ASA to PANOS Migration

[Tarik_Admani]

Hi,

I am migrating an ASA config over to PANOS using the migration tool. I havent been able to figure out why the static nat rules are not migrating successfully. This is also breaking the ACL conversion as well. I am on expedition tool 1.1.33.

thanks

[kiwi]

Hi @Tarik_Admani ,

I think you'll have better luck with your question in the Expedition discussions area so I moved it here.

Good luck !

-Kiwi.

[dgildelaig]

Could you share the configuration with us (or at least a relevant snippet of the configuration) to our email (fwmigrate at paloaltonetworks dot com) to check what may be happening?

[Tarik_Admani]

Yes sir,

I see these errors in the migraiton tool - 

Nat RuleID [89] is trying to apply a group to the translated packet. [nat (inside,outside) static x.x.x.x]. Rule not imported

I sent a scrubbed snippet to the email alias - basically this example of the nat conversion is in one of the 7 step migration videos on youtube. 

Thanks,

[Tarik_Admani]

Thanks Kiwi!

[Tarik_Admani]

Thanks for the help, to update anyone else that runs into this, I had to downgrade expedition to 1.1.28 and the nat rules and security policies migrated, going through the final review right now.