BPA on 1.1.46.1 Don't Work

BrunoFermo — Sun, 10 Nov 2019 18:07:42 GMT

Hello,

After do a new deploy of Expedition 1.1.46.1, the BPA analyzer do not work, the status "Last Run Never analyzed" don't change and I can't see any result on WEB UI.

Remembering that this is a "Greenfield" deploy of Expedition 1.1.46.1and there is no errors on Expedition checks.

Thanks,

Bruno Fernando

Security Consultant
#PCNSE #PCNSC

Re: BPA on 1.1.46.1 Don't Work

dgildelaig — Mon, 11 Nov 2019 08:00:00 GMT

On which version of a PANOS configuration are you trying to apply the BPA?

Do you see any errors on the /tmp/error file or in /home/userSpace/panReadOrders.log file?

Re: BPA on 1.1.46.1 Don't Work

BrunoFermo — Mon, 11 Nov 2019 13:27:04 GMT

Hi @dgildelaig,

Thanks for the help.

Follow the outputs;

/tmp/error

Notice: Undefined index: template_extra in /var/www/html/bin/configurations/output/output_function.php on line 148
148
Traceback (most recent call last):
File "/var/www/html/libs/ansible/xml-to-ansible.py", line 40, in <module>
import pan.config
ModuleNotFoundError: No module named 'pan'
Error in sys.excepthook:
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/apport_python_hook.py", line 63, in apport_excepthook
from apport.fileutils import likely_packaged, get_recent_crashes
File "/usr/lib/python3/dist-packages/apport/__init__.py", line 5, in <module>
from apport.report import Report
File "/usr/lib/python3/dist-packages/apport/report.py", line 30, in <module>
import apport.fileutils
File "/usr/lib/python3/dist-packages/apport/fileutils.py", line 23, in <module>
from apport.packaging_impl import impl as packaging
File "/usr/lib/python3/dist-packages/apport/packaging_impl.py", line 23, in <module>
import apt
File "/usr/lib/python3/dist-packages/apt/__init__.py", line 23, in <module>
import apt_pkg
ModuleNotFoundError: No module named 'apt_pkg'

Original exception was:
Traceback (most recent call last):
File "/var/www/html/libs/ansible/xml-to-ansible.py", line 40, in <module>
import pan.config
ModuleNotFoundError: No module named 'pan'

/home/userSpace/panReadOrders.log

------------------------------------------------------------
Dom Nov 10 14:05:29 -03 2019 : Restarting readOrders.php
------------------------------------------------------------
------------------------------------------------------------
Dom Nov 10 14:05:29 -03 2019 : Starting readOrders.php
------------------------------------------------------------
------------------------------------------------------------
Sun Nov 10 14:25:12 -03 2019 : Starting readOrders.php
------------------------------------------------------------
------------------------------------------------------------
Sun Nov 10 14:26:24 -03 2019 : Restarting readOrders.php
------------------------------------------------------------
------------------------------------------------------------
Sun Nov 10 14:26:24 -03 2019 : Stopping readOrders.php
------------------------------------------------------------
------------------------------------------------------------
Sun Nov 10 14:26:24 -03 2019 : Starting readOrders.php
------------------------------------------------------------
Checking: ExportMerge
Checking: AbstractProcess
Sun, 10 Nov 2019 16:02:26 -0300 Start Task
Action: Export Merge:

Sun, 10 Nov 2019 16:02:29 -0300 End Task

Sun, 10 Nov 2019 18:03:33 -0300 Start Task

Warning: PDO::prepare(): MySQL server has gone away in /var/www/html/libs/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/PDOConnection.php on line 77
Action: Export Merge:

Sun, 10 Nov 2019 18:03:36 -0300 End Task

Sun, 10 Nov 2019 18:13:40 -0300 Start Task

Sun, 10 Nov 2019 18:32:23 -0300 Start Task

Sun, 10 Nov 2019 18:37:49 -0300 Start Task
Action: Export Merge:

Sun, 10 Nov 2019 18:37:51 -0300 End Task

Sun, 10 Nov 2019 18:40:57 -0300 Start Task
Action: Export Merge:

Sun, 10 Nov 2019 18:40:59 -0300 End Task

Sun, 10 Nov 2019 18:43:48 -0300 Start Task
Action: Export Merge:

Sun, 10 Nov 2019 18:43:51 -0300 End Task

------------------------------------------------------------
Mon Nov 11 10:20:28 -03 2019 : Starting readOrders.php
------------------------------------------------------------

Regards,

Bruno Fernando

Security Consultant

#PCNSE #PCNSC

Re: BPA on 1.1.46.1 Don't Work

BrunoFermo — Mon, 18 Nov 2019 00:07:11 GMT

Hello,

Any news about that topic?

I update to 1.1.47 version and the problem still the same.

I'm trying to analyze a 8.1.9-h4 config version.

Thanks,

Bruno Fernando

Security Consultant

#PCNSE #PCNSC

Re: BPA on 1.1.46.1 Don't Work

dgildelaig — Tue, 19 Nov 2019 09:01:36 GMT

Try to update Expedition to 1.1.48.2.

While update, you will see that it mentions that you need to update Python to 3.7, and it will tell you which script to execute for this to take place (which it is bash /var/www/html/OS/BPA/updateBPA306.sh as root).

You will require internet connection for this process.

Don't forget to update Expedition first.

Re: BPA on 1.1.46.1 Don't Work

BrunoFermo — Mon, 16 Dec 2019 12:36:17 GMT

Hello,

After update to 1.1.48 the BPA works fine.

Thanks @dgildelaig.

Regards,

Bruno Fernando

Re: BPA on 1.1.46.1 Don't Work

mkukucska — Fri, 26 Jan 2024 09:24:29 GMT

Hi Folks,

I have the same issue, executing BPA gives back no any result. Expedition version is 1.2.83 and BPA version is 3.33.0 and python version is 3.7.17. Any hint, what could be the reason?

Thank you,

Mihaly

topic Re: BPA on 1.1.46.1 Don't Work in Expedition Discussions

BPA on 1.1.46.1 Don't Work

Re: BPA on 1.1.46.1 Don't Work

Re: BPA on 1.1.46.1 Don't Work

Re: BPA on 1.1.46.1 Don't Work

Re: BPA on 1.1.46.1 Don't Work

Re: BPA on 1.1.46.1 Don't Work

Re: BPA on 1.1.46.1 Don't Work