topic Re: Struggling to get Expedition working in Expedition Discussions

Struggling to get Expedition working

a.parmar — Tue, 27 Feb 2024 09:05:37 GMT

Hi everyone.

I am really struggling to get Expedition working so I can use it to migrate setting from our existing firewall to new firewalls that will be managed by Panorama.

I have deployed Ubuntu 20.04.* LTS Server (64-bits AMD) to an EXSi server followed the instructions on https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/ta-p/215619?attachment-id=11295.
The scripts runs with errors about rabbitmq which I have seen mentioned in other threads:

Err:12 https://www.rabbitmq.com/debian testing/main amd64 Packages

404 Not Found [IP: 2606:4700:10::6814:be0 443]

Ign:13 https://www.rabbitmq.com/debian testing/main Translation-en

Ign:25 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en_GB

Fetched 192 kB in 14s (13.9 kB/s)

Reading package lists... Done

E: Failed to fetch https://www.rabbitmq.com/debian/dists/testing/main/binary-amd64/Packages 404 Not Found [IP: 2606:4700:10::6814:be0 443]

E: Some index files failed to download. They have been ignored, or old ones used instead.

Hit:1 http://gb.archive.ubuntu.com/ubuntu focal InRelease

E: Failed to fetch https://www.rabbitmq.com/debian/dists/testing/main/binary-amd64/Packages 404 Not Found [IP: 2606:4700:10::6814:be0 443]

E: Some index files failed to download. They have been ignored, or old ones used instead.

I have tried following instructions on how to fix these errors however nothing seems to help.

I can get to the Expedition web interface however it says:

PanOrders Agent is stopped
Remediation: Start the agent

Clicking in Start does not help.

Any suggestions?

Thanks in advance!

Re: Struggling to get Expedition working

dpuigdomenec — Tue, 27 Feb 2024 10:38:01 GMT

Hi @a.parmar

Yesterday, we identified a problem with the script installer resulting in the incorrect installation of the rabbitmq-server component. To rectify this and install the missing component, kindly refer to the steps outlined in this article: https://live.paloaltonetworks.com/t5/expedition-articles/how-to-address-cve-2022-37026-vulnerability-in-expedition/ta-p/524133

Furthermore, we have updated the script to ensure that future installations will be successful.

Let me know if you have any other question,

Best

Re: Struggling to get Expedition working

a.parmar — Tue, 27 Feb 2024 10:47:23 GMT

Looks like it's working now, thank you so much! I had followed the link previously and ran through the steps however it looks like they were updated yesterday.

Re: Struggling to get Expedition working

dpuigdomenec — Tue, 27 Feb 2024 11:34:27 GMT

Thanks for the update!
Yes we updated the article yesterday to make sure it works.
Let us know if you have any other issue,

Best