.5.

this is the step what I did;

- Clear "Enable Config Sync" on both FW (OK)
- Connect both FW to Panorama (OK)
- Add both FW to Panorama (OK)
- Import config of both FW into Panorama (OK, but show alert icon(indicate "HA: not in operation") device summary)
- Push and commit back to both FW (FAIL , push is OK but commit not successful on local FW)

any suggestion please and let me know if you need more information? thank you.

Panorama Ver : 10.1.0

Palo FW Ver : 9.1.5

Model : PA220

Guideline link

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/transition-a-firewall...

[PavelK]

Thank you for your post @zinkt101 

Would it be possible to provide details of commit fail message? Typically there is description what prevented commit to succeed.

Thank you

Pavel

[zinkt101]

thank you for your response @PavelK 

this is the fail error message on local FW

!

Operation

Commit

Status

Completed

Result

Failed

Details

Validation Error:

deviceconfig -> system -> update-schedule -> wildfire -> recurring -> every-15-mins -> sync-to-peer unexpected here

deviceconfig -> system -> update-schedule -> wildfire -> recurring -> every-15-mins is invalid

Commit failed

Warnings

!

After this error message, I tried by turning off sync-to-peer on all dynamic updates on both passive/active FW, then re-start migrating to Panorama again.

still show the above error message again.

thank you.

[PavelK]

Thank you for reply @zinkt101

Before you start migration, could you set the download schedule of Wildfire to: "None" on both Firewalls, then start with migration over? If it succeed, then after migration you can change Wildfire scheduler from Panorama via Template.

Kind Regards

Pavel

[zinkt101]

hello..

after I tried with schedule of Wildfire to: "None" on both Firewall, still fail with this new error message.

Operation
Commit
Status
Completed
Result
Failed
Details
Validation Error:
import -> network -> logical-router unexpected here
import -> network is invalid
Commit failed
Warnings