Expedition 1.2.28 Hotfix Information

[dpuigdomenec]

Version 1.2.28 (Date July 14, 2022)

PACKAGE DOWNLOAD

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.28.all.deb
sha1sum	3b40d0fb1d8135cac036cae6e3b2bcb1bff44290
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget  https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.28.all.deb; sudo dpkg -i expedition_1.2.28.all.deb;

CHANGELOG

Bug

• [MT-2422] - EXPD2-304 - Monitor logs are not removed and avoid create duplicated logs.

Improvement

• [MT-2421] - (CISCO) Improvement on Service Group object and Service object creation by reusing default and created services
• [MT-2423] - EXPD2-354 - (STONESOFT) Avoid creating a "service group" object that includes itself as member (potencial never end loop)

[DimensionNS]

Appears that ASA Source config with combined tcp-udp service objects are unrecognized upon import and get remapped to tcp-6500,udp-6500.

Example; 

service-object tcp-udp destination eq 3389

[idris_tuna]

Hi @dpuigdomenec ,

Additional to to @DimensionNS comments,

Attached are screenshot from ASA and Expeditionto show the errors

We are at the middle of a large migration Is there an estimated time for fixing the bug?

[idris_tuna]

Here are screenshots

[dpuigdomenec]

Hi @idris_tuna, @DimensionNS for the advice and apologizes for the regression bug introduced in this version.

I can confirm you the issue will be fixed in next expedition version planned to release earlier next week.

Thanks and sorry for inconveniences,

Best regards,

David

[dpuigdomenec]

Hi @idris_tuna @DimensionNS 

Please refer to new version 1.2.29 that is fixing the regression bug for service-object tcp-udp destination eq 3389.

Thanks,

David

[DimensionNS]

Thank you so much David, will update and test...