article Expedition 1 on Ubuntu 20.04 Server in Expedition Articles

Expedition 1 on Ubuntu 20.04 Server

dgildelaig — Tue, 14 Sep 2021 09:39:18 GMT

Hello!

We know you are all concerned on having the Expedition tool on an old not-supported Ubuntu. You had requested several times to increase support for newer versions of the OS, and we have finally reached to the point we can present Expedition on Ubuntu 20.04 LTS.

We have updated our Expedition installer and some internal modules (Spark codes, database structures and webserver backend) to be able to support the tool installation on the current Ubuntu 20.04 LTS.

The installation process is very similar as it used to be, but to help you in the task, we have written an Instructions document with multiple images that will certainly guide you.

And, on top of all this, we are providing a Transfer Assistant that will help you transferring all your Expedition projects, devices, user credentials, traffic logs, etc. from your old Expedition to a new one.

You will find the Installation document in our Expedition Documents section:

https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/ta-p/215619

Let's start a new Expedition together!

Re: Expedition 1 on Ubuntu 20.04 Server

MNagel — Thu, 16 Sep 2021 01:04:02 GMT

Quick note -- just did a fresh install on this as documented, but the ML IP was not reachable. It was subtle issue -- the IP field looked right, but had a trailing space. Once corrected, the problem resolved.

Re: Expedition 1 on Ubuntu 20.04 Server

crumford — Tue, 21 Sep 2021 15:45:48 GMT

Where can we find the installer for the Ubuntu 20.04 version?

The installer from the link on the main Expedition page appears to not be pointing the newer version. I get an error saying the installer is for 16.04 and that I'm running 20.04.

Re: Expedition 1 on Ubuntu 20.04 Server

lychiang — Tue, 21 Sep 2021 15:48:42 GMT

Hi @crumford Please access the installation guide here: https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/ta-p/215619?attachment-id=10191

There is a link to download the installer.

Re: Expedition 1 on Ubuntu 20.04 Server

todfoxnet — Fri, 24 Sep 2021 17:39:20 GMT

Which Ubuntu 20.04 edition is it? The headers refer to 64-bits ARM, but the screenshots in some cases refer to 64-bits AMD.

Re: Expedition 1 on Ubuntu 20.04 Server

lychiang — Fri, 24 Sep 2021 17:54:47 GMT

Current latest version is v20.04.03 LTS , please see below screenshot:

Re: Expedition 1 on Ubuntu 20.04 Server

justamoment — Sat, 09 Oct 2021 20:50:57 GMT

I have an existing Ubuntu 16.04 server running Expedition v1.1.68.

Will that still work to migrate an SRX? Can I update Expedition to the latest hotfix or do I need to upgrade to Ubuntu 20.04?

I'm on a time crunch so I don't really have enough time to spend on an upgrade 😞

Thanks!

Re: Expedition 1 on Ubuntu 20.04 Server

lychiang — Mon, 11 Oct 2021 15:26:27 GMT

You can upgrade the expedition to the latest by issue below two commands

$sudo apt-get update

$sudo apt-get install expedition-beta

Re: Expedition 1 on Ubuntu 20.04 Server

justamoment — Tue, 12 Oct 2021 02:57:40 GMT

Thanks. Sorry if this is documented somewhere (I didn't setup our Expedition server and the person who did no longer works here), but after everything runs there are these two lines at the end:

its recommended to run after install: apt-get -y -f install
its recommended to run after install: sudo apt-get autoremove

Do I need to run these commands? I did confirm that the GUI shows the latest version.

Re: Expedition 1 on Ubuntu 20.04 Server

lychiang — Tue, 12 Oct 2021 15:27:30 GMT

Yes, it's recommended to run both commands after you upgrade the expedition package.

$sudo apt-get -y -f install

$sudo apt-get autoremove

Re: Expedition 1 on Ubuntu 20.04 Server

AlexNC — Mon, 18 Oct 2021 12:42:39 GMT

Hi Everyone

We did a fresh install of Ubuntu 20.04 and Expedition with the new installer.

For us there are two things not working

- Radius Authentication

- ML Learning > Processing files

Details:

- Radius Authentication:

we can configure the Radius Server but doing a "test" will only show "error" nothing more. On our old Expedition Server we get a error message if the User was rejected or if auth was successful.

