Can't generate output files

[santonic]

I am doing ASA to PA migration. After editing the original configuration and importing base image I am ready to merge and export.

Merge works fine and doesn't show any errors. But every time i click Generate XML & Set Output it gets stuck. I've tried in different browsers, I've tried with different base configs, I've upgraded Expedition to the latest version, rebooted server... but nothing helped. It doesn't report any errors it is just stuck there

Usually it's stuck with text saying Generating Profiles vsys/dg;vsys1

How can I fix or troubleshoot this, please? 

[santonic]

Could it be that I created a custom Security Profile Group as a placeholder without any XML code? In that case what would be the minimum code required? 

[sanandh]

@santonic - Can you share your configuration file or expedition project using a TAC case?

Please send the TAC case number to us using:  fwmigrate@paloaltonetworks.com 

[dpuigdomenec]

Hi @santonic 

Besides sharing the config as my colleague @sanandh propose, you can check the file /tmp/error to check for the error.

As you are pointing the error could be due to the custom security profile group. Instead of creating it from scratch on Expedition I will suggest you to create on your device and import into Expedition using your base config. After that, using the bulk change or multi-edit you can add it to all or the selected sec rules.

Let us know if we could help in something else.

Best regards,

David

[santonic]

Thank you all for replies and TAC won't be needed. It was the case of wrong XML code for the Security Profile Group I created in Expedition (and left the XML field empty). After adding simple XML code for an empty Security Profile Group I was able to create output files.