topic Re: checkpoint migration to expedition in Expedition Discussions

checkpoint migration to expedition

jskang — Tue, 05 Mar 2019 09:12:17 GMT

HI.

I checkedpoint migration and found that the security rule contained an invalid address object.

object address was missing or wrong object address was contained.

very little.

Is this a bug?

Is there a case that has experienced the same problem as me?

Re: checkpoint migration to expedition

kiwi — Tue, 05 Mar 2019 12:42:49 GMT

Hi @jskang ,

I'll be moving this question to the Expedition board.

Cheers !

-Kiwi.

Re: checkpoint migration to expedition

sjanita — Tue, 05 Mar 2019 16:12:16 GMT

was the invalid address object flagged to be reviewed under the 'MONITOR' tab in your Expedition project? After importing a config file to be migrated, the monitor page lists messages for migrated configurations that need further review.

Re: checkpoint migration to expedition

jskang — Thu, 07 Mar 2019 06:54:27 GMT

The Monitor tab content is fine.

Rule Migration is somewhat different from the actual rule used.

The address object used in the rule is slightly different from the address object in the actual rule.

It migrated almost exactly, but there was a very slight error.

I want to know if this is a bug.

Re: checkpoint migration to expedition

sjanita — Thu, 07 Mar 2019 11:36:14 GMT

can you send your checkpoint configuration along with a note about which address you think was not migrated correctly to the email: fwmigrate @ paloaltonetworks.com

Re: checkpoint migration to expedition

jskang — Tue, 16 Apr 2019 09:33:38 GMT

I can not give it because it is a customer file.

Re: checkpoint migration to expedition

sjanita — Wed, 17 Apr 2019 05:21:57 GMT

understood that you cannot share the file.

Can you copy the snippet from the configuraiton that resulted in the address objects migrated invalid, but change the values (names, IP addresses, and any other identifiable information)?