topic Re: Expedition won't export Set commands in Expedition Discussions

Expedition won't export Set commands

PaulMurphy — Sun, 24 Oct 2021 22:13:36 GMT

Hi,

I have just got through the import-import-merge-remove invalid-dedupe with a Checkpoint source to an existing Panorama config.

At the very last step I do the export and I get xml and pretty xml - which contain the new policy but the Set command file is empty. Am I missing something?

Paul

[Edited to remove separate upgrade issue]

Re: 1.1.113 won't export Set commands and 1.2 won't install

azuniga — Fri, 22 Oct 2021 15:03:54 GMT

Hello @PaulMurphy

We resolved the issue please query for an update again, I have confirmed it is now working.

Re: 1.1.113 won't export Set commands and 1.2 won't install

PaulMurphy — Sun, 24 Oct 2021 22:14:30 GMT

Thanks Azuniga, the upgrade issue is no more, but the real problem remains, in that the export has no Set commands in the file, it is zero bytes.

Re: 1.1.113 won't export Set commands and 1.2 won't install

azuniga — Mon, 25 Oct 2021 15:00:42 GMT

Hello @PaulMurphy

I will look into it on my end to see if I have the same problem.

Re: 1.1.113 won't export Set commands and 1.2 won't install

azuniga — Mon, 25 Oct 2021 16:56:07 GMT

Hello @PaulMurphy

I have upgraded to the latest version of expedition and downloaded the zip file and my set commands are in there. Make sure your installation is working properly and you run periodic updates.

Re: 1.1.113 won't export Set commands and 1.2 won't install

PaulMurphy — Mon, 25 Oct 2021 23:00:58 GMT

This wasn't working on 1.113 or 1.120. And only for a single project. And if I export the project xml, and re-import into a new project, the set commands appear in the export.

So my question remains, is there something in a project that would prevent the set commands being produced while the xml commands come out fine?

Re: 1.1.113 won't export Set commands and 1.2 won't install

azuniga — Mon, 25 Oct 2021 23:49:16 GMT

There should be set commands from that output if the file is 0 bytes then there could be an issue but do you see the changes within the xml format at all and they are not being seen on the set file?

Re: 1.1.113 won't export Set commands and 1.2 won't install

GaryFowler — Tue, 26 Oct 2021 19:10:43 GMT

This problem is not resolved.

I upgraded. Went to the EXPORT tab. Click Generate XML & Set.. set file is still zero bytes.

I exported the project. created a new project, imported.. Generate XML & set.. set file is still zero bytes..

Re: 1.1.113 won't export Set commands and 1.2 won't install

azuniga — Tue, 26 Oct 2021 19:20:03 GMT

How does the XML file look off of that export?

Re: Expedition won't export Set commands

PaulMurphy — Tue, 26 Oct 2021 22:46:15 GMT

Hi, yes, the changes are in the XML and even moreso, I can import the XML and then output the Set commands. So something is wrong in the project that prevents me outputting Set, and it somehow gets fixed if I export and re-import it. In my case the XML is fine.

Re: Expedition won't export Set commands

azuniga — Tue, 26 Oct 2021 22:53:24 GMT

Hello @PaulMurphy

I confirmed internally yes the set command part is a bug we are looking into but have no fix for yet.

Re: Expedition won't export Set commands

MNagel — Tue, 26 Oct 2021 23:06:19 GMT

That bug stopped us cold on a major consolidation/migration project
early this year. We were told we needed to wait for 2.0.

Re: Expedition won't export Set commands

azuniga — Wed, 27 Oct 2021 01:19:14 GMT

Hello @MNagel

Why are you not able to use the xml commands created through the export section? You could always load them into your firewall and perform a load config partial.

Re: Expedition won't export Set commands

MNagel — Wed, 27 Oct 2021 15:09:34 GMT

While it may have been possible, the migration we were doing at the time
was MUCH simpler to do with set commands and some scripting to pull
sections under migration into Panorama via the CLI. I have used partial
XML imports for other processes (address objects and such), but the
rulebase updates just were going to be too painful with XML.

Re: Expedition won't export Set commands

azuniga — Wed, 27 Oct 2021 15:29:07 GMT

Hello @MNagel

As an alternative have you thought about using the API push and allowing the configuration to sit within the pre-commit until your change window? Or just have what you want pushed over the API instead of using the set commands?