article Expedition, IronSkillet, and Best Practices in Expedition Articles

Expedition, IronSkillet, and Best Practices

alestevez — Tue, 26 May 2020 22:13:58 GMT

Expedition – The Glue Between IronSkillet and Best Practices

Expedition was conceived to reduce the time and efforts a security admin needs to improve and optimize their Palo Alto Networks configurations. Following that effort, we have added, within Expedition, support not only to run a BPA analysis if not also be able to remediate some of the failed checks (all related to Device Config) and now integration with the project IronSkillet. https://github.com/PaloAltoNetworks/iron-skillet

Re: Expedition the Glue between Iron-Skillet and Best Practices

ash83 — Tue, 09 Apr 2019 14:15:56 GMT

Followed steps in pages 8 and 9 of the attachment, however, the errors/warning do not remediate. Using version 1.1.12 and BP:3.6.3

All internal checks are green and jobs and tast manager is Green, with 0 pending.

Why is this failing and what does remediate exactly do? Which logs can be reviewed to understand why remediate is not working?

Thanks.

Re: Expedition the Glue between Iron-Skillet and Best Practices

ash83 — Wed, 10 Apr 2019 09:15:32 GMT

Anyone?? Thanks

Re: Expedition the Glue between Iron-Skillet and Best Practices

alestevez — Wed, 10 Apr 2019 12:42:12 GMT

Only the Checks with the Dark Gray bag can be remediated by selecting them and clicking the Remediate button from the bottom bar. Only checks under Device Config can be remediated.

Re: Expedition the Glue between Iron-Skillet and Best Practices

ash83 — Thu, 11 Apr 2019 18:49:39 GMT

Thanks for the reply. It might be a good idea to add these restrictions to the admin guide...