topic Re: ASA Migration - TCP/UDP source port rules not migrated in Expedition Discussions

ASA Migration - TCP/UDP source port rules not migrated

ROHO — Tue, 06 Nov 2018 04:34:04 GMT

Noticed that many rules with source ports defined are not migrated over.

Instead, it creates a service only for the destination port/range and allows all ports through.

Below are a few rules. Is it a known behavior?

The first two allowed all udp and tcp ports > 1023

The third rule allowed all TCP ports

access-list OUT2IN extended permit udp any4 eq domain any4 gt 1023
access-list OUT2IN extended permit tcp any4 eq ftp-data any4 gt 1023
access-list OUT2IN extended permit tcp any4 eq ftp-data any4

Re: ASA Migration - TCP/UDP source port rules not migrated

sjanita — Wed, 07 Nov 2018 09:05:28 GMT

Not currently supported. Will add a feature request for this.

Re: ASA Migration - TCP/UDP source port rules not migrated

yaz3636 — Wed, 07 Nov 2018 15:12:49 GMT

Is there a solution to work around this in Expedition? I am also experiencing this issue