Expedition does not transfer vpn from asa

dushoang — Mon, 04 Mar 2019 18:32:10 GMT

Hello folks,

I'm having issue with Expedition after importing ASA config. The application doesn't transfer client base VPN, LDAP profile for VPN client setting, Radius profile.

The major important factor for me is the LDAP profile since we have users directory/file access permission by mapping the LDAP setting.

Can some body help?

Thanks in advance. Dustin

Re: Expedition does not transfer vpn from asa

sjanita — Tue, 05 Mar 2019 00:41:39 GMT

Hey Dustin,

The cliewnt VPN settings are not migrated in the current version. The objects your described will need to be created manually as part of a Global Protect configuration.

The workflow will be:

Migrate the policies (security, NAT) objects (address/groups, services/groups) networking (interfaces and static routes)

Generate the XML and import to Panorama or the target firewall

Once the config is finalized on the target device, then you can start building the GP config.

Below is the guide for setting GP on PanOS 8.0

https://docs.paloaltonetworks.com/globalprotect/8-0/globalprotect-admin/globalprotect-quick-configs

topic Expedition does not transfer vpn from asa in Expedition Discussions

Expedition does not transfer vpn from asa

Re: Expedition does not transfer vpn from asa