topic Re: More big problems with the Foritgate parser in Expedition Discussions

More big problems with the Foritgate parser

crose_mcnc — Sun, 01 Oct 2023 20:06:21 GMT

I am still having major issues with Expedition with the Fortigate configuration parser.

The last bug fix took care of some of the issues, but I have again reached a standstill where I have objects that can not be deleted. I didn't figure this out till after I spent hours manipulating this config to get objects into our engineering format. Now I am stuck. I am very behind on getting this migration done for my customer to everyone's frustration so I am desperate to get this fixed.

I think the import is still not working correctly. When I import the configuration I sent you, I get the following objects created in the "shared" vdom. But the objects contain self references. As an example the shared vdom service object group DNS contains mebers DNS and DNS as seen int he attached screenshot.

It is this way also for the following list of protocols

DCE-RPC

DNS

H232

Kerberos

L2TP

NFS

NTP

PC-Anywhere

RTSP

SIP

SNMP

Once I work through the configuration and clean things up I wind up with objects that can not be deleted and prevent me from finishing my cleanup and migration.

I can send you the config file again by way of a Palo support case or export backups of my project in expedition. I am running the most current hotfix.

Anything you can do to get this moving again is greatly appreciated.

Re: More big problems with the Foritgate parser

dpuigdomenec — Sun, 01 Oct 2023 20:24:28 GMT

Hello @crose_mcnc ,

I'm sorry to hear about the issues you're encountering.

Could you please upload the latest original configuration along with your current Expedition project into a TAC case? Once you've done that, please send the TAC case number to fwmigrate@paloaltonetworks.com. As I'm based in the CEST time zone, I'll take a look at it first thing tomorrow morning. It would be really helpful if you could also describe your execution workflow in your email. This way, I can check if there's a possibility of automating some of the steps you're currently doing manually.

I appreciate your understanding and cooperation in advance, and I apologise for any inconvenience caused.

Best regards,

David

Re: More big problems with the Foritgate parser

crose_mcnc — Sun, 01 Oct 2023 20:25:36 GMT

Sure thing. It's on its way.