Expedition 1.2.75 Hotfix Information

[dpuigdomenec]

Version 1.2.75 (Date October 12, 2023)

PACKAGE DOWNLOAD

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.75.all.deb
sha1sum	22614db56cb39826647142b88a6e8fd0c37dcd65
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget  https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.75.all.deb; sudo dpkg -i expedition_1.2.75.all.deb;

CHANGELOG

Fixing below Bugs:

• MT-2720 - CISCO issues:
  1. Fixed an issue where Expedition was disabling rules that should not be disabled. Specifically, when reading a rule that had log disabled, Expedition was disabling the rule when the disable was applying to the log feature but not to the rule itself.

• MT-2719 - MT-2723 - Fortinet issues:

  1. Fixed an issue where Expedition was adding itself as a member when creating default service groups.

  2. Fixed an issue where the default services IKE and MS-SQL did not have a proper predefined protocol.

  3. Tuned the query to calculate used objects with the same name.

  4. Refactored to get the service ports separated by spaces, e.g. set tcp-portrange 88 464.

  5. Extended the parser dictionary when reading interfaces.

  6. On named VDOM configuration, created the virtual system with the named VDOM (line: vd_name=VdomName).

• MT-2721 - SRX issues:

  1. Added support for IPv6 when migrating interface addresses.

  2. On multivsys configurations, loaded default Junos applications into the shared VSYS and ensured they were used while reading the application field in the security rules.

• MT-2722 - Stonesoft issues:

  1. Fixed an issue where interfaces defined on a cluster were not properly read.

  2. Enlarged the exclusion field on the address_group_id table to 8000 bytes. Note that creating a new project is required in order to apply this patch.