Expedition 1.2.94 Hotfix Information

[dpuigdomenec]

Version 1.2.94 (Date September 3, 2024)

PACKAGE DOWNLOAD

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.94.all.deb
sha1sum	c8b335e3670e034e2bab1c0571ccf88226475eb2
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget  https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.94.all.deb; sudo dpkg -i expedition_1.2.94.all.deb;

CHANGELOG

Fixing below Bugs. These updates and fixes aim to improve the performance and functionality of the tool and parsers.

Fortinet:

• Fixed PHP warnings in the following scenarios:
  1. When the policy does not contain any "config firewall vip" with portforward disabled.
  2. When regions are used in security rule but not in both source and destination.
• Addresses in Fortinet not defined as any type or with dynamic type are now migrated with an issue associated and available in Log Monitor.
• Added a Log Monitor when reading a security rule using application-list.
• Fixed an issue where Expedition was creating duplicated service objects.

PANOS:

• Added support to read the "tagging" XML attribute for application-filters entity.

CISCO:

• Addressed issues when reading ipv6 network-objects defined in object-group, ensuring Expedition does not create an empty group and correctly handles the ip version and cidr of the network defined in the network-object.

Tool:

• Truncated the merged resulting security rule description to 1024 characters after merging 2 or more rules.
• Updated the XML file export to ensure the service protocol tcp/udp is always in lowercase.
• Implemented a new script to get hit_counts from specific rules instead of requesting hits for all of them.

Device Management / PANOS Integration:

• Updated the authentication method when integrating with a device. API integrations uses now a custom header.