Cisco ASA to PA conversion some of the APIs failed with "is not a valid reference" error

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Cisco ASA to PA conversion some of the APIs failed with "is not a valid reference" error

L1 Bithead

Hi All,  i am doing migration from Cisco ASA to PA and in using Expedition tool at the last step where API Output Manager to push/send API some of the APIs failed to push with error '\...\is not a valid reference' error, a couple of APIs are successful (ex NAT, tag, VSYS) but address, address groups, security rules, service groups failed..

Pls advice, appreciate the help.





L6 Presenter

Hi Tusharj,


Please send a e-mail to, the team can help you on this issue.


Thank you!

L5 Sessionator

I also agree that the best would be to contact us via email to check the ASA config in more detail.

It is strange that you have a reference to an object called "..."

Was the original config file cleaned in any way?



i ended up using xml import since APIs were failing, even then i got bunch or errors/warnings in commit validations, one thing i noticed and may be a bug is that there was a tag added as 'merged' by the expedition tool on some of the objects, i simply needed to remove that tag and that issue was resolved.



Thanks for reporting this.

Could you let us know which version of Expedition were you using while doing the Export of the XML?


Thanks again

  • 4 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!