Expedition was conceived to reduce the time and efforts a security admin needs to improve and optimize their Palo Alto Networks configurations. Following that effort, we have added, within Expedition, support not only to run a BPA analysis if not also be able to remediate some of the failed checks (all related to Device Config) and now integration with the project IronSkillet. https://github.com/PaloAltoNetworks/iron-skillet
Expedition comes with a built-in messaging queue system.
This mechanism allows it to prepare some tasks and send it to the queue. With this, we can run jobs internally without having to wait until the job is finished in the same page we are.
The first thing you will have to do when you enter in Expedition is check if the process is UP or DOWN, click on START in case is DOWN. If this is DOWN the Jobs will not be executed until it get's UP again.
Some of the tasks relaying in the TASK MANAGER are:
Download contents from Devices
Retrieve dynamic reports from firewalls for App-ID and User-ID adoption
Debug: If you want to see the output generated by the jobs running from the Queue you can see the content here:
tail -f /home/userSpace/panReadOrders.log