Migration Error upgrading to 8.4.4

jason.williams — Tue, 12 Mar 2019 00:13:55 GMT

I was trying to upgrade an ASA to from 8.2.4 to 8.4.4, and I began receiving the following migration errors (the IP addresses have been changed to protect the innocent):

ERROR: MIGRATION: The following ACE is partially/not migrated to Real IP,

as it could result in more permissive policy. Please manually migrate this ACE.

permit esp host 1.1.1.1 host 2.2.2.2

I got a TON of these, in fact the migration, and these errors ran for over 24 hours before I gave up, powercycled the unit and forced 8.2.4 to boot through ROMMON. This was a secondary unit, that's why I let it go this long...

What I don't understand is that we do not have anything in the configuration for ESP.

Has anyone experienced this and know why it may be occuring?

Thanks.

Jason

Migration Error upgrading to 8.4.4

Jennifer Halim — Thu, 25 Oct 2012 13:17:58 GMT

Do you mean you don't even have that "permit esp host 1.1.1.1 host 2.2.2.2" configured in your configuration?

Can you pls share your current 8.2.4 config, thx.

Do you have any ACL that is not referenced anywhere?

topic Migration Error upgrading to 8.4.4 in Network Security

Migration Error upgrading to 8.4.4

Migration Error upgrading to 8.4.4