topic Re: Checkpoint <R80 wont import Interfaces, routes, zones in Expedition Discussions

Checkpoint
steve_malin — Mon, 13 Nov 2023 18:38:31 GMT

Hi.. I have been trying without success to import some checkpoint configs in to Expedition.

I have been using Expedition in stand alone mode for 5 years or so and only now experiencing the issue.

Security policy, objects etc all import ok, just none of the network elements.

If I import a Juniper or a cisco config this works fine, its just Checkpoint.

I tried importing some "good" configs which I have previously imported and converted successfully on previous projects but these no longer import.

I have rebuilt expedition on a new VM with same problem. This is all on a local version of expedition running in VMware 17 pro and Expedition version 1.2.79

I have increased cpu cores to 8 and ram to 16gb.

I have checked /tmp/error but there is nothing obvious that I can pin to the issue.

Please could you give suggestions on how to resolve?

Many Thanks..

Re: Checkpoint
dpuigdomenec — Mon, 13 Nov 2023 20:39:21 GMT

Hi @steve_malin

Thanks for reaching out.

What is the version of the Checkpoint you are trying to migrate? Could you share your checkpoint configuration with us using a TAC case? Please send the TAC case number to fwmigrate@paloaltonetworks.com

Thanks in advance!

Re: Checkpoint
S.Bradley — Fri, 21 Jun 2024 17:11:09 GMT

Did this get resolved - we are having a similar problem, where importing an R77.30 config doesn't import the interfaces and VLANS (and we have a LOT of those!)

I can see the interfaces in the objects.C file I am importing

Re: Checkpoint
dpuigdomenec — Thu, 04 Jul 2024 12:40:21 GMT

Hi @S.Bradley

Could you follow the notes posted here: https://live.paloaltonetworks.com/t5/expedition-discussions/checkpoint-r77-import-missing-vlan-and-interfaces/m-p/591193#M5074
Let me know if that works,

Best,

David