topic Re: how to remove duplicate entries in Expedition Discussions

how to remove duplicate entries

shallugarg — Fri, 28 Aug 2020 20:31:49 GMT

how do i remove the duplicate entires before i prepare xml file

Re: how to remove duplicate entries

lychiang — Fri, 28 Aug 2020 21:04:14 GMT

For duplicate objects, you can go to Dashboard and click on the red number shown on the duplicate objects and it will take you to see the duplicate objects, example, if it's address objects, you can right-click on the address objects and click on "merge" to merge either based on name and value or value.

Re: how to remove duplicate entries

shallugarg — Fri, 28 Aug 2020 21:44:26 GMT

Hi,

Thanks for your quick reply.

i see 56 duplicate objects for address and that has been taken care of.

I see under services section that there are 6 duplicate entries for services.

domain tcp 53

domain udp 53

nfs tcp 2049

nfs udp 2049

sunrpc tcp 111

sunrpc udp 111

Re: how to remove duplicate entries

lychiang — Fri, 28 Aug 2020 21:50:28 GMT

It will be the sam process, to review them and merge them if possible.

Re: how to remove duplicate entries

shallugarg — Fri, 28 Aug 2020 21:54:55 GMT

is it possible to merge tcp and udp together. I tired merge by name and value and it does not do.

Re: how to remove duplicate entries

shallugarg — Fri, 28 Aug 2020 21:56:24 GMT

Re: how to remove duplicate entries

lychiang — Fri, 28 Aug 2020 22:02:04 GMT

Hi in your example , you might not want to merge tcp 53 and udp 53 to one single service object , you should rename the object name, for example, domain_tcp , domain_udp , that way you can keep both service objects since they do have different value,

Re: how to remove duplicate entries

shallugarg — Fri, 28 Aug 2020 22:43:46 GMT

Thanks. At last i was able to figure out how to replace that 🙂

Last piece is that i checked the invalid section again from dashboard and observed i have few in invalid zones.

P.S. i am trying to convert config from ASA to Palo Alto.

Do, i need to fix this as well

Re: how to remove duplicate entries

shallugarg — Fri, 28 Aug 2020 22:45:16 GMT

Re: how to remove duplicate entries

lychiang — Fri, 28 Aug 2020 22:54:14 GMT

Yes, if it shows invalid object, you need to fix it before you are able to import it to PAN-OS device, for example: if it's ICMP service object, you will need to replace the service object with ICMP application, please refer below video for replacing invalid service object with the application.

https://www.youtube.com/watch?v=TISACJIPJT8&list=PLD6FJ8WNiIqVez8EBeoyRsnQcKTA5FuZ-&index=6&t=0s

For an invalid zone, you can go to "Monitor" -> "Migration log" to see what's the reason it sees the zone as invalid.

Re: how to remove duplicate entries

shallugarg — Fri, 28 Aug 2020 23:28:45 GMT

I did not see an option to remove unused objects like services which are being used "shared"

Re: how to remove duplicate entries

lychiang — Tue, 08 Sep 2020 20:54:41 GMT

When you go to the "objects" tab, and you can click on the right lower corner "red" dot to remove unused objects as shown in the screenshot. After removing unused objects, you will need to click on the "Green" dot again to re-calculate unused objects so it will reflect the change.

Please aware of the pre-defined service objects like application-default, http, https , those can't be removed due to it's pre-defined service objects in PAN-OS.