New Expedition Installation Procedure

Printer Friendly Page

Hello Expedition Community,

The process to install and deploy Expedition has been changed by offering an installable script that can be used to deploy onto your own instance of Ubuntu 16.04 LTS.

Cloud and On-Prem Ready

The changes in the Expedition installation provides greater flexibility allowing users to deploy Expedition on-prem onto their local hyper-visor or onto a cloud compute resource in AWS, Azure, and Google Cloud.


The attached document describes the OS requirements (Ubuntu 16.0.4) and recommend compute resources.

 

Download and read the attached Expedition installer guide.
To get started with your Expedition installation, download the Expedition installer script:

https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz

 

Additional Information

Download and follow the use case examples in the available Expedition Admin Guide and Technotes:

https://live.paloaltonetworks.com/t5/Expedition-Articles/Expedition-Documentation/ta-p/215619

 

Ask questions in the Expedition Community

https://live.paloaltonetworks.com/t5/Expedition-Discussions/bd-p/ExpeditionDiscussions

 

Comments

I have done a successful installation, but I cannot login. User admin and password paloalto is not working. What are the credentials? CLI login is o.k.

 

Those are the correct credentials to access via GUI (web https).

You mention that the installation was successful, so I understand that you did not see any errors during the installation script execution.

 

I mention this because it is important that the correct versions of the package dependencies are installed. One that has given some problems is the latest versions of MariaDB, the Database manager that we use in Expedition.

If you have executed an "apt upgrade", most probably MariaDB will have updated to the latest version, and some dependencies would stop working, invoving a PDOConnect.

You could check if this is your case looking at the apache error logs, that you could find in /var/log/apache2/error.log.

 

One easy way to check if the error is there is to keep the file open with a 

tail -f /var/log/apache2/error.log

and while having this file open for reading in a terminal, open a Web Browser and try to login.

If there are errors related to the communications with the database due to the PDOCOnnector , those will show there

Hello,

 

I'm unable to download the installer script from below URL, it seems to be not loading.

 

https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz

 

Regards,

Hi,

 

The ability to download the repository from conversionupdates has been fixed.

I'm unable to access Expedition via GUI as I'm seeing the default apache2 index.html page

I'm not getting any wiser from the logs ...

 

Regards,

Hi!

 

I'm also unable to access Expedition via GUI. How this can be solved? 

 

Regards,

Maja

Hi,

 

That depends, did you change default password or not?

 

Regards

No, I didn't change default password. This is new installation. Account for CLI is working.

 

Regards,

Maja

 

Do you see the Expedition login screen or not?

default login = admin\expedition

 

Yes, I see login page. In documentation is written that admin\paloalto is default login.

 

In the meantime I started with reinstallation. After installation is complete, I'll try admin\expedition.

 

Regards,

Maja

your login should work: admin\paloalto

In earlier versions it has been admin/expedition

anyway I'm also struggling to log in from time to time into the GUI.

Hello,

 

I'm unable to download the installer script from below URL, it seems to be not loading. Giving me an error of "404: not found"

 

https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz

 

Regards,

Hi,

 

I was able to download it via browser:

https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz

 

Regards,

 

Absolutely fails to work !!
Downloaded Ubuntu server (32bit) 16.04.6

Installed it on VMware Workstation 10

Watch and did exactly as shown on PA's video.

Default Apache page loads - NOT ,, Expedition

Has complete internet access during and after the installation.

Tried multiple times with the same results.

 

When items are free,,, they are free for a reason.

It’s true that it’s not working for a while to do the installation via Ubuntu. But there’s a legacy installation procedure where you can download an OVA. 

It’s a great tool and I’m amazed that they keep it free. It has helped me a lot already.

 

Regards,

I found my error on why "I" couldnt get Expedtion to work.

It was my error, below is exactly what needed to be done to get it to install, configure & work correctly.

Priority 1 = Get the correct version on Ubuntu!!!   "I can not emphasize this enough" the scripts are written for that version.

It MUST be Server, (NOT desktop) it MUST be AMD64 (NOT i386) it MUST be version 16.04.6

Here is the link that I used to find and donwload it http://releases.ubuntu.com/16.04/

Palo Alto did create a youtube video - and when followed exactly "to the letter" as shown = IT WORKED.

PA's video = https://www.youtube.com/watch?v=II_6dgnPn0U

As an FYI my specs are:

VMware Workstation 10

Ubuntu 16.04.6 (Server AMD64 - I donwloaded/used the ISO file)

VMware settings = 2 Cores, 4 GIG RAM - Be mindful this is just for my own POC/LAB at home so specs will be vary to each others specs.

 

Hope this helps!!!!!

Now off to take on MineMeld,,,, I'm having issues with that one also,,,, but I'll beat :-)

 

I tried to install the expedition tool using the new method, but it does not work (I'm using the right Ubuntu version); the problem seems related to the installation of the MariaDB database server. I can not investigate further now, but at the end of the script the db server is missing.

Grenzi
This may sound funny.,.,., but was true in my case...
My firewall was blocking access :-)
Not sure if thats whats going on in your case,,, just an FYI.

Good Luck !!