. Failed to generate selective push configuration.

[Khalid_Haidary]

Hi all, 

I get the following message if i make any changes to device-group, "commit to panorama" works fine but when i push to devices it do not.

• . Failed to generate selective push configuration. Unable to retrieve last in-sync configuration for the device, either a push was never done or version is too old. Please try a full push.

making changes to any template or template stack works fine, its only the device group.

I have tried full push, there are no same device-group or template name. 

panorama version: 10.2.3-h4

firewall OS version: 10.1.6-h6

Any help will be appreciated. 

[Y-alwaysMe]

Hi Khalid,

Did you recently connect this firewall to the Panorama? if you did, you might need to 

Select Panorama > Setup >Operations > Export or push device config bundle

If you did not connect this firewall to panorama recently, does it show connected and In sync for Templates?

[Khalid_Haidary · Accepted solution]

Hi,, 

We have updated it to 10.2.4 and fixed the issue.

[JScottNaviH]

Did you update Panorama and the Firewall? Or just Panorama?

[YordanYordanov]

hi

We have the problem with 10.2.6. did you do something different or just update?

[nicoleannep]

Hi Yordan,

What worked for me is the following:

1. Restarted the management server for both firewalls in HA via CLI.
2. Once restart is done. I ensured there was no admin lock on the commit for both firewalls.
3. Pushed config again from PANORAMA "Push to devices".

Hope this helps!