Expedition 1.2.73 Hotfix Information

[dpuigdomenec]

Version 1.2.73 (Date September 25, 2023)

PACKAGE DOWNLOAD

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.73.all.deb
sha1sum	6103b49d360a26d24f440362fac440b43f904815
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget  https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.73.all.deb; sudo dpkg -i expedition_1.2.73.all.deb;

CHANGELOG

Fixing below Bugs:

• MT-2700: STONESOFT parser fixes/improvements:
  • Fixing issue with security rules defining address_match objects as source or destination.
  • Fixing issue to make sure the defined (override) zone on a security rule is used after the translation.
• MT-2628 | MT-2702 | MT-2709 | MT-2707 - Fortinet parser fixes/improvements:
  
  • On multi vdoms - making sure the translated security rules are assigned to each defined vdom.
  • On multi vdoms - making sure the objects are created properly and assigned to each defined vdom, avoiding creating invalid duplicated objects.
  • Adding support to read "srcaddr4" and "dstaddr4" as valid commands while translating a security rule.
  • For command "config firewall service custom":
    • set tcp-portrange 8080-8090:0-65535 - make sure the src and dst ports are properly translated.
    • create service group and include TCP and UDP ports from below example:
      edit "ONC-RPC"
      set category "Remote Access"
      set tcp-portrange 111
      set udp-portrange 111
    • Create UDP service with defined port from below example
      edit "service.udp.111"
      set udp-portrange 111
    • Create TCP service with defined port from below example
      edit "service.tcp.112"
      set tcp-portrange 112