About justamoment

I would much rather have a fully polished product than something a bit rushed out the door.  Please, take your time 🙂   Thanks! ... View more

So, it looks like this description issue happens when a full vsys de-dupe is done.  When I select a single set of address objects (all the same name & value - e.g., a set of 10 duplicates) and run the de-dupe the description doesn't change.   I confirmed that in both cases the descriptions were correct for all objects in a set prior to running the de-dupe in both attempts. ... View more

Oh, I forgot mention previously but I found when I was fixing object duplicates that all of them had these descriptions that weren't what exists on the SRX.  They all had nearly the same thing and it was always cutoff at the max field size of 255 characters. ... View more

Interesting  - I did a sub-atomic Generate API Requests and then sent that services port (tcp-9001) and it worked. ... View more

Other failures:   Services Groups {"25":{"device":"Panorama","status":"fail","text":"<msg><line><![CDATA[ service-group -> RDP -> members \\'tcp-3389-3389-\\' is not a valid reference]]><\/line><line><![CDATA[ service-group -> RDP -> members is invalid]]><\/line><\/msg>","date":"2021-12-01 13:59:06"}}   zones {"25":{"device":"Panorama","status":"fail","text":"<msg><line><![CDATA[ zone -> T1-T2-Uplink-SRX -> network -> layer3 \\'ae8.16\\' is not a valid reference]]><\/line><line><![CDATA[ zone -> T1-T2-Uplink-SRX -> network -> layer3 is invalid]]><\/line><\/msg>","date":"2021-12-01 13:55:54"}}   I have zero confidence in Security Policies so I'm not going to bother. ... View more

Okay, I cleaned up all of the post-merge duplicates, generated API calls, and tried to send the API calls for shared addresses and it almost immediately failed for:   <hostname> \'<hostname\' is already in use]]> {"25":{"device":"Panorama","status":"fail","text":"<msg><line><![CDATA[ address -> <hostname> \\'<hostname>\\' is already in use]]><\/line><\/msg>","date":"2021-12-01 12:43:13"}}   Other failures:   tcp-9001 -> tag \'merged\' is already in use {"25":{"device":"Panorama","status":"fail","text":"<msg><line><![CDATA[ service -> tcp-9001 -> tag \\'merged\\' is already in use]]><\/line><line><![CDATA[ service -> tcp-9001 -> tag is invalid]]><\/line><\/msg>","date":"2021-12-01 13:06:49"}} I saw this the last time I got this point as well but I had started over thinking I had made a mistake.   I was able to send ethernet & AE interfaces successfully. ... View more

Ah, I forgot all about sudo su.  That worked - thanks! ... View more

Sorry, I should've mentioned this:   $ sudo cd /home/userSpace/projects [sudo] password for admin: sudo: cd: command not found ... View more

Sorry for reviving an old thread but I get permission denied when trying to access the project directory:   $ cd /home/userSpace/projects -bash: cd: /home/userSpace/projects: Permission denied   $ pwd /home/userSpace   $ ls -al total 160 drwxr-xr-x 4 www-data www-data 4096 Dec 1 07:35 . drwxr-xr-x 5 root root 4096 May 20 2020 .. drwxr-xr-x 3 www-data www-data 4096 Oct 12 09:27 devices -rw-r--r-- 1 www-data www-data 82 May 29 2020 environmentParameters.php -rw-r--r-- 1 www-data www-data 113092 Dec 1 08:00 panReadOrders.log drwxrw-rw- 4 www-data www-data 4096 Nov 28 16:31 projects -rw-r--r-- 1 www-data www-data 10 Dec 1 00:00 .reportedDate -rw-r--r-- 1 www-data www-data 68 Dec 1 07:35 .signatureMAC -rw-r--r-- 1 www-data www-data 101 Dec 1 07:35 tempEnvironmentParameters.php -rw-r--r-- 1 root root 654 May 20 2020 userDefinitions.php -rw-r--r-- 1 www-data www-data 36 May 20 2020 .uuid4 -rw-r--r-- 1 www-data www-data 36 Oct 11 17:44 .uuid5   $ ls -al projects ls: cannot access 'projects/LVIDSFW34202111281631': Permission denied ls: cannot access 'projects/.': Permission denied ls: cannot access 'projects/LVIDSFW34': Permission denied ls: cannot access 'projects/..': Permission denied total 0 d????????? ? ? ? ? ? . d????????? ? ? ? ? ? .. d????????? ? ? ? ? ? Project1 d????????? ? ? ? ? ? Project2 ... View more

I'll post what I can remember but I've been more or less following the ASA conversion video on Youtube that Lynn did.  The twists are that I'm using Panorama and not firewall to firewall and I get results I don't like and have to rollback to an earlier snapshot or start over completely. ... View more

I think the Network section is pretty self-explanatory.   1) Left | Shared | Objects to Right | DG | shared (created by cleaning up duplicates)   2) Left | Objects and Left | Policies to Right | DG | CORE-FW1   3) Left | Zones (or vsys1 + zones) to Right | Template | CORE-FW1 | Device | vsys1   Alternately, as mentioned above, I could just not cleanup the object duplicates to avoid the conversion to shared and clean them up post-export-merge. ... View more

So do I have the mappings correct with a mix of shared & vsys objects in my last screenshot? ... View more

That makes sense - I just wasn't expecting changing groups to affect address objects. ... View more

I think I've figured out when the Address Objects get jumbled from all vsys to 1568 shared.  What's also strange is if I "filter" on vsys1 it shows all of them where shared only shows the ones showing shared.   What I found is that the Address Objects changed after I merged the duplicate Address Groups.   Should I just not clean anything up except invalids, merge configs, and then cleanup the duplicates?  Or maybe, only cleanup the duplicates that don't cause the change to shared? ... View more

At some point, my objects became a mix of vsys & shared.  Below is the Export page and a snippet of address objects showing vsys vs. shared:   So, how do I map those?  Like this:   Or do I need to go back to an old snapshot (from 2 days ago 😕 ) from before shared appeared? ... View more