cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1041
Views
0
Helpful
2
Replies

WSA Policy config migration - Require to replace proxy_config_generated section in xml

sameesin
Cisco Employee
Cisco Employee

Hi,

 

Trying to migrate a policy config from S370 WSA device to virtual WSA. The policy import throws an error: 

Certificates signature verification failed due to Credential Encryption certificate

 

After replacing the proxy_config_generated certificate and key section in the xml file with that of the virtual WSA, the import is successful.

 

Wanted to confirm if this is an expected behavior and this change in the xml file is required for all WSA migrations. 

 

2 Replies 2

balaji.bandi
Hall of Fame
Hall of Fame

yes, that should work, check the configuration compare (just for verification).

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

opryluts
Cisco Employee
Cisco Employee

Hi there,

 

I'd assume S370 is running some old AsyncOS version. So may want to check the defect CSCvm26756

 

Please vote if you find the comment helpful. 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: