Who Me Too'd this topic

Who Me Too'd this topic

benlewis
L1 Bithead

Check Point R80+ policy auto-zoning on import partially works

Currently working on migration from CP R80.20 to PA 9.0.X. and having issues with auto-zoning during the import process using the show policy package java app method.

Only the Application Layer section of the Security policy has auto-zoning applied. The Network Layer has no Zones applied. 

Interfaces and Zones are created correctly from netstat output however they only appear in the Application Layer Template which is why no Zones are applied to the Network Layer Security policy.  Expedition version is 1.1.69.3.

 

The older API method works when only exporting the Network Layer however in the newer version there is no java app parameter that allows excluding the Application Layer.  Sadly I need to use the latest version for this Customer's migration.

 

Thanks

Ben

Who Me Too'd this topic