238
•
Panorama
6.1
Administrator’s
Guide
©
Palo
Alto
Networks,
Inc.
Diagnose
Template
Commit
Failures
Troubleshooting
Diagnose
Template
Commit
Failures
A
template
commit
could
fail
because
of
the
following
reasons:
Capability
mismatch:
When
configuring
a
template,
the
following
options
are
available:
multiple
virtual
systems
capability,
VPN
mode,
and
operational
mode.
–
If
the
multiple
virtual
systems
capability
is
enabled
(the
Virtual systems
check
box
is
selected),
a
template
commit
failure
will
occur
when
you
push
the
template
to
firewalls
that
are
not
capable
of,
or
enabled
for,
multiple
virtual
systems
functionality.
To
resolve
the
error,
select
Panorama > Templates
,
click
the
template
name
to
edit
it,
and
clear
the
Virtual systems
check
box.
–
If
you
push
VPN
‐
related
configuration
options
to
firewalls
that
are
hard
‐
coded
to
disallow
VPN
configuration.
To
resolve
the
error,
select
Panorama > Templates
,
click
the
template
name
to
edit
it,
and
select
the
VPN Disable Mode
check
box.
–
If
the
operational
mode
on
the
firewall
differs
from
that
on
the
template.
For
example,
the
managed
firewall
might
be
enabled
for
FIPS
mode
while
the
template
is
enabled
for
normal
mode.
To
resolve
the
error,
select
Panorama > Templates
,
click
the
template
name
to
edit
it,
and
verify
that
the
Operational mode
selection
is
correct.
The
managed
firewall
is
not
enabled
for
receiving
template
and
device
group
changes
from
Panorama.
This
happens
when
the
ability
to
receive
template
and
device
groups
configuration
changes
has
been
disabled
on
the
firewall.
To
resolve
the
error,
access
the
web
interface
of
the
firewall,
select
Device > Setup
,
edit
the
Panorama
Settings
section,
and
then
click
Enable Device and Network Template
and
Enable Panorama Policy and Objects
.
