Expedition Discussions
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Expedition Discussions

Discussions

Resolved! ML gets stuck at "Pending"

I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...

Untitled.png
mbowling by L1 Bithead
  • 46161 Views
  • 26 replies
  • 3 Likes

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...

trice by L1 Bithead
  • 72954 Views
  • 46 replies
  • 23 Likes

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...

alestevez by L7 Applicator
  • 30111 Views
  • 5 replies
  • 11 Likes

ASA port-channel migrated to AE but how can i remap physical interfaces to it

I have similar issue, we are migrating from ASA to Palo Alto 3260. on ASA we have aggregated interface configured for LAN and WAN now while migrating this config in expedition i can remap name of port-channel to AE. but how can i change the ports belongs to AE. on ASA Te 1/1 and Te 1/2 belongs to port-channel 1, now on expedition i can remap nam...

Resolved! Unable to export Panorama configuration

I recently converted a ruleset from ASA to Palo Alto. I managed to get it imported into the appropriate device group in Panorama and eventually it all worked fine. HOWEVER, I forgot to change the addresses and address groups to be shared objects before I did all that so now I need to convert them. So, I pulled the Panorama configuration into E...

Resolved! Expedition ML Failed

Hello! Machine Learning analysis is failing. In GUI, error is "Failed". In /tmp/error_SecRulesLearn logs I see this error: org.apache.spark.SparkException: Job aborted due to stage failure: Task 26 in stage 89.0 failed 1 times, most recent failure: Lost task 26.0 in stage 89.0 (TID 6323, localhost, executor driver): java.io.FileNotFoundExcept...

mkopcic by L2 Linker
  • 3123 Views
  • 2 replies
  • 0 Likes

Unable to upload Panorama 10.1.0 configuration into Expedition

I am working on a migration and I am trying to convert some policies from Panorama to a Firewall. Whenever I upload the Panoarma 10.1.0 configuration, all that I get is the shared objects... No device groups or templates. I checked the xml file that I am uploading and verified that the DGs and Templates are in there with the full configuration...

ML Learning Discovery: Connectors stuck on loading

Hi, I have defined collectors in my project enable M learning for a rule, when I hit discovery i am unable to select a connector it seems to be stuck on Loading. See attacked screenshot. I already tried rebooting the machine, restarting processes, remove/re-create the collectors. RAM/CPU DISK usage all are ok. Any help on this would be app...

zGomez_0-1654607553994.png
zGomez by L3 Networker
  • 7235 Views
  • 14 replies
  • 0 Likes

Resolved! Aggregate Interfaces

I am having issues with aggregate interfaces from Expedition 1.1.17. This is a Cisco ASA config that already had port-channel interfaces configured. I remapped the interfaces to ones labeled with 'ae'. Although it seemed to work when the config is exported there is no interface configuration in the XML file. I went back into the project and noti...

aporue by L3 Networker
  • 7068 Views
  • 5 replies
  • 0 Likes

Parsing issue for service object names containing NEXT as keyword (Fortinet import)

After importing my Fortinet config, the service object named POWERNEXT was incomplete and I had to fix the protocol and port by myself.I did some tests and found that the parsing process stopped when it found NEXT after an edit keyword. I've tried different keywords used in the xml but only the NEXT in a service object fails.Here's an example :c...

Can't import firewall config into Expedition Project

I am trying to import a firewall config into a project. I have added the firewall to devices and pulled in the contents with the API key. I have added the device to the project but when I try to import the config, the "Start" button never turns solid green and nothing happens. I have tried running the following: sudo apt-get updatesudo apt-get i...

bbb1381 by L0 Member
  • 1697 Views
  • 0 replies
  • 0 Likes

Resolved! Download 1.2x ?

Hi, Is the installer for the 1.2 train of expedition available anywhere? We're having issues with 2.0 and would prefer to use something we've used before if possible? Thanks, Ryan

ASA to Palo-alto migration

Hi Folks, Can we do the migration from ASA to Palo-Alto in bit-and-peices, like we have interfaces, zones and routes already configured on Palo-Alto. we want to migrate only objects, object-groups, service-groups and policies from ASA to palo-alto, so that this ASA configuration get added to existing Palo-Alto configuration.

ali426 by L0 Member
  • 3026 Views
  • 2 replies
  • 0 Likes
  • 1185 Posts
  • 89 Subscriptions
Labels