Version 1.2.82 (Date January 05, 2024)
| INFORMATION | |
|
Link |
https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.82.all.deb |
|
sha1sum |
c1ae806e4376616f4b9fabade7097c7bfc256606 |
| apt update |
sudo apt-get update; sudo apt-get install expedition-beta |
| manual update | cd /tmp; wget https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.82.all.deb; sudo dpkg -i expedition_1.2.82.all.deb; |
MT-2741 - CISCO. Fixed below bugs:
1) Adding support for alias being used as subnets in address-group definition. i.e:
names name 10.1.1.0 SC_BCN
object-group network SITE_BCN
network-object SC_BCN 255.255.255.128
MT-2739 - Checkpoint R80+. Fixed below bugs:
1) Address group defined as exclusion group but without exception members. Added a fix so the group is now managed as any other exclusion group, getting as result members typed as range IP.
2) Added a log/monitor for NAT rules with DAT type static but using as DAT address an address-group.
3) When applying DNAT logic avoid creating shadow rules. Instead applying below logic:
Check if current Security Rules matches the NAT rule, if so add a warning to trace it to the specific NAT rule and the DNAT tag as well.
Check if cloned security rules from an specific security rule can be merged by destination and service.
Check and make sure the cloned security rules contain the required "to" zones based on destinations.
4) Refactor on internal functions to compare if a list of objects is included in another list of objects (isAinB and isAinBservice).
MT-2728 - Checkpoint R77 - Fixed below bugs:
1) Fixing bug when reading ipv6 addresses.
MT-2742 - Screenos - Fixed below bugs:
1) Fixing bug for Screenos to manage Global zone as any
2) Fixing bug for Screenos managing static routes in ipv6 syntax
