topic Check Point Application Control Policy Conversion in Expedition Discussions

Check Point Application Control Policy Conversion

mb_equate — Thu, 28 May 2020 00:49:07 GMT

I have a client running Check Point R77 who wishes to migrate their Application Control policy. Does Expedition support conversion of a non-unified Check Point App Control policy? The policy is defined in a separate layer (non-unified policy), unified policy was introduced in R80.

@aestevez ?

Re: Check Point Application Control Policy Conversion

dgildelaig — Thu, 28 May 2020 13:10:56 GMT

Expedition does not migrate application layers from Checkpoint as the mapping between defined applications in Checkpoint and Palo Alto Networks devices is not trivial.

We may consider this for the future, but, for the moment, we would encourage to migrate L4 policies and to use the enrichment and AppID adoption features in Expedition to determine the correct AppIDs that need to be applied