topic Re: Replacing the Rule name column with description column | Migrating from Cisco FTD in Expedition Discussions

Replacing the Rule name column with description column | Migrating from Cisco FTD

Mahmoudfathy293 — Sun, 07 Apr 2024 23:53:40 GMT

Hello Dears,

I'm working on migrating 3000 rules from Cisco FTD to PaloAlto. As you know, the Expedition tool migrates the ASA syntax, not the Snort. The ASA configuration exported won't include the Rule name. Instead, all rules will have a name like this: CSM_FW_ACL__. Fortunately, in my case, all rules have descriptions which are equal to the L7 rule name.

For example:

access-list CSM_FW_ACL_ remark rule-id 268567231: ACCESS POLICY: XYZ-Policy - Mandatory
access-list CSM_FW_ACL_ remark rule-id 268567231: L7 RULE: Test Syslog Voice
access-list CSM_FW_ACL_ advanced permit ip ifc Default_Out object-group FMC_INLINE_src_rule_268567231 ifc Network host 10.10.4.100 rule-id 268567231

After importing this configuration to the Expedition tool, the descriptions are listed successfully under the description column. Now I'm searching for a method to replace all name columns with the values listed under the description.

Any suggestions?

Re: Replacing the Rule name column with description column | Migrating from Cisco FTD

Mahmoudfathy293 — Mon, 08 Apr 2024 03:06:34 GMT

This is the imported rule on expedition tool. I want to replace the name column with the description .
This is just an example and for sure i can replace the name manually. but for the other 2999 rules what should i do ? 😞

Re: Replacing the Rule name column with description column | Migrating from Cisco FTD

dpuigdomenec — Mon, 08 Apr 2024 09:40:58 GMT

Hi @Mahmoudfathy293

Please send an email to fwmigrate@paloaltonetworks.com. We can provide you with an script that could work on the required replacement.

Best regards,

David