This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
Cisco ASA VPN Filters
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- Tools
- Expedition
- Expedition Discussions
- Re: Cisco ASA VPN Filters
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Cisco ASA VPN Filters
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
08-14-2018 01:02 PM - edited 08-14-2018 01:06 PM
I am running the Expedition Tool on our Cisco ASA firewalls and the tools is stating that most of our IP Address, IP Address Groups and Services are invalid. When I go over these invalid objects, they are all part of our VPN filters on our VPN tunnels. Is there anyway for the Tool to recognize that these are ACLs rules in the ASA and that they are not invalid?
7 REPLIES 7
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
08-27-2018 07:39 AM
before go deep in the troubleshooting, can you verify if you edit the file with "vi" there is no weird characters at the begining of each line line CTRL+M ??? Thanks . And check the format of the config has not been altered, like when a object is defined begins at the very left position and the properties inside it are one space to the right and so... Regards
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
08-29-2018 04:02 AM - edited 08-29-2018 04:03 AM
This is the configuration directly from the firewall (the .cfg file) and nothing would have been altered. The Expedition Tool does not seem to understand VPN filter rules, which is just killing us. We have hundreds of rules to convert over, we just cannot get this Tool to help us, so we are having to do this manually which is just a horrid task! If their is anything you help us with, it would be appreciated!
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
08-29-2018 04:06 AM
Please share the config file with us via email to fwmigrate at paloaltonetworks dot com or opening a case with support and share the case number with us. Thanks
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
08-29-2018 04:38 AM
I have opened a new case for this issue. The case number is 00968461. I have uploaded the cisco configuration file to the case.
Like what you see?
Show your appreciation!
Click Like if a post is helpful to you or if you just want to show your support.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks