topic Re: How to resolve invalid NAT rules in Expedition in General Topics

How to resolve invalid NAT rules in Expedition

SteveSirag — Fri, 22 Feb 2019 16:59:21 GMT

I've downloaded and run the latest Expedition VM, and have imported my Cisco ASA config file, but Expedition says all my NAT rules are invalid. Not clear what that means, and the instructions (link below) say nothing about how to resolve them.

https://live.paloaltonetworks.com/t5/Expedition-Articles/Expedition-Documentation/ta-p/215619?attachment-id=7541

Any ideas guys?

Re: How to resolve invalid NAT rules in Expedition

SteveSirag — Fri, 22 Feb 2019 17:11:57 GMT

In fact, it appears that every single NAT rule in ASA was interpreted in the reverse by Expedition...

IE: "From" network is the destination one, and "source" host is the destination source. Useless much?

Re: How to resolve invalid NAT rules in Expedition

Tarik_Admani — Wed, 14 Aug 2019 07:02:17 GMT

Hi,

Were you able to resolve this issue, my problem is that the static rules are being skipped by expedition.