Duplicated objects with same name but different mask

[pavel.zemtsov]

Hi All,

I need help with this tricky thing. It looks like a bug though.

I have 200+ duplicated objects (in pairs) with same name, but different mask (obviously wrong on the duplicate item).

E.g.,

subnet A - 10.0.0.0/16

subnet A - 10.0.0.0/32

The config was digested from ASA 9.14.

Expedition version: 1.2.87

I've checked ASA for duplicates and there are none.

Example screen attached.

I wonder if anybody can advise how to fix it.

Kind regards,

Paul

[dpuigdomenec · Accepted solution]

Hi @pavel.zemtsov 

Please consider update to latest version 1.2.91 as it contains a fix issue for address merge feature.

Also consider executing this workaround as my guess is that although both objects are showed as used only 1 of them is currently being used.

Please follow below steps to test my assumption:

- Get the object  "A - 10.0.0.0/16" named  "A - 10.0.0.0" and rename to "A - 10.0.0.0_16".

- Execute the calculated unused objects.

- If I'm not wrong one of the objects will be displayed now as not used so you can just remove it.

To do above for all your objects you can create a filter and using the tools tab add a suffix to the selected objects.

Let me know if that could help,

Note: To work on a final fix I will need you share your original configuration with us using a TAC case. If you do so please send an email to fwmigrate@paloaltonetworks.com with the TAC case number.

Thanks in advance,

David

[pavel.zemtsov]

Hi @dpuigdomenec ,

Thank you for the detailed and fast reply.

I'll update the Expedition first and report the output here.

Kind regards,

Paul