Expedition 1.2.94 Hotfix Information

dpuigdomenec — Tue, 03 Sep 2024 11:15:05 GMT

Version 1.2.94 (Date September 3, 2024)

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.94.all.deb
sha1sum	c8b335e3670e034e2bab1c0571ccf88226475eb2
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.94.all.deb; sudo dpkg -i expedition_1.2.94.all.deb;

CHANGELOG

Fortinet:

Fixed PHP warnings in the following scenarios:
1. When the policy does not contain any "config firewall vip" with portforward disabled.
2. When regions are used in security rule but not in both source and destination.
Addresses in Fortinet not defined as any type or with dynamic type are now migrated with an issue associated and available in Log Monitor.
Added a Log Monitor when reading a security rule using application-list.
Fixed an issue where Expedition was creating duplicated service objects.

PANOS:

Added support to read the "tagging" XML attribute for application-filters entity.

CISCO:

Addressed issues when reading ipv6 network-objects defined in object-group, ensuring Expedition does not create an empty group and correctly handles the ip version and cidr of the network defined in the network-object.

Tool:

Truncated the merged resulting security rule description to 1024 characters after merging 2 or more rules.
Updated the XML file export to ensure the service protocol tcp/udp is always in lowercase.
Implemented a new script to get hit_counts from specific rules instead of requesting hits for all of them.

Device Management / PANOS Integration:

Updated the authentication method when integrating with a device. API integrations uses now a custom header.