We have a scenario whith a client, who has been using router ACLs as their primary source, and looking to get them into PA. Will the latest version of Expidition allow the conversion of a routers ACL to Palo config? Or are we looking at having to build it manually via the CSV Import functionality?
Appreciate it. Would you happen to have any documentation handy that would assist with the proper syntax of how to build them out via the CSV Import?
We have a copy of the ACLs, which i can filter down and mod, however when i follow the one guide i found, it only recognizes the commas for column field, not the ; for the additional column
the column separators use ';' for the CSV import.
when converting the ACL's you'll have to account for the variation in the number of elements in each acl as the CSV format needs to have every line to have the same number of elements/conditions for importing.
for ACL's that have less elements than the ACL with the most elements you can add the appropriate number of ';' to meet the requirement that each line must have the same number of elements, see the example below.
access-list; 102; deny ;tcp ;any ;any ;eq ;23 access-list; 103; permit ;ip ;any ;any ; ;
AHHHH! That would explain it.
Looking back at my lines, there are fields for ranges that would cause empty spacing in other populated, For instance, one with range and 2 set ranges and another with Eq and maybe 6 port listings, equating to differing column lengths in total.
Makes perfect sense! Thank you very much!!!!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!