Hey PozsonyiAttila
I am facing the same issue as you do. Panorama with 10.1.4h2 and firewalls running 10.1.4 (before when the issue started we had 10.1.3 running). This only happens to the firewalls running 10.1.3/4, all firewalls currently running 10.0.x do not face this issue.
what worries me the most, is that one does not see the rules being deleted when doing a push preview before deploying.
We have a TAC open and it is also under investigation.
This all started with 10.1.3 (which we upgraded because of new PA400 firewalls and log4j fix. We upgraded to 10.1.4h2 by TAC recommendation, which actually made us face the issue with dynamic object groups, which had to be fixed with a creating and deleting a dummy object that uses a tag.
Let's hope they soon find the issue for it and provide a fix.
Regards
Alex
... View more