topic Re: ASA to PANOS Migration in Expedition Discussions

ASA to PANOS Migration

Tarik_Admani — Wed, 14 Aug 2019 06:58:49 GMT

Hi,

I am migrating an ASA config over to PANOS using the migration tool. I havent been able to figure out why the static nat rules are not migrating successfully. This is also breaking the ACL conversion as well. I am on expedition tool 1.1.33.

thanks

Re: ASA to PANOS Migration

kiwi — Wed, 14 Aug 2019 09:16:45 GMT

Hi @Tarik_Admani ,

I think you'll have better luck with your question in the Expedition discussions area so I moved it here.

Good luck !

-Kiwi.

Re: ASA to PANOS Migration

dgildelaig — Wed, 14 Aug 2019 13:36:50 GMT

Could you share the configuration with us (or at least a relevant snippet of the configuration) to our email (fwmigrate at paloaltonetworks dot com) to check what may be happening?

Re: ASA to PANOS Migration

Tarik_Admani — Wed, 14 Aug 2019 14:59:35 GMT

Yes sir,

I see these errors in the migraiton tool -

Nat RuleID [89] is trying to apply a group to the translated packet. [nat (inside,outside) static x.x.x.x]. Rule not imported

I sent a scrubbed snippet to the email alias - basically this example of the nat conversion is in one of the 7 step migration videos on youtube.

Thanks,

Re: ASA to PANOS Migration

Tarik_Admani — Wed, 14 Aug 2019 15:00:03 GMT

Thanks Kiwi!

Re: ASA to PANOS Migration

Tarik_Admani — Fri, 16 Aug 2019 17:19:13 GMT

Thanks for the help, to update anyone else that runs into this, I had to downgrade expedition to 1.1.28 and the nat rules and security policies migrated, going through the final review right now.