About alestevez

https://live.paloaltonetworks.com/t5/Expedition-Discussions/Machine-Learning-to-create-new-Security-Policies-from-Tap-Mode/m-p/229812#M475 ... View more

Hi,   What you described is the behavior we develop so it works as designed, doesnt mean that's the best, so we will think a better way that allow you to select the interfaces and apply the logic you want, let us think about it.   The tool was designed to Migrate configs from 3rd parties and there is why at the time to remap interfaces we were thinking only the objects we support from other vendors what are just the interfaces and Zones, QoS, etc its from PANOS devices and we didnt think about those, but thanks to you we will increase the support at the time to remap interface to replace everywhere with the new references.   Thanks you in the name of my team for the deailed explanation and for allow us to improve 🙂 ... View more

My guess its a memory problem   Please take a look to the file   tail -f /tmp/error_SecRulesLearn if you read a problem with "memory allocation" or related try this:   vi /opt/Spark/spark-defaults.conf Replace the values inside where it says "1g" by "2g", be sure you add have at least 2GB of RAM assigned to your Expedition and try the analisys again ... View more

No they are not supported. We only migrate services, address, Security and Nat Rules. ... View more