About COsterbrink-LIS

@dpuigdomenec Issue also persits with a completely new project - I reached out to fwmigrate@paloaltonetworks.com    BR Chris ... View more

@dpuigdomenec two days ago when the  task "Calculate Unused Objects" was finished I was able to work without any problems. Today I re-opened this project and it starts again with  the task "Calculate Unused Objects" hanging at 88% - is the issue not resolved or do I have to wait everytime I open the project to have the task finished again?   BR ... View more

@dpuigdomenec  seems to have recovered over night, works again today, thanks for your quick action! ... View more

@dpuigdomenec    David; thanks for the quick fix. I updated and rebooted the VM, then re-opened the project and when jumping to objects it still says    anythhing else I need to do?   thx, Chris   ... View more

I can confirm the same issue as  Idris_tuna  started apparently with 1.2.28 and also present in 1.2.29   ... View more

while working further I also recognized that the routes are missing in ther VR and that the tags are missing as well.  for the missing templates parts a did a manual workaround and build my own set commands and the tags could be exported from Expedition as CSV and I transformed them to set commands too.    I commited this config to Panorama and the Device-Group and then imported this config again to a new project into Expedtion to use it as the base config so I don't have to redo this work everytime again and just need to merge the CP config to it.    the final exproted could be imported successful as xml config file to panorama and gave no validation erros.    turned out there was still missing elements from the device-group part of config. Some service-groups were empty and also some address-groups. No idea why, but could be added via CLI quite quickly.    but still leaves you with a feeling that the output might lack parts of the config  ... View more

Hi  @lychiang     that's exactly the workflow I used.    In the export everything is availbale except the interface definitions.  the interfaces are referenced in the zones and the VR config correctly but they're missing in the xml and set export.    Meanwhile I did a workaround by exporting the Checkpoint interfaces on CLI and transform them via Notepad++ into set commands. Took me some time but now I can paste them successfully into the template in panorama.    To me it looks like a bug as everything is availabe and if you add another interface manually in the template of the base config in expedition it get's exported as well - only the migrated CP interfaces are missing.   BR Chris   ... View more

Hi @lychiang    thanks for your response!    point 2 and 3 are clear and be not an issue.    regarding point 1 - I added panorama to Expedition and loaded the devices over panorama.  in the project settings I added the two new devices I want to migrate the config to. In the project I loaded the config from one of the devices as base config. that also worked successfully ( i could see the inital config in device group and template). Version of the base config is 10.2.1 (as we need it for a pair of 5420s).    strange thing, one day after my post (I didn't change anything I could export more items (now I also have services, address and address-group objects, the VR and the zones) but still missing the interfaces which are unfortunately 250 vlan interfaces.    so device group is complete and template only missing the interfaces.     best regards, Chris ... View more