Expedition support for PanOS9.1.1

Reply
Highlighted
L2 Linker

Expedition support for PanOS9.1.1

Dears,

 

We've needed to upgrade our Panorama & firewalls for bug fixing reasons to PanOs9.1.1.

Since the Panorama upgrade our migrations using Expedition are having issues:

PanOS9.1.1 with Expedition:

  • Expedition pre 1.1.56: after a merge and config import, following is the config load error on Panorama: 

              "job failed because of configd restart"

  • Expedition 1.1.60: config import works, but source and/or destinations objects are missing. This occurs repetively. (80% on security and NAT rules).

Is this known?

Which version of Expedition is supported for PanOs9.1.1?

 

Best regards,

Filip Elsen

Highlighted
L3 Networker

Re: Expedition support for PanOS9.1.1

Hi Filip,

The latest version 1.1.61.2, it should work with PanOS9.1.1, please try update the expedition. 

Tags (1)
Highlighted
L2 Linker

Re: Expedition support for PanOS9.1.1

Hi Lychiang,

We'll give it a go and will let you know the result.

At the time of the last migration, the latest Expedition version was 1.1.60, which has issues with PanOs9.1.1.

Best regards,

Filip Elsen

Highlighted
L1 Bithead

Re: Expedition support for PanOS9.1.1

Hi Filip,

Is possible to send us the config to tested this, please? Send to email fwmigrate@paloaltonetworks.com to study this case.

Thank you,

Regards,

Highlighted
L0 Member

Re: Expedition support for PanOS9.1.1

Hi Filip, did you resolve this issue?

 

I'm loading a migrated config into 9.1.1 and the source and destination objects are missing.

Highlighted
L2 Linker

Re: Expedition support for PanOS9.1.1

Hi @lychiang,

During previous COVID months, migrations were put on halt, but are restarting as of last week.

The firewalls and Panorama are on 9.1.1

We're on Expedition: 1.1.69.2 and still have issues.

The config had been prepared as before, but when importing it into Panorama we always hit: 

"job failed because of configd restart"

 

Best regards,

Filip

Highlighted
L2 Linker

Re: Expedition support for PanOS9.1.1

Hi @DamienDove 

No - the issue is not solved.

When loading the migrated config, it works, but when performing a commit we get an error:

"job failed because of configd restart"

 

Best regards,

Filip

Highlighted
L2 Linker

Re: Expedition support for PanOS9.1.1

Hi,

@sjanita @aestevez  @dgildelaig 

During the last COVID months, our migrations were put on hold and restarted last week.

The Firewalls & Panorama are on 9.1.1

In Expedition version:

  • 1.1.60, Loading the merged configuration in Panorama worked. Committing the configuration in Panorama worked. Only this version had an issue since it was removing the source-ips, destination-ips and ports while merging the config. Similar like @DamienDove.
  • 1.1.69.2 In this version, the config merge etc is working. Loading the merged config into Panorama following error is received:

image002.JPEG

Can you please have a look, we're blocked for the moment.

Thanks a lot,

Filip Elsen

 

Highlighted
L5 Sessionator

Re: Expedition support for PanOS9.1.1

Just to discard options, there was nobody performing a management service restart during your commit process, right?

Highlighted
L2 Linker

Re: Expedition support for PanOS9.1.1

Hi Didac,

Right!

We don't do this command often, which is good

Best regards,

Filip

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!