Overview
Fixed an issue where configuration changes made in Panorama and pushed to the firewall were not reflected on the firewall.
root_cause
When service groups have a tag then during processing there is logical error which results in error during validation of the service group
workaround
Enable the Share unused object from panorama setting - may cause significant increase the config sizeORRemove tags from the service group objects - if they use tags elsewhere, it will impact.The above workarounds might not be feasible - it would depend on the config