12-08-2023 10:47 PM
Hey Team,
Has anyone encountered any problems performing the PanOS 11.1.0 Upgrade? I've encountered the following issue after an upgrade, where PanOS (Panorama) would not commit changes, much less push them to our devices. The configd.log file shows the following:
2023-12-09 16:36:16.778 +1100 DG-push(selective): Waiting for DG file to be written for XXXX
2023-12-09 16:36:16.867 +1100 Error: pan_populate_mvsys_policy(pan_cfg_dg_tpl_utils.c:8032): File /opt/pancfg/mgmt/groups/XXXX/panorama-selective-mvsys-config.xml does not exist, aborting
2023-12-09 16:36:16.867 +1100 Error: pan_cfg_generate_multidg_push_or_diffall_msg_for_device(pan_cfg_shared_policy.c:3980): Failed to populate policy node for XXXX
2023-12-09 16:36:16.867 +1100 Error: pan_cfg_sp_push(pan_cfg_shared_policy.c:5514): error generating push/diffall request to XXXXXX
2023-12-09 16:36:16.873 +1100 Error: pan_populate_mvsys_policy(pan_cfg_dg_tpl_utils.c:8032): File /opt/pancfg/mgmt/groups/XXXX/panorama-selective-mvsys-config.xml does not exist, aborting
2023-12-09 16:36:16.873 +1100 Error: pan_cfg_generate_multidg_push_or_diffall_msg_for_device(pan_cfg_shared_policy.c:3980): Failed to populate policy node for XXXX
2023-12-09 16:36:16.873 +1100 Error: pan_cfg_sp_push(pan_cfg_shared_policy.c:5514): error generating push/diffall request to XXXXXX
2023-12-09 16:36:16.927 +1100 DG-push(selective): Waiting for DG file to be written for XXXX
It looks to me like an upgrade migration process didn't work when we moved from PanOS 10.2.7 (we did a multi-hop upgrade, but it was working at this step as far as we knew as we did changes to GlobalProtect configuration at this point).
