Expedition 1.2.89 Hotfix Information

[dpuigdomenec]

Version 1.2.89 (Date May 16, 2024)

PACKAGE DOWNLOAD

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.89.all.deb
sha1sum	f5e42557e89d3b0b006218463d38ef6ecc341bd8
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget  https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.89.all.deb; sudo dpkg -i expedition_1.2.89.all.deb;

CHANGELOG

Fixing below Bugs. These updates and fixes aim to improve the performance and functionality of the tool and parsers.

Fortinet
1) Improved Expedition to create default zones based on zones used in security rules and interfaces, without overlap.
2) Made minor changes to prevent PHP warnings caused by type mismatches or missing keys.
3) Enhanced Expedition to properly create NAT rules when reading VIPs with FQDN NAT, including support for the mapped-addr attribute.

Stonesoft
1) Resolved issue allowing customers to directly upload zip files.
2) Implemented logic to handle scenarios where an undefined address object is used, creating the object with the identified network value and including an error for verification.

Tool
1) Added syslog configuration examples with filtering for TRAFFIC logs.
2) Updated Expedition versions panel on the dashboard to include a refresh option.
3) Fixed query on the dashboard to skip default services when identifying invalid services.
4) Added utility script to split log files containing both SYSTEM and TRAFFIC logs into separate files with only TRAFFIC logs.
5) Improved security by changing the execution method of PHP's mysql and mysqldump commands to avoid passing credentials in plain text.