topic Re: Check Point R80.30 In-line layers conversion in Expedition Discussions

Check Point R80.30 In-line layers conversion

Arne-VDH — Fri, 19 Jun 2020 11:53:13 GMT

Hi,

I'm stumbeling upon an issue while importing a CP R80.30 configuration, exported with the github script. When I import the config in expedition (1.1.70), it only seems to import the parent rules for the in-line layers and not its members:

as you can see, there is a management section (5 rules) with no in-line layer. These rules get converted fine. For the other sections (outside, external dmz, internal dmz) the expedition tool only converts the "parent rule for ..." and nothing below them.

I extracted the obtained .tar.gz files and validated the info for these rules is there in separate HTML&JSON files. Am I missing something in the import process or is this a bug/feature request?

Kind regards

Re: Check Point R80.30 In-line layers conversion

dgildelaig — Mon, 22 Jun 2020 07:21:16 GMT

I would like to gather some more information about this case.

Did you get them imported as different VSYS?

Re: Check Point R80.30 In-line layers conversion

Arne-VDH — Mon, 22 Jun 2020 09:03:03 GMT

I'm not even sure how I would do that -I just imported the tar.gz as CP file within the migration tool. It did create a separate 'vsys' or template (expedition bottom right) for the application and FW/security layers. Within the FW/security layer these rules cannot be found. I can provide the source file in this specific case directly though if that would be prefered.

Re: Check Point R80.30 In-line layers conversion

dgildelaig — Mon, 22 Jun 2020 09:06:49 GMT

Thanks, that would be good to check the issue source.

Please, send us the source file to fwmigrate@paloaltonetworks.com

Regarding the VSYS, I meant if the tool created those for you and placed the config inside.

Re: Check Point R80.30 In-line layers conversion

KartikaUtami123 — Mon, 19 Jan 2026 03:32:03 GMT

has this ever been resolved?