Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Expedition Version: 1.2.3 Today I learned Expedition needs interfaces assigned to routes for auto zone assign to work. This makes sense as the code uses the interface to find the zone for a specific route rather than doing a [virtual] route lookup. I have however been unable to get the right zone assigned for a directly connected network unl...
Expedition: 1.2.3 Source configs: Check Point R80.30 HFA236 Target configs: Panorama / PAN-OS 10.1.3 Has anyone had success [easily] converting Check Point automagic NATs in Expedition? I've had to manually modify both static and hide NATs and create new objects for the translated addresses as the imported rules reference the original object (...
I have a aging and failing Cisco ASA which I'm planning to replace with a Palo Alto PA220. I've downloaded the Expedition OVA and have it running. I've uploaded the ASA config, get the data presented, however it is not showing network config from the ASA. I'm new to Palo, not sure how to resolve this and am looking for assistance in both Expe...
Below are the errors I am receiving in the $cat /tmp/error output: Let me know if you require any additional information. Thanks,
Currently migrating ASA to PA-3220. It looks like process is stuck at phase 2 when trying to upload ASA config file. I have tried two different ASA config file but process seems to be hung and unable to complete.
Hi All, I would really appreciate if you can help me on this. I am planning migrate configurations from a Pan OS 10.1.0 VM image to a PA 3220 with latest Pan OS version. I only want to export Interfaces, Zones, Rules and VPN configurations. I don't mind even if other configurations are also exported during the export. If I do this will there be ...
Hi All, I am having issues importing rules from CSV. I have been trying to get the following to work name;action;description;from;src;to;destination;app;service But it just only gets the name, description, from, to fields and the Warnings tab says that the objects put in the other fields do not exist. It also imports in inital line with the fie...
Hello Team, recently we upgrade all PA-OS to version 10.0.8-h4, then expedition is not parsing the log file, I can see the log file in PALogs, but not shown in expedition M.Learning tap. Also we update expedition to version 1.2.3 Any help?? @alestevez @dgildelaig Thank you. Hamadah
I have found a workaround for batch host object CIDR changes (from 0 to 32) and am reaching out to see if there is a feature planned in Expedition to accomplish this. SITUATION: After importing an ASA config, I noticed two things. First, the newly created host records beginning with "H-" which are duplicates of the imported host objects. Se...
Hi I have converted all objects to Shared and this picture illustrates what I think is the correct mappings of each element. Please confirm/correct as necessary. Thanks!
I working through a migration project and attempted to save a snapshot, I received a message "Failed, Please delete some existing snapshots" I don't see anyway to delete snapshots. I have tried restarting expedition and am still receiving the error
Excerpt from panReadOrders.log below. I can manually process csv log files for machine learning but the daily process doesn't work. Notice: Trying to get property of non-object in /var/www/html/console/messaging/classes/PaloAltoNetworks/Processes/PeriodicTask.php on line 14Checking: PeriodicLogCollectorCompacterThu, 11 Nov 2021 15:41:50 +000...
Hi I'm working on an SRX migration (first time) and in Expedition, all of the policies are locked (there are only Security policies in this situation). I need to tag all of the rules with a specific tag as I'm combining three firewall clusters into one (2 PANs sandwiching the SRX - I'm collapsing a 3-tier physical environment into a single fi...
Hi All, I have install Virtual Box 6.1 -> Ubuntu-Server 20.04.3 -> Expedition Tool 1.2.2. I'am facing "Remote Exception" error message. I'm seeing this error on Dashboard, while adding new PA devices in expedition tool. I can't even create API as well. Hi @lychiang I was able to resolve the dashboard issues. I rebooted the VM, I have...
Hi Guys, I need some help to find why in my project is 0 ipsec tunnels . I am trying to migrate form fortigate to paloalto. any suggestions is well appreciated, cheers
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
