push from panorama to PA firewalal failed because of " is already in use because of policy and NAT already in use)

cancel
Showing results for 
Search instead for 
Did you mean: 

push from panorama to PA firewalal failed because of " is already in use because of policy and NAT already in use)

L0 Member

Hi,

We have panorama in 9.1.9 version and  PA-220 in same version.

 

we imported configuration from pa to panorama, added just e pôlicy rule and pushed again the template and device group to same firewall. 

but then we get always pushh failed with errors saying NAT rules and policy rules are already in use !

 

is that normal ? we have exactly the same rules on device group and on the firewall. , we tried to force value but still we get same eror :

 


Last Push State Details
Details:
. Validation Error:
. service -> port-2083 'port-2083' is already in use
. service -> port-2083 'port-2083' is already in use
. service is invalid
. rulebase -> security -> rules -> allow all 'allow all' is already in use
. rulebase -> security -> rules -> allow all 'allow all' is already in use
. rulebase -> security -> rules is invalid
. rulebase -> security is invalid
. rulebase -> nat -> rules -> MGMT-to-WAN 'MGMT-to-WAN' is already in use
. rulebase -> nat -> rules -> LAN-to-WAN 'LAN-to-WAN' is already in use
. rulebase -> nat -> rules -> MGMT-to-WAN 'MGMT-to-WAN' is already in use
. rulebase -> nat -> rules -> LAN-to-WAN 'LAN-to-WAN' is already in use
. rulebase -> nat -> rules is invalid
. rulebase -> nat is invalid
. rulebase is invalid

 

any help please

1 REPLY 1

Community Team Member

The already in use can be an issue when you are trying to use Panorama to Manage a firewall and want to re-use the same names for objects.. 

Please see this article for more information about this. 

ADDRESS/ADDRESS GROUP OBJECTS MUST HAVE DIFFERENT NAMES 

LIVEcommunity team member
Stay Secure,
Joe
Don't forget to Like items if a post is helpful to you!
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!