WSA Policy config migration - Require to replace proxy_config_generated section in xml

[sameesin]

Hi,

Trying to migrate a policy config from S370 WSA device to virtual WSA. The policy import throws an error: 

Certificates signature verification failed due to Credential Encryption certificate

After replacing the proxy_config_generated certificate and key section in the xml file with that of the virtual WSA, the import is successful.

Wanted to confirm if this is an expected behavior and this change in the xml file is required for all WSA migrations. 

[balaji.bandi]

yes, that should work, check the configuration compare (just for verification).

[opryluts]

Hi there,

I'd assume S370 is running some old AsyncOS version. So may want to check the defect CSCvm26756

Please vote if you find the comment helpful.