topic Re: No security policies showing in Expedition project in Expedition Discussions

No security policies showing in Expedition project

frajico — Tue, 23 Sep 2025 05:51:20 GMT

Hi!

Installed Expedition on Ubuntu 20.04 with php7.4 cause 7.0 it not available now.

When I import a ChechPoint config to migrate to PaloAlto, process takes very log on step 9 of 10, and nevers ends, but, in main dashboard appears to have imported objects and policy rules from the CKP config

I can see the objects imported but I can NOT see the policy rules neither the NAT rules

Any idea?

Re: No security policies showing in Expedition project

Karen763Purvis — Thu, 25 Sep 2025 04:40:12 GMT

Hello!

Your Expedition import from Check Point is likely failing at step 9 due to a PHP timeout or memory limit issue. Even though some objects appear imported, the process is incomplete, which mywisely is why policy and NAT rules are missing. To fix this, increase the max_execution_time and memory_limit in your php.ini file (e.g., to 3600 seconds and 2048M) and then restart the PHP service. If the problem persists, check the Expedition logs for specific errors.

Re: No security policies showing in Expedition project

frajico — Thu, 25 Sep 2025 09:37:16 GMT

Thank you.

Checking the Expedition Logs, found that the errors were due to the difference between PHP v7.0 and PHP v7.4 that made Expedition Code Fails.

Using Ubuntu 22.04 and the Expedition personalized install script for Ubuntu 22.004, Expedition is working fine.

Re: No security policies showing in Expedition project

emransarkar — Thu, 25 Sep 2025 16:28:06 GMT

found a solution for such error, there is problem with php, which couldn't display the policies and even nat rules due to the following:

Error:

"[php7:error] [pid 662851] [client 10.65.108.4:54080] PHP Fatal error: Uncaught Error: [] operator not supported for strings in /var/www/html/libs/shared.php:4738\nStack trace:\n#0 /var/www/html/bin/SecurityRules.php(597): search_security_policies()\n#1 {main}\n thrown in /var/www/html/libs/shared.php on line 4738, referer: https://10.232.21.200/"

Solution (insert the line before the exact code":

nl -ba /var/www/html/libs/shared.php | sed -n '4680,4760p'
sudo sed -i '4738i if (!isset($rules[$src["rule_lid"]]["tag"]) || !is_array($rules[$src["rule_lid"]]["tag"])) { $rules[$src["rule_lid"]]["tag"] = array(); }' /var/www/html/libs/shared.php

I have successfully resolved this issue.