Cisco ASA to PA conversion some of the APIs failed with "is not a valid reference" error

[tusharj]

Hi All,  i am doing migration from Cisco ASA to PA and in using Expedition tool at the last step where API Output Manager to push/send API some of the APIs failed to push with error '\...\is not a valid reference' error, a couple of APIs are successful (ex NAT, tag, VSYS) but address, address groups, security rules, service groups failed..

Pls advice, appreciate the help.

Regards,

Tushar 

[lychiang]

Hi Tusharj,

Please send a e-mail to fwmigrate@paloaltonetworks.com, the team can help you on this issue.

Thank you!

[dgildelaig]

I also agree that the best would be to contact us via email to check the ASA config in more detail.

It is strange that you have a reference to an object called "..."

Was the original config file cleaned in any way?

[tusharj]

Hi,

i ended up using xml import since APIs were failing, even then i got bunch or errors/warnings in commit validations, one thing i noticed and may be a bug is that there was a tag added as 'merged' by the expedition tool on some of the objects, i simply needed to remove that tag and that issue was resolved.

Tushar

[dgildelaig]

Thanks for reporting this.

Could you let us know which version of Expedition were you using while doing the Export of the XML?

Thanks again