article Expedition 1.2.28 Hotfix Information in Expedition Release Notes

Expedition 1.2.28 Hotfix Information

dpuigdomenec — Thu, 14 Jul 2022 08:19:32 GMT

Version 1.2.28 (Date July 14, 2022)

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.28.all.deb
sha1sum	3b40d0fb1d8135cac036cae6e3b2bcb1bff44290
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.28.all.deb; sudo dpkg -i expedition_1.2.28.all.deb;

[MT-2422] - EXPD2-304 - Monitor logs are not removed and avoid create duplicated logs.

[MT-2421] - (CISCO) Improvement on Service Group object and Service object creation by reusing default and created services
[MT-2423] - EXPD2-354 - (STONESOFT) Avoid creating a "service group" object that includes itself as member (potencial never end loop)

DimensionNS — Thu, 14 Jul 2022 22:05:36 GMT

Appears that ASA Source config with combined tcp-udp service objects are unrecognized upon import and get remapped to tcp-6500,udp-6500.

Example;

service-object tcp-udp destination eq 3389

idris_tuna — Fri, 15 Jul 2022 03:43:15 GMT

Additional to to @DimensionNS comments,

Attached are screenshot from ASA and Expeditionto show the errors

We are at the middle of a large migration Is there an estimated time for fixing the bug?

idris_tuna — Fri, 15 Jul 2022 03:53:27 GMT

Here are screenshots

dpuigdomenec — Fri, 15 Jul 2022 10:49:58 GMT

Hi @idris_tuna, @DimensionNS for the advice and apologizes for the regression bug introduced in this version.

I can confirm you the issue will be fixed in next expedition version planned to release earlier next week.

Thanks and sorry for inconveniences,

Best regards,

David

dpuigdomenec — Mon, 18 Jul 2022 17:06:02 GMT

Please refer to new version 1.2.29 that is fixing the regression bug for service-object tcp-udp destination eq 3389.

Thanks,

David

DimensionNS — Mon, 18 Jul 2022 17:17:02 GMT

Thank you so much David, will update and test...