Expedition 1.2.82 Hotfix Information

dpuigdomenec — Fri, 05 Jan 2024 21:17:49 GMT

Version 1.2.82 (Date January 05, 2024)

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.82.all.deb
sha1sum	c1ae806e4376616f4b9fabade7097c7bfc256606
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.82.all.deb; sudo dpkg -i expedition_1.2.82.all.deb;

CHANGELOG

MT-2741 - CISCO. Fixed below bugs:

1) Adding support for alias being used as subnets in address-group definition. i.e:

names name 10.1.1.0 SC_BCN

object-group network SITE_BCN
network-object SC_BCN 255.255.255.128
MT-2739 - Checkpoint R80+. Fixed below bugs:

1) Address group defined as exclusion group but without exception members. Added a fix so the group is now managed as any other exclusion group, getting as result members typed as range IP.
2) Added a log/monitor for NAT rules with DAT type static but using as DAT address an address-group.
3) When applying DNAT logic avoid creating shadow rules. Instead applying below logic:

Check if current Security Rules matches the NAT rule, if so add a warning to trace it to the specific NAT rule and the DNAT tag as well.
Check if cloned security rules from an specific security rule can be merged by destination and service.
Check and make sure the cloned security rules contain the required "to" zones based on destinations.

4) Refactor on internal functions to compare if a list of objects is included in another list of objects (isAinB and isAinBservice).
MT-2728 - Checkpoint R77 - Fixed below bugs:

1) Fixing bug when reading ipv6 addresses.
MT-2742 - Screenos - Fixed below bugs:

1) Fixing bug for Screenos to manage Global zone as any
2) Fixing bug for Screenos managing static routes in ipv6 syntax