Expedition server sizing
Anyone know server sizing requirements for this? Minimum cpu, memory and storage?
Also, what is the recommended way to install?
Discussions
Resolved! ML gets stuck at "Pending"
I started by running the command
scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csvon my PA220.
root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe
If You Need an OVA...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):
https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c
Be sure to go Settings > M. Learning > and change the Expedition ML Addr
...Resolved! How to Upload configuration files bigger than 2MB
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini
sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...
PALogs sub-dirs
Does Expedition actively use the following PALogs subdirs, or can I clean these out?
connections.parquet
sparkLocalDir
spark-warehouse
Basically, I am asking because I have a limited ammount of space and LOTS of logs being sent to the PALogs dir,
...Migration from pa500 to pa820
I am planning on using the migration tool to conver the config from pa500.
To do this once I get the same firmware on both the boxed do I also have to import the base config from the pa820 to the migration tool?
I also read somewhere something ab
...Invalid Name not functional and Odd Search Behavior
I have several invalid address objects that were migrated with a name #.#.#.#/# and i want to replace the '/' with a '-' so that the name is valid, but the replace option is not functioning. The method was to right click and select predefined filters
...
Two ASA pre 8.3 Problems
I have run into two ASA pre 8.3 Problems.
1) importing a deny security rule that had a destination port of 445, was changed to be all tcp ports ( that would be a small problem =D)
2) Importing routes pointed to the inside with a vpn on the outside th
...Resolved! MaxReports is already reached
After upgrading to 1.0.105 I recieve an error that E: sub-process /usr/bin/dpkg returned an error code (1).
I also see the following error:
"No apport report written because MaxReports is reached already".
Any help would be appreciated.
Thanks,
Bob
Copyright 2007 - 2023 - Palo Alto Networks