Service object injected from Panorama, local view on firewall says destination port [ object Object ].
Thank you very much as always.
Can you support and help me by confirming if this is completely normal behavior.
I have a Panorama and I am injecting a new service to two firewalls in HA that share the same Template/Template Stack.
Well my doubt is because if I enter the firewall where it was already correctly injected/push the config the object is like:
Test Object:
Test, it appears in yellow marking that it has been injected from Panorama and but in the column, to see the destination port does not appear the tcp port, which was set from Panorama Device-Group, it only says [ object Object Object ]. If I go, for example, to look at the security policy used by this service and query for the value of the service, I get Name: test Protocol: TCP port: 8888.
In the local firewall Web-Gui:
Local-FW-Gui-gui-Destination-port
In the local firewall Web-Gui / Security policy Value Test Service:
PANORAMA: View-Check Value From Local-web gui Security Policy Setion, and check Value of Test Service, and show the tcp/port 8888 - From Panorama WEB-GUI:
Please can you tell me if this is a totally expected behavior, that when checking directly and locally the object, in yellow, as it comes from Panorama, it only says [ object Object Object ] in the destination port section, but if I check it in the policy when querying for the value if it appears.
Thank you very much, I remain attentive, best regards.
@Reaper
Hello, thank you very much for your reply.
I generated a new service and the same thing keeps happening, in the view directly from the firewall, the destination port is not displayed.
Therefore what I chose was to upgrade the firewalls from 9.1.3 to 9.1.4. Although the strange thing is that if Panorama is in version 9.1.4 and the firewalls in 9.1.3, this at the level of logic and according to the documentation of Palo Alto Networks should work and not have any compatibility problems, however there was that display problem, so do the Upgrade to version 9. 1.4 of the Firewalls, and after that, the service is displayed correctly, showing its tcp destination port, the new one and the one created before, in the web-gui of the firewall directly.
Thank you, best regards
This is not expected behavior. It looks like you're on pretty old PAN-OS? Can you try upgrading?