topic Re: problem migrating address objects from ASA in Expedition Discussions

problem migrating address objects from ASA

KeithMoody — Wed, 10 Oct 2018 17:54:42 GMT

I am having an issue with Expedition where I am migrating an ASA5520 config (pre-8.4) to a new PA850. The specific issue I am having is that not all address objects are migrating over, most of them did not migrate. I have merged the configs and loaded the final config into the PA but only a subset of address objects show up in the PA config, I have tried the API and xml config with the same results. All of the objects that migrated over show the computer icon, while those that did not show the @ icon, I assume there is a connection. I also tried marking all objects as shared with no luck. Any help would be appreciated.

Re: problem migrating address objects from ASA

bagherib — Wed, 10 Oct 2018 18:09:11 GMT

Did you try pasting the config in the clipboard?

Re: problem migrating address objects from ASA

KeithMoody — Wed, 10 Oct 2018 18:29:58 GMT

I did open the XML config and the missing objects are not there at all. Of the 260 address objects that show in expedition only 70 objects are represented in the .xml config.

Re: problem migrating address objects from ASA

bagherib — Wed, 10 Oct 2018 19:50:38 GMT

I would start a new project, go to Import, Cisco and on the bottom right, paste the Cisco config in the clipboard. See if everything comes through.

Re: problem migrating address objects from ASA

KeithMoody — Wed, 10 Oct 2018 21:23:16 GMT

Thanks for the reply. I am trying not to start over since I have made a ton of modifications to the current base config that I don't want to do over again, including renaming almost all of the 250+ objects in question. What's most confusing is that all objects are visible in Expedition under the objects/address area, with the base config selected in the bottom right. The only difference in the good ones and bad ones is the icon shown in the picture I posted. I'm curious if the @ symbol just an error icon?

Re: problem migrating address objects from ASA

KeithMoody — Thu, 18 Oct 2018 17:20:15 GMT

I ended up fixing this outside of Expedtion by exporting all objects to excel then coverting the list to XML and editing the .xml config file manually. I never sorted out why some objects were treated differently.