Panorama Push Failure

A Panorama commit push recently failed for a production HA firewall pair.

The error being received when attempting the push was the following:

vsys -> vsys1 -> profiles -> spyware -> PROFILE -> mica-engine-spyware-enabled unexpected here vsys -> vsys1 -> profiles -> spyware is invalid

In my case, the validation error was cleared by restarting services on the Panorama server:

debug software restart process configd
debug software restart process management-server

After each command is run on Panorama, you'll need to wait a couple of minutes for each to take effect before you may access the CLI again. If this process alone does not fix the issue then I would suggest getting a case opened with Palo Alto Support to find an alternative solution to the specific issue being experienced.

Leave a comment

Your email address will not be published. Comments are moderated before appearing.