Panorama M-200 device displaying old committed items that needed to be pushed

[Marlo_Perez]

Good day everyone,

I have another inquiry but this time for Panorama, so here's how it went. We have a Panorama M-200 that is on 10.2.4, we are experiencing some problem when it comes to push to device. The aforementioned steps below temporarily fixed the problem, but when there is a new configuration that needed to be committed and pushed, the old pending commits still showing up in Push to Device window.

We have already tried various possible steps in-regards to this problem.
1. Configuration > Commit to Panorama > Validate Commit > Commit All Changes > Push to Device > Validate Device Group Push > Push All Changes
2. Configuration > Commit to Panorama > Commit Changes Made By:(1)(user) > Push to Device > Push Changes Made By:(1)(user)

Is this normal for Panorama to show old commits, or was there something more regarding to this?

I highly appreciate the help.

Thanks

[PavelK · Accepted solution]

Hello @Marlo_Perez

typically Device Group configuration changes committed to Panorama and not pushed to managed Firewall will keep showing up until you manage to successfully push them to Firewall. Once they are pushed, they should not show up anymore. From the screen shots you shared, it looks like that settings (master-device, cloud-identity-engine, reference-template) are related to Device Group setting under: Panorama > Device Group > [Device Group name]: 

Have you made any changes to the above setting?

The rest (to-sw-version) looks like pending Panorama initiated PAN-OS upgrade of Firewall. When you added a Firewall to Panorama did you set upgrade to specific version check box?

When you push all these setting to clear them out, are you seeing in the Task Manager in the right bottom corner as being processed?

Kind Regards

Pavel