New Expedition Installation Procedure

[sjanita]

Hello Expedition Community,

The process to install and deploy Expedition has been changed by offering an installable script that can be used to deploy onto your own instance of Ubuntu 16.04 LTS.

Cloud and On-Prem Ready

The changes in the Expedition installation provides greater flexibility allowing users to deploy Expedition on-prem onto their local hyper-visor or onto a cloud compute resource in AWS, Azure, and Google Cloud.

The attached document describes the OS requirements (Ubuntu 16.0.4) and recommend compute resources.

Download and read the attached Expedition installer guide.
To get started with your Expedition installation, download the Expedition installer script:

https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz

Additional Information

Download and follow the use case examples in the available Expedition Admin Guide and Technotes:

https://live.paloaltonetworks.com/t5/Expedition-Articles/Expedition-Documentation/ta-p/215619

Ask questions in the Expedition Community

https://live.paloaltonetworks.com/t5/Expedition-Discussions/bd-p/ExpeditionDiscussions

[cbruder]

I have done a successful installation, but I cannot login. User admin and password paloalto is not working. What are the credentials? CLI login is o.k.

[dgildelaig]

Those are the correct credentials to access via GUI (web https).

You mention that the installation was successful, so I understand that you did not see any errors during the installation script execution.

I mention this because it is important that the correct versions of the package dependencies are installed. One that has given some problems is the latest versions of MariaDB, the Database manager that we use in Expedition.

If you have executed an "apt upgrade", most probably MariaDB will have updated to the latest version, and some dependencies would stop working, invoving a PDOConnect.

You could check if this is your case looking at the apache error logs, that you could find in /var/log/apache2/error.log.

One easy way to check if the error is there is to keep the file open with a 

tail -f /var/log/apache2/error.log

and while having this file open for reading in a terminal, open a Web Browser and try to login.

If there are errors related to the communications with the database due to the PDOCOnnector , those will show there

[SivaShankar]

Hello,

I'm unable to download the installer script from below URL, it seems to be not loading.

https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz

Regards,

[GNeyrinck]

Hi,

The ability to download the repository from conversionupdates has been fixed.

I'm unable to access Expedition via GUI as I'm seeing the default apache2 index.html page

I'm not getting any wiser from the logs ...

Regards,

[mkopcic]

Hi!

I'm also unable to access Expedition via GUI. How this can be solved? 

Regards,

Maja

[GNeyrinck]

Hi,

That depends, did you change default password or not?

Regards

[mkopcic]

No, I didn't change default password. This is new installation. Account for CLI is working.

Regards,

Maja

[GNeyrinck]

Do you see the Expedition login screen or not?

default login = admin\expedition

[mkopcic]

Yes, I see login page. In documentation is written that admin\paloalto is default login.

In the meantime I started with reinstallation. After installation is complete, I'll try admin\expedition.

Regards,

Maja

[GNeyrinck]

your login should work: admin\paloalto

In earlier versions it has been admin/expedition

anyway I'm also struggling to log in from time to time into the GUI.

[battula6]

Hello,

I'm unable to download the installer script from below URL, it seems to be not loading. Giving me an error of "404: not found"

https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz

Regards,

[GNeyrinck]

Hi,

I was able to download it via browser:

https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz

Regards,

[Cthroop]

Absolutely fails to work !!
Downloaded Ubuntu server (32bit) 16.04.6

Installed it on VMware Workstation 10

Watch and did exactly as shown on PA's video.

Default Apache page loads - NOT ,, Expedition

Has complete internet access during and after the installation.

Tried multiple times with the same results.

When items are free,,, they are free for a reason.

[GNeyrinck]

It’s true that it’s not working for a while to do the installation via Ubuntu. But there’s a legacy installation procedure where you can download an OVA. 

It’s a great tool and I’m amazed that they keep it free. It has helped me a lot already.

Regards,

[Cthroop]

I found my error on why "I" couldnt get Expedtion to work.

It was my error, below is exactly what needed to be done to get it to install, configure & work correctly.

