topic Re: Checkpoint to Palo - Expedition Migration in Expedition Discussions

Checkpoint to Palo - Expedition Migration

nicholasbishop — Fri, 07 Oct 2022 16:55:15 GMT

Hello, I am working through a Checkpoint to Palo migration. The Checkpoint is a rather large configuration: 10k+ objects, 1700 rules, 1300 NAT policies, etc. Recently the Checkpoint Smart Console was upgraded from R80.20 to R80.40. While on R80.20 the zip file import into Expedition worked fine but since moving to R80.40 it no longer works.

Since the upgrade not all the objects, policies and NAT rules appear in Expedition. I went through the json files in the zip folder and they're all in there and show no errors in the ELG file. The monitor tab within the Expedition project also shows no errors.

Anyone run into this? Know of anything else to check?

Re: Checkpoint to Palo - Expedition Migration

lychiang — Fri, 07 Oct 2022 17:14:49 GMT

@nicholasbishop are you using the latest version of the showpolicypackage tool v2.0.6 to export the checkpoint configuration file, also, what are the error? please write email to fwmigrate@paloaltonetworks.com for further assistant.

Re: Checkpoint to Palo - Expedition Migration

nicholasbishop — Fri, 07 Oct 2022 17:23:19 GMT

Yes, I am using v2.0.6. There is no error that I have been able to location. Not all the data is just, there.