Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Rambod_Fard
Participant

SmartMove error - converting ASA to CheckPoint

I am trying to convert my ASA config to CheckPoint by SmartMove and receive following error message:

"Object reference not set to an instance of an object"

Does anyone have any suggestion? Thanks,

19 Replies
PhoneBoy
Admin
Admin

Moving this into the Developers (Code Hub)‌ section.

Does it only print that error message or give you any other information that might help?

0 Kudos
Rambod_Fard
Participant

The message includes following information:

Module: CiscoMigration

Class: CiscoConverter

Method: Acl_To_CPRule

Robert_Decker
Advisor

It seems that the code crashes due to unsupported/invalid ACL configuration.

Which version of ASA are you migrating? Which version of tool are you using?

Robert.

0 Kudos
Rambod_Fard
Participant

I believe the reason of error is not ASA version or tool... I have another ASA config file with same version which is converted successfully... There is no major difference between these two ASA... both have objects, interfaces, object-group, ACLs and so on... BTW I use new version of SmartMove (2_1_6520_26222) to convert both ASAs...

Robert_Decker
Advisor

According to your error information, this is due to one of the ACL's settings.

Anyway, I'll fix the suspicious code that probably fails to parse that ACL and reports the error.

Please monitor the download center during next week for a newer version.

0 Kudos
Robert_Decker
Advisor

Hi,

A fixed version (SmartMove_2_1_6539_25884.zip) was just uploaded to sk115416.

Please download it and see if it works for you.

Robert.

Moe_89
Contributor

Hi Robert,

I am using the latest SmartMove tool and i get below error when converting ASA configuration.

Could not parse configuration file

Message: Object reference not set to an instance of an object

Module: CiscoMigration

Class: Cisco_AccessList

Method: Parse

0 Kudos
Robert_Decker
Advisor

Hi,

It seems that the tool fails to parse one of ACL commands and throws an exception in code.

I cannot tell which of the lines fails to parse without examining your ASA configuration file.

If you are ok to send me your file, I'll ask Dameon to provide you our FTP address.

Please let me know.

Robert.

0 Kudos
Moe_89
Contributor

Hi Robert, 

Sure I can provide you the file. Please PM the ftp details.  

0 Kudos
Robert_Decker
Advisor

Dameon Welch Abernathy‌, please provide our ftp details, so he can send me his ASA configuration file.

thanks, robert.

PhoneBoy
Admin
Admin

Details have been PMed to you.

0 Kudos
Moe_89
Contributor

Thanks Dameon, I have uploaded the config file Robert Decker

0 Kudos
PhoneBoy
Admin
Admin

OK will move it where Robert Decker‌ can retrieve Smiley Happy

0 Kudos
Robert_Decker
Advisor

Hi,

I've received and examined your ASA configuration file.

Starting from line 4404 in the file, there are access-list commands, that I've never seen or read in Cisco ASA docs that the tool supports.

For example - 

access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096)

access-list 101; 1 elements; name hash: 0xe7d586b5

Or access-list commands having child access-list commands )indented commands).

The tool didn't recognize such format and therefore reported parsing failure.

If you remove the content starting from this line, the tool works fine and parses the file.

Just for the curiosity, what kind of configuration such access-list commands represent? Which ASA version?

I saw that on top of your file the ASA version is 8.4(7)...

Robert.

0 Kudos
Moe_89
Contributor

Hi,

Sorry for the late response. The configuration I provided is from Cisco FWSM apparently,  but I was told that the ios image on FWSM is the same as the ASA's.

0 Kudos
Robert_Decker
Advisor

No, they are not the same. SmartMove tool doesn't support Cisco FWSM format.

Robert.

0 Kudos
Moe_89
Contributor

Thanks. We are planning to migrate the FWSM config to ASA so we can convert it in SmartMove.

Moe_89
Contributor

Robert Decker‌  FYI. After tweaking the FWSM config file, I was able to convert the configuration using SmartMove. As you mentioned earlier SmartMove does not support FWSM due to which the tool was not recognizing some FWSM commands like "names command" which maps names to IP addresses. I replaced the host names with their corresponding IP addresses after which the tool was able to give an output.

Christopher_To
Collaborator

Hi,

I am also trying to convert an ASA to CheckPoint but I am getting this error.

Message: access to path <path> is denied

Module: mscorlib

Class: _Error

Method:WinIOError

 

Can you assist?

 

Thank you,

Chris

0 Kudos
Upcoming Events

    CheckMates Events