topic Can't generate output files in Expedition Discussions

Can't generate output files

santonic — Fri, 08 Dec 2023 12:28:51 GMT

I am doing ASA to PA migration. After editing the original configuration and importing base image I am ready to merge and export.

Merge works fine and doesn't show any errors. But every time i click Generate XML & Set Output it gets stuck. I've tried in different browsers, I've tried with different base configs, I've upgraded Expedition to the latest version, rebooted server... but nothing helped. It doesn't report any errors it is just stuck there

Usually it's stuck with text saying Generating Profiles vsys/dg;vsys1

How can I fix or troubleshoot this, please?

Re: Can't generate output files

santonic — Fri, 08 Dec 2023 13:10:45 GMT

Could it be that I created a custom Security Profile Group as a placeholder without any XML code? In that case what would be the minimum code required?

Re: Can't generate output files

sanandh — Sat, 09 Dec 2023 01:04:12 GMT

@santonic - Can you share your configuration file or expedition project using a TAC case?

Please send the TAC case number to us using: fwmigrate@paloaltonetworks.com

Re: Can't generate output files

dpuigdomenec — Sun, 10 Dec 2023 23:06:08 GMT

Hi @santonic

Besides sharing the config as my colleague @sanandh propose, you can check the file /tmp/error to check for the error.

As you are pointing the error could be due to the custom security profile group. Instead of creating it from scratch on Expedition I will suggest you to create on your device and import into Expedition using your base config. After that, using the bulk change or multi-edit you can add it to all or the selected sec rules.

Let us know if we could help in something else.

Best regards,

David

Re: Can't generate output files

santonic — Tue, 12 Dec 2023 07:50:43 GMT

Thank you all for replies and TAC won't be needed. It was the case of wrong XML code for the Security Profile Group I created in Expedition (and left the XML field empty). After adding simple XML code for an empty Security Profile Group I was able to create output files.