The earliest recollection of this bug is traced back to PAN-OS 10.2.0 - July 22, 2025. This bug is fixed in PAN-OS versions 10.2.1. Fixed an issue on Panorama where a selective push pushed an incorrect configuration to the managed firewalls, which caused the firewalls to display as out of sync. This issue occurred if the Panorama-pushed version for the Shared Policy and Template configuration were 20 or more versions older than the current local running configuration on Panorama. On the Panorama management server, a selective push ( Commit Push to Devices Push Changes Made By and Commit Commit and Push Commit and Push Changes Made By ) may push an incorrect configuration to managed firewalls causing the firewalls to display as Out of Sync if the Panorama pushed version for the Shared Policy and Template configuration ( Panorama Managed Devices Summary ) are 20 version or more older than the current local running configuration on Panorama. To determine the current configuration version, select Panorama Config Audit and expand the Local Running config menu to review the list of Panorama configuration versions. Workaround : Push a more recent configuration to your managed firewalls before performing a selective push. For more information: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-0-known-and-addressed-issues/pan-os-10-2-0-known-issues https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-1-known-and-addressed-issues/pan-os-10-2-1-addressed-issues