topic Checkpoint configuration migration in expedition tool in Expedition Discussions

Checkpoint configuration migration in expedition tool

karundeep — Tue, 30 Aug 2022 13:52:18 GMT

Hi,

I'm trying to migrate checkpoint configuration to Palo Alto using expedition tool. But there is an issue in security policies and NAT rules. Zones are not reflecting in security & nat rules. There is also issue in invalid services. I've followed below steps in tool.

Import config of both Firewall
Import the Route of Checkpoint
Remap Interface according to Palo Alto
Define Zones and attach interfaces to it.

Please let me know if I've missed any other step.

Thanks,

Karun

Re: Checkpoint configuration migration in expedition tool

lychiang — Tue, 30 Aug 2022 14:49:41 GMT

Hi @karundeep Zone is auto calculated based on interface of checkpoint tgz and route file , have you import the tgz file and route file at same time ? Also what version of expedition you are running ?

Re: Checkpoint configuration migration in expedition tool

karundeep — Wed, 31 Aug 2022 10:14:30 GMT

Hi,

Thanks for your response.

I've imported checkpoint tgz and route file at same time. I'm not sure why zones are not calculated automatically. Expedition tool is on ver 1.2.17.

Thanks,

Karun