About Per_Westerlund

Hi!   I have a new Expedition setup, running 1.2.13 on Ubuntu 20.04.   Adding a FW device, setting up API keys and retreiving config works well.   When I do the same for the Panorama (10.1.4.-h4 on M200) everything works the same, but the device is not recognised as being a panorama; the tab "PANORMA DEVICES" does not get activated.   This is a Panorama HA setup with dedicagted LC, but it feels like that should not matter at all.     How do I figure out why this does not work?   /Per ... View more

Expedition 1.1.28   Lately I have seen some occasions where Source or Destination fields in NAT or Security rules show up as "null" in the main table. Earlier, when I worked on this project, they showed up as "any". In some rules they still show up as "any", not all are showing "null". List view If I edit these rulles individually, the difference is that the "broken" ones show as "any" (all lower case), the others show "Any" (initial capital).   Works Broken I can fix the problem (at least momentarily) by selecting the address "any" and deleting it. Then it suddenly turns into the proper "Any", and now it is OK.   OK again I have a feeling that I fixed this on my rules, but that it reappeared when I returned to the project later, but I cannot definitely prove it (yet).   Anyone else seen this problem?   It is problematic, because I have to fix it by hand (or reimporting form CSV), because I cannot find a way to find and replace these errors using Multi-Edit.   /Per ... View more

Hi again!   Running Expedition 1.1.28.   A new bug in CSV import of NAT rules.   I have many lines that contain the same value for the field "interface" ("Interface" in the GUI). Only the first line get this value imported. On the subsequent lines with the same value, that field is empty.   It is, however, not so simple that only the first entry works. Near the end of the import, there is a single line with a different value for the field "interface". In that single line, the correct value is imported.   /Per  ... View more

Hi!   This is related to another bug I just described (Bug in CSV Interface import with unnumbered interfaces).   If you import static routes with only an interface (typically a tunnel interface) but without a gateway address, the entry does not get imported.   Reasonable if you only ever use ethernet-like interfaces, but needed if you use IPsec VPNs.   Workaround: Set a dummy gateway address. It will be ignored (if you don't remove it before putting it in production) ... View more

Hi!   Running Expedition 1.1.28.   I recently begun importing tunnels via CSV import. I have discovered that interfaces with type (media) "tunnel" are ignored if they are not assigned an address at all. Tunnel interfaces often don't need addresses asigned, especially if they are used with static routing and next-hop is the interface.   Performing an experiment with an ortdinary ethernet interface shows the same thing, without an address ethernet interfaces are not imported either. This is more understandable, as this could be en error in the CSV file.   Request: Please allow importing interfaces without IP addresses, at least for those media types where it makes sense.   /Per ... View more

Running Expedition 1.1.26   Saving a project snapshot with a name works well, I can select it and load it again later.   If I don’t explicitly fill in a name but leave it blank the system creates a name for me.    If I later try to select that name to load, the selection dialogue immediately closes without any effect. In reality that function doesn’t work for me at all.   Anyone else seen this behavior?   /Per ... View more

I'm working on producing a CSV file to use as a source for NAT rules. Right now I only need interface hide NAT (using default interface address as hide address).   I have not been able to find any documentation (including the latest published CSV import guide) that has an example that gives any hint to how the fields 'tp_source' and/or 'interface' should be formatted to get this behaviour.   I don't need updated documentation, but would very much appreciate a single example of a line from a CSV file that Expedition can ingest correctly, getting the expected interface hide NAT result.   /Per Westerlund ... View more