expedition pre-define http mismatch actual firewall

ZHOUJO5 — Sat, 30 May 2020 13:54:11 GMT

We had migration activity that causing the outage. After review the technical detail. we notice when merge service object, TCP-80 over write service-http.

the actual firewall service-http use port 80 and 8080. Expedition pre-define as 80 only, that causing the problem.

One more thing, when show running security policy and nat policy, palo alto not sort output of ip address, service, it's very painful to compare the result that make migration more challenge and risk.

Re: expedition pre-define http mismatch actual firewall

azuniga — Wed, 03 Jun 2020 16:24:44 GMT

We are looking into the issue and have a ticket internally.

topic Re: expedition pre-define http mismatch actual firewall in Expedition Discussions

expedition pre-define http mismatch actual firewall

Re: expedition pre-define http mismatch actual firewall