What is Expedition?

by alestevez on ‎05-23-2018 11:42 AM - edited on ‎01-31-2019 02:03 AM by Community Manager (22,187 Views)

Expedition is the fourth evolution of the Palo Alto Networks Migration Tool. The main purpose of this tool was help reducing the time and efforts to migrate a configuration from one of the supported vendors to Palo Alto Networks.

 

By using the Migration Tool, everyone can convert a configuration from Checkpoint or Cisco or any other vendor to a PAN-OS and give you more time to improve the results. Migration Tool 3 added some functionalities to allow our customers to enforce security policies based on App-ID and User-ID as well.

 

With Expedition, we have gone one step further, not only because we want to continue helping to facilitate the transition of a security policy from others vendors to PAN-OS, but we want to ensure the outcome is the best as possible. This is why we added a Machine Learning module that can help you generate new security policies based on real log traffic and the introduction of the Best Practices Assessment Tool to check the configuration complies with the Best Practices recommended by our security experts.

 

With all these huge improvements we expect the next time you use Expedition the journey to the excellence will be easier.

 

Note: Expedition is supported by the community as best effort

The Palo Alto Networks TAC does not provide support, so please post your questions in the community.

 

Go to: Expedition landing page on Live Community

Comments
by rschunk
on ‎07-10-2018 05:23 PM

Does anyone know the minimum VMware Workstation version required to import the Expedition VM?  I have 10.0.7.build-2844087 and Expedition fails to start as Workstaion does not recognize the VM type.

 

Thank you,  Rich

by alestevez
on ‎07-12-2018 10:07 AM

Current version is using hardware version 12. But you can modify it to reduce it. It should work.

by rschunk
on ‎07-13-2018 05:32 AM

Do you know what I would modify to ge tthis to work?

by JayakumarParthasarathy
on ‎10-03-2018 11:10 PM

Can we convert from PIX to 8.0?

by alestevez
on ‎10-04-2018 12:38 AM
by JaimeCastelan
on ‎11-13-2018 12:15 PM

Can the tool be used for CiscoFirePOwer? or just ASA?

Thanks

by bagherib
on ‎01-07-2019 01:33 PM

Just ASA for now.  I guess the assumption is that FP is new and cusotmers aren't leaving it yet.  YET.

by alestevez
on ‎01-08-2019 02:59 AM

If the Firepower config has the access-lists like this will work

 

access-list myaccesslist advaced xxxx x xx x x x

by dougwickle
on ‎01-10-2019 02:45 PM

Has anyone been able to get this working with Virtualbox without first using VMWare Workstation or ESXi?  I know the "VBoxManage clondhd" command lets you convert VMDK to a VDI file but I'm not sure if that'll work with an export with multiple vmdk files.