- ML Learning > Processing files

We see all the files under the Device (in our case the Panorama) but when we select a single file or multiple files. we cannot click/select the "Process Enabled Files" button

We can toggle all or just single files between "Disable Files/Enable Files"

Are these still some open issues that will get addressed or is there something else wrong with this install and someone might be able to help here.

Thank you and best regards

Alex

Re: Expedition 1 on Ubuntu 20.04 Server

lychiang — Mon, 18 Oct 2021 16:11:46 GMT

@AlexNC

For Radius Authentication, could you please check if you have additional information in the /var/log/apache/error.log file?

For ML Process Files, you will need to go the firewall device not Panorama, After you added the Panorama as device, you can then click on the right upper corner show all device icon , then try to process the logs in the firewall device.

Re: Expedition 1 on Ubuntu 20.04 Server

AlexNC — Thu, 21 Oct 2021 06:37:09 GMT

@lychiang

Yes you are correct, of course I had to go to the actual device and not Panorama itself.

Regarding the Radius authentication, i got the following error from the log you mentioned:
[Thu Oct 20 17:32:35.870372 2021] [:error] [pid 50121] [client CLIENT-IP:55677] PHP Fatal error: Uncaught Error: Call to undefined functio
n radius_auth_open() in /var/www/html/userManager/API/auth/login.php:134\nStack trace:\n#0 /var/www/html/bin/Auth.php(168): login('username'
, 'password')\n#1 {main}\n thrown in /var/www/html/userManager/API/auth/login.php on line 134, referer: https://expedition.hostname.com/

Thank you for your help and best regards

Re: Expedition 1 on Ubuntu 20.04 Server

AlexNC — Mon, 25 Oct 2021 11:50:16 GMT

Does that sound like a Bug in expedition or something else wrong with my installation?

Cheers

Alex

Re: Expedition 1 on Ubuntu 20.04 Server

lychiang — Mon, 25 Oct 2021 16:00:42 GMT

Hi @AlexNC , this is a bug in Expedition, we are aware of the issue , will provide fix later.

Re: Expedition 1 on Ubuntu 20.04 Server

AlexNC — Tue, 26 Oct 2021 11:47:43 GMT

Hello @lychiang thank you for getting back to me and letting me know about it.
Looking forward to the fix.

Thank you and best regards

Alex

Re: Expedition 1 on Ubuntu 20.04 Server

AlexNC — Thu, 28 Oct 2021 07:34:30 GMT

@lychiang today I noticed that under Devices it shows for example 3 CSV files ready. When I expand the Device tree to see all devices managed by Panorama in Epxedition, none of the devices show any CSV files.
When I select the firewall device that has the 3 CSV files I do see them und M. Learning.

Is this a Bug? i can't recall how it was on the old Expedition instance with 16.04

Cheers

Alex

Re: Expedition 1 on Ubuntu 20.04 Server

lychiang — Thu, 28 Oct 2021 15:52:28 GMT

This is the same as in Ubuntu 16.04. No bug reported. You will see all CSV files on Panorama , but when you need to process , you will need to go to the firewall device that owns those traffic logs to be able to see them and process them.. The serial# of the firewall need to match the firewall serial# in the traffic log.

Re: Expedition 1 on Ubuntu 20.04 Server

josecuevasn — Mon, 08 Nov 2021 17:28:57 GMT

Hi, Maybe a dumb question but I'm not a Linux expert whatsoever.

I did follow the installation guide "https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/ta-p/215619?attachment-id=10191"

Whenever I finish the execution and installation of the initSetup.sh, I rebooted the VM, however, I'm unable to reach the IP address from the VM. It seems that the Ubuntu server is refusing the sessions.

I did check the networking, it should be reachable, I do have a server running in the same subnet. Also, I've tried installing version 2.0. shown in "https://panos.pan.dev/docs/expedition/expedition_qs/" and it was successful, however, it has a lot of bugs.

Re: Expedition 1 on Ubuntu 20.04 Server

lychiang — Mon, 08 Nov 2021 17:49:19 GMT

Hi @josecuevasn

Please note, Expedition version 1.x and 2.x are not supposed to live on the same ubuntu VM. I would suggest below steps:

1. Follow the installation guide you mentioned in the previous post to install a new ubuntu VM first.

2. After Ubuntu VM is up, please make sure you verify the IP of the ubuntu VM and make sure you can ping the VM from your desktop

3. If you are able to reach the VM, then proceed to the steps on running the expedition 1.x installer.