Anyone know server sizing requirements for this? Minimum cpu, memory and storage?
Also, what is the recommended way to install?
I started by running the command
scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csvon my PA220.
root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):
https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c
Be sure to go Settings > M. Learning > and change the Expedition ML Addr
...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini
sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...
Currently running version 1.2.47
I have over 100 IPSec tunnels using DH Group 21 on a Cisco ASA. I am moving to a Palo 3430. The migration tool does not allow DH Group 21. However, PanOS version 10.2 added this DH Group. Can the migration tool be u
...
Hi
Maybe is a cosmetic bug, but I uploaded my projects in this case CP to PA and works normally in the projects.
But in the library does not show the number under CP column. Running expedition 1.2.48.
Hello Community,
This is normal behavior when upload the CP config to expedition?
In this case I only upload the CP config. Is pending the PA base.
Hi All,
I would like to confirm if it is just my installation but it would appear that Expedition 1.1.98 does not have the option of importing a M600 device. There is only the option for m100 and m500.
When attempting to use an m500 I get an `Exc
...
Hello community,
I'm working in one migration from CP to PA.
I found one CP have multiple domain (virtual systems) exactly 3. So where extract the configuration I have 4 tar.gz files (3 virtual system and 1 management) and 4 routes files (3 virtua
Hello Community,
In the next days I need to migrate somes Checkpoints FW running 80.40 to PANOS.
Checking the documentation, Exist a new version of ShowPolicyPackage 2.1.0 releases 2 weeks ago.
Question, can we use this new version or continue wit
...
Hi All,
I have recently encountered a very strange issue in Expedition project when trying to make auto-zone assign.
Quick background:
- In expedition project I have a config migrated from checkpoint
- we have around 15 direcly connected interface
Trying to migrate SRX 5800 ver 20.4R3-S3.4 cluster using Expedition. I have done quite a few SRX migrations but this one doesn't show any of the global routing instance information. Because of this there are tons of BGP and OSPF configuration that wo
...
Hi,
I need to migrate from CP 80.40 to PANOS 10.1.8.
Generally, Checkpoint NAT behaves the same way as NAT in PAN-OS.
For this reason, my question, it is a best practice when we uploaded the CP config to expedition enable this option?

Optio
...
Hi
A Fortigate firewall uses Fortinet 'Internet Services' objects. There are many of them, they are predefined and some of them contain several tens of thousands of IP addresses (Amazon-AWS object, for example currently contains 75114 objects, there
...
I'm using the expedition v.1.2.47. I'm trying to add a PA3430, but this model is not available from the drop down list for devices.
Is v. 1.2.47 the latest? I just installed this version today per the installation guide.
Hi all,
need to help me!!!
This is the first time, I downloaded ExpeditionVM form EXPEDITION RESOURCES on LIVEcommunity.
After, I import to my VMWare Workstation with Network Adapter as pic:
I login ExpeditionVM and run: apt-get update/ install -> O
...
How can you move a virtual router to a different vsys?
I imported the config of my Panorama with 3 different vsys.
Now I import the config of my Juniper SRX firewall and want to assign my virtual router to vsys3, there is no button to change it to
...
Is anyone else trying to wait patiently for expedition 2.0? I was hoping it would be released in time for ignite, but I guess not.
Having imported an SRX config to Expedition, we appear to have rendered all the st0.x 'secure tunnel interfaces' in the SRX config as 'tunnel.x' in the interface section of the config but, in the virtaul router, static routes continue to reference to
...