Priority 1 = Get the correct version on Ubuntu!!!   "I can not emphasize this enough" the scripts are written for that version.

It MUST be Server, (NOT desktop) it MUST be AMD64 (NOT i386) it MUST be version 16.04.6

Here is the link that I used to find and donwload it http://releases.ubuntu.com/16.04/

Palo Alto did create a youtube video - and when followed exactly "to the letter" as shown = IT WORKED.

PA's video = https://www.youtube.com/watch?v=II_6dgnPn0U

As an FYI my specs are:

VMware Workstation 10

Ubuntu 16.04.6 (Server AMD64 - I donwloaded/used the ISO file)

VMware settings = 2 Cores, 4 GIG RAM - Be mindful this is just for my own POC/LAB at home so specs will be vary to each others specs.

Hope this helps!!!!!

Now off to take on MineMeld,,,, I'm having issues with that one also,,,, but I'll beat 🙂

[grenzi]

I tried to install the expedition tool using the new method, but it does not work (I'm using the right Ubuntu version); the problem seems related to the installation of the MariaDB database server. I can not investigate further now, but at the end of the script the db server is missing.

[Cthroop]

Grenzi
This may sound funny.,.,., but was true in my case...
My firewall was blocking access 🙂
Not sure if thats whats going on in your case,,, just an FYI.

Good Luck !!

[MakotoT]

seem fail get gog key

- below is fail

   https://conversionupdates.paloaltonetworks.com/ex-repo.gpg

So, couldn't get expedition-tool from repository.

everyone done?

[Akeakamai]

Third time was the charm for me, during the ubuntu install it wasn't clear that I should be creating create the 'expedition' user. First time I created my own user, initSetup.sh prompted me to create the 'expedition' user via adduser, which I did and reran initSetup.sh but install failed.

When Ubuntu install asks for user name, provide 'expedition' as the user. Don't know if this is how it's supposed to function, what was required for me.

[JohnTravlosJR]

Cthroop,

Thank you, using Ubuntu 16.04.6 (Server AMD64) worked... i386 version did not.

The only issue left is PanOrders Agent is stopped. I can't figured out how to get it started.

[BerkleyAPAC]

after a lot of try and all the suggestions.. It simply didnt work for me so I tried Legacy OVA, which worked pretty smoothly

[rkoenig]

Sorry this may be cross posting but as of June 8th we successfully installed Expedition in Azure using the manual method of standing up an Ubuntu Server from the Azure store and following some guidance from the following post/articles
https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/tac-p/332467#M226
https://live.paloaltonetworks.com/t5/expedition-articles/new-expedition-installation-procedure/ta-p/...
https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz

When we attempted to run the script we were prompted to "to create the 'expedition' user via adduser" once we created the user we re-started the script and it completed.

Upon completing this process as described in:
https://live.paloaltonetworks.com/t5/expedition-articles/new-expedition-installation-procedure/ta-p/...
we attempted to access the URL and ran into an Apache error as described in another post, we then used the following commands

sudo apt-get update
sudo apt-get install expedition-beta
sudo bash /var/www/html/OS/BPA/updateBPA306.sh

after the updates we were able to get to the URL and login, now I just want to have our server/azure admin take a snapshot before I go about hardening the system in case I hose things up.

Thanks to everyone who shared their issues and going through the trials and tribulations so that we could succeed.  LOL.

[MatiasCova]

someone know how change the default managment port (443) to 4443? because in the same server im using MineMeld 

Thanks!

[JonCrockettRR]

When will Expedition be supported on Ubuntu 20.04 LTS?

[Jelmer]

I'd like support for Ubuntu 20.04 as well. I don't like deploying a  new 16.x server when it's at the end of it's life cycle.

[Deutch]

Same here, Can we have the script updated for Ubuntu 18.04 LTS? I tried to modify the script to check the 18.04 Ubuntu image but it didn't work..

[BenKnorr2]

There is an Expedition v2.0 that is based on Ubuntu 18.04LTS. It has been easier to deploy from the previous iteration; cheers to the Palo Alto crew that put this together!

https://panos.pan.dev/docs/expedition/expedition_qs