Checkpoint configuration migration in expedition tool

[karundeep]

Hi,

I'm trying to migrate checkpoint configuration to Palo Alto using expedition tool. But there is an issue in security policies and NAT rules. Zones are not reflecting in security & nat rules. There is also issue in invalid services. I've followed below steps in tool.

1. Import config of both Firewall
2. Import the Route of Checkpoint
3. Remap Interface according to Palo Alto
4. Define Zones and attach interfaces to it.

Please let me know if I've missed any other step.

Thanks,

Karun

[lychiang]

Hi @karundeep Zone is auto calculated based on interface of checkpoint tgz and route file , have you import the tgz file and route file at same time ? Also what version of expedition you are running ? 

[karundeep]

Hi,

Thanks for your response.

I've imported checkpoint tgz and route file at same time. I'm not sure why zones are not calculated automatically. Expedition tool is on ver 1.2.17.

Thanks,

Karun