No security policies showing in Expedition project

[frajico]

Hi!

Installed Expedition on Ubuntu 20.04 with php7.4 cause 7.0 it not available now.

When I import a ChechPoint config to migrate to PaloAlto, process takes very log on step 9 of 10, and nevers ends, but, in main dashboard appears to have imported objects and policy rules from the CKP config

I can see the objects imported but I can NOT see the policy rules neither the NAT rules

Any idea?

[Karen763Purvis]

Hello!

Your Expedition import from Check Point is likely failing at step 9 due to a PHP timeout or memory limit issue. Even though some objects appear imported, the process is incomplete, which mywisely is why policy and NAT rules are missing. To fix this, increase the max_execution_time and memory_limit in your php.ini file (e.g., to 3600 seconds and 2048M) and then restart the PHP service. If the problem persists, check the Expedition logs for specific errors. 

[frajico]

Thank you.

Checking the Expedition Logs, found that the errors were due to the difference between PHP v7.0 and PHP v7.4 that made Expedition Code Fails.

Using Ubuntu 22.04 and the Expedition personalized install script for Ubuntu 22.004, Expedition is working fine.

[emransarkar]

found a solution for such error, there is problem with php, which couldn't display the policies and even nat rules due to the following:

Error:

"[php7:error] [pid 662851] [client 10.65.108.4:54080] PHP Fatal error: Uncaught Error: [] operator not supported for strings in /var/www/html/libs/shared.php:4738\nStack trace:\n#0 /var/www/html/bin/SecurityRules.php(597): search_security_policies()\n#1 {main}\n thrown in /var/www/html/libs/shared.php on line 4738, referer: https://10.232.21.200/"

Solution (insert the line before the exact code":

nl -ba /var/www/html/libs/shared.php | sed -n '4680,4760p'
sudo sed -i '4738i if (!isset($rules[$src["rule_lid"]]["tag"]) || !is_array($rules[$src["rule_lid"]]["tag"])) { $rules[$src["rule_lid"]]["tag"] = array(); }' /var/www/html/libs/shared.php

I have successfully resolved this issue.