Palo Alto VM-Series Service Deployment in error state "Incompatible host version. Agent is not deployed due to incompatible host" after ESXi upgrade

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

• You recently upgraded ESXi
• After the ESXi upgrade, your Service Deployment shows in the UI as "Upgrade Failed":
  
  
  
  
• When clicking the "Resolve" link the error is seen - "Incompatible host version. Agent is not deployed due to incompatible host"
  
  

Environment

VMware NSX - All Versions

Palo Alto VM-Series for VMware NSX

Cause

The upgraded version of ESXi is not compatible with the PAN-OS version of the SVM.

Resolution

• Review the Palo Alto VM-Series compatibility matrix to determine the PAN-OS version needed for your ESXi version - Palo Alto VM-Series Compatibility Matrix
• Download the corresponding OVA and upload it to the file server referenced in the OVF URL in the deployment specification.
  • To view the deployment specification details including the OVF URL, click the information "i" icon next to the deployment specification under System > Service Deployments
    
    
    
    
• Once the OVA is available at the OVF URL in the deployment specification, delete then re-add the service deployment.
• After the Service Deployment is added back, it should be in a "Success" status.
• You may then need to contact Palo Alto support for assistance with registering the new SVM's.