Panorama out of sync with deviating device and fails with "<Address_Object_Name> is not a valid reference"

[ITGuy]

A Panorama push was interrupted and now I cannot push changes to devices. Address object names configured on Panorama were changed to new names, but the new names cannot be pushed to devices because the old names previously acquired from the Panorama, which are still configured in the device, no longer exist in Panorama.

Address object is used to configure IP address on the interfaces, VRs, NATs, IKE-Gateways, etc.

I have tried adding the old names back to Panorama and pushing as new addresses, but I still receive the error.

Anyone have any ideas?

Thanks!

[ITGuy · Accepted solution]

Support had no solution except to give the objects locally configured addresses, commit, then push changes from Panorama. After that go back and reconfigure objects with the new address objects now successfully pushed from the Panorama.

[SteveBallantyne]

Sorry to resurrect this old thread - but I believe that I am having this same issue and I am running 11.0.2 on my PA-440's and Panorama.

I have configured VPN tunnels using an X variable for the public IP address, and the validation IP on an IKE gateway. Panorama pushes fail with the following messages:

network -> ike -> gateway -> vpn-kch-mainhosp -> local-address -> ip '74.*.*.*' is not a valid reference

network -> ike -> gateway -> vpn-kch-mainhosp -> local-address -> ip is invalid