Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Hi, I have just tried to use the Expedition "API Output Manager" for the first time and find some rather strange behaviour. I have used ML to create around 33 new security rules, when I went to the "API Output Manager" to generate api commands for each rule (SubAtomic) I selected all the api calls for the security rules and pushed to the firew...
I have expedition installed on Ubuntu server 20.04.5 in Vmware Workstation using NAT with the ip 192.168.186.x Everything is working fine when i am connected to my WIFI, able to ping, traceroute, access to login page and login. But when I am not connected to any network, I am unable to login. although I am able to ping/traceroute/access login...
FWs - Migration from Checkpoint to Palo Alto Good afternoon LiveCommunity, as always, thank you for your time, good vibes and collaboration. Soon we have a mission to migrate some Firewall Checkpoints to Palo Alto. Well I plan to use Expedition to perform the migration processes. FW HA Checkpoint series 4000 - with a Appliance Smart1 to ...
Hi guys, Nowadays I am busy with understanding all process of firewall migration to Palo Alto and finding shortest way for migration without facing any error:) therefore i create my lab and try to test all alternative. I wonder why the PANDP version should be identical ? In my opinion we import xml file of old backup and it should be includ...
Running Expedition 1.1.91.3, PanOrdres agent is hung and won't restart. I've cleaned up disk space and completed a reboot, still same issue. Looking through documentation others had similar issue, I removed the rabbitmq service: apt-get remove rabbitmq-server && apt-get purge rabbitmq-server - this successfully removed rabbitmq when I tr...
After importing Panorama into a Project the Dashboard show's the full number of security rules but when you go into the policies, select the Panorama xml config and try to vew "all" or for specific device-groups it displays "no data". Running v1.1.26, Although I was having this issue on v1.1.22 but left it alone while the web gui reload loop w...
Hi, I need to migrate from an HA pair of 3050s (8.1.11) to an HA pair of 3410s (10.2.*). I'm looking at Expedition as a means of migrating the config to get to the correct version but I've seen it mentioned that HA could be a problem. Can somebody clarify or point me in the direction for the info around that please?
In attempting to add a new API key in expedition, I get "Remote Exception: Invalid Credentials" What is the cause of this? I'm using the admin login for the PA-3260
I'm trying to import a cisco asa config into expedition. i keep getting the error 'error ocurred while uploading file' I've tried multiple file extensions. Any suggestions would be greatly appreciated.
Hey, I have an issue using the ML learning part of Expedition tool. Expedition: 1.1.3Spark dependencies: 0.1.1Best Practices: 3.6.3 1) I have uploaded some logs in the past and was able to process them. This is all in a lab environment, and those logs are no longer relevant. Is there a way to remove these processed log files? 2) I have now...
Hello all,I am running into an issue with importing configs where it just seems to sit and never progress. I am importing a config from a Palo on the same network, so it's not being blocked by the firewall. I show allows in the logs when I checked anyways.So i exported the config, added the device on Expedition, and tried to upload the XML file,...
Does expedition requires an internet connection to work? if not, does changing the DNS server break the install? long story short I installed it on a laptop with internet then moved it to an air-gapped environment but it breaks and I cannot login with admin/paloalto after doing so and changing the dns server in /etc/netplan
1) I setup expedition on ubuntu (CORRECTION 22.04.5) on workstation 17, but changed the hardware compatibility to esxi 6.7 2) I setup the expedition initscript and got expedition to boot correctly, I can login. from this computer after I export the expedition VM as an ovf and move it to esxi 6.7, this is where the problems begin. I import th...
Hello all. I have just installed Expedition but am unable to log in. I get the "Incorrect Username or Password" error. I have run php /var/www/html/OS/startup/restore/restoreAdmin.php and got the expected reply: ✓ Connected successfully to the database✓ Admin user found✓ Admin password restored to: 'paloalto' Still I cannot log in. Any sugge...
Hello, Can someone please explain or provide me with ressources to understand the merging capability of duplicate objects in expedition. how does it work ? how does it effect the policies that can be impacted and how to merge duplicates in a correct way (knowing that i will be directly doing this on production environment) Thanks
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
