topic Re: CISCO ASA to Palo Alto 1 to 1 problems in Expedition network generation in Expedition Discussions

CISCO ASA to Palo Alto 1 to 1 problems in Expedition network generation

alandre-admin — Wed, 05 Jan 2022 13:59:00 GMT

I have a aging and failing Cisco ASA which I'm planning to replace with a Palo Alto PA220. I've downloaded the Expedition OVA and have it running. I've uploaded the ASA config, get the data presented, however it is not showing network config from the ASA. I'm new to Palo, not sure how to resolve this and am looking for assistance in both Expedition and the Palo config in order to get the ASA replaced.

Re: CISCO ASA to Palo Alto 1 to 1 problems in Expedition network generation

lychiang — Wed, 05 Jan 2022 17:39:09 GMT

@alandre-admin OVA is legacy , I would suggest you install the ubuntu 20 and run the installer on top of it. It should import the layer 3 interface and static route info from your asa config . Please refer the below installation guide for more detail.

https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/ta-p/215619?attachment-id=10219

Also we have a tutorial video for ASA migration , please refer to the video playlist here:

https://youtube.com/playlist?list=PLD6FJ8WNiIqVez8EBeoyRsnQcKTA5FuZ-

Re: CISCO ASA to Palo Alto 1 to 1 problems in Expedition network generation

alandre-admin — Wed, 05 Jan 2022 17:56:26 GMT

Thanks Lychiang,

Having this tool function is going to be important for the company as we start to replace the other ASAs and Fortinets.

-Anthony

Re: CISCO ASA to Palo Alto 1 to 1 problems in Expedition network generation

alandre-admin — Wed, 05 Jan 2022 22:36:08 GMT

Well, I wish I could say that the problem was resolved, however it seems worse now. The updated software is not seeing many of the objects in the ASA config. Open to trying other tricks that might be helpful. Also open to anyone else wanting to give it a go? Maybe?