Expedition Discussions

Importing Address Group via CSV makes existing address objects ghost objects with weird string names

So I have a project. Basically I imported a Check Point config, edited it, then merged with our Panorama config.

In the Panorama config I am preparing template and device group for the new config, and I merged the edited Check Point config into those

Panorama log import

I have firewalls managed by Panorama that I want to do some ML and RE on traffic logs. Right now I have this setup for 2 firewalls using the log export feature on the firewalls. Each firewall exports traffic logs to a different folder on my Expeditio

deleting object

Hi All,

   I was wondering if deleting objects and security rule is possible?  I imported my ASA configs into Expedition and is able to see my ASA config.   When i go to my objects they all show up.  so I click on one of the objects to delete them us

Filter corrupted?

Hello all,

I was working on an Expedition project on v1.1.105, and the filter no longer works.  I can create new filters, but when I drag them to apply the filter disappears and does not apply.  I also cannot search & replace or anything that relie

Generate XML Output hangs at "Generating Monitor" or "Initializing"

Hello,

Trying to merge a Palo Alto 9.0.4 configuration into Panorama 9.0.4, I'm able to merge but when I click the "generate XML and Set Output" button it hangs at either "Generating Monitor" or "Initializing"

Panreadorders log looks like it just

Palo Alto to Palo Alto expedition not generating XML - HELP

Hello there,

I imported the configuration of a PA-5050 to Expedition to make some changes till a new PA-3260 arrived to the office. I did the changes, and imported a new base config of the PA-3260. I migrated all network and device objects (policie

Prisma Access compatibility

I am trying to do some rule enhancement on stuff that is in Prisma. I know that Prisma can export filtered syslogs and Expedition can consume those logs, but the last mile isn't as clear. I want to plug in these logs for machine learning purposes- bu

Expedition Migration from Cisco ASA Invalid Address obt_any

Hi Everyone, 

I am doing the Expedition tool migration from Cisco ASA to Palo ALto 3020 and have received 12-13 obj_any 0.0.0.0 Invalid addresses.  I don't see the predefined address object of 'any' as described in another article, and am strugglin

After Upgrading to 1.1.108. I can't log on anymore. Reset does not work

Hi

I upgraded expedition and I failed some times but finally got it working (was missing some dependencies + upgraded to python3)

But I coudn't log on anymore with my account. I then tried to reset it with the PHP file (below) and while it succeede

IPv6 not show in interface and Virtual-Route on Expedition

Hello,

I tried to import Palo Alto Firewall Config to Expedition. But I didn't see ipv6 in the interface and Virtual-Route. It just shows only ipv4. and in the Security Policy and Object Address can show IPv6 normally. Do I have to Enable any Featu

Getting Error upgrading Expedition

We are on version 1.1.14 and need to get Expedition current but am getting the following errors when trying to upgrade from CLI:

expedition@Expedition:~$ sudo apt-get update
Get:2 http://sgp1.mirrors.digitalocean.com/mariadb/repo/10.1/ubuntu xenial

Latest Expedition 1.1.107 doesn't work

Hi all, 

i've just updated PaloAlto Expedition from 1.1.105 to 1.1.107 but now the Import config from ASA firewall doesn't work anymore. It stops to "loading address objects"

How to rollback to 1.1.105 release??

If rollback is not possible how fix