Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Hi all, I'm trying to migrate configuration from Cisco ASA to Palo Alto NGFW using Expedition. In the security policy I see a lot of strange rules with word "DNAT" prepended in a name and in a tag. These rules always placed immediately after some legitimate access rule and duplicate it almost exactly except: - Destination IP is different - Servi...
HI - we are trying to migrate from a Cisco ASA to PA5250 at a large datacentre. When running the config through expedition it hangs on the merge step - last output displayed is "Generating Schedules vsys/dg:vsys1" Note: we have migrated successfully using expedition about 10 other sites so far so this is our first major hiccup. See below error...
Under Devices, the PA-5450 is not listed. When should I re-try expedition to support the FW we just bought?
I'm trying to get Expededition to authenticate my users via Radius but am receiving immediate invalid UN/PW. When I started digging through the apache error log file I noticed this line with every failed attempt. It looks like apache is logging at least part of the password field for authenticing users in the error log. I noticed a previous thre...
After importing a Fortigate config into Expedition some of the policies have pink text. Why is this?
Hi I'm trying to import an SRX XML file and I get this error: Data could not be submitted correctly. Current maximum size is 8M Check potential causes: php.ini post_max_size and upload_max_filesize too small. The file is 9.72 MB. Where is the php.ini file and can I edit that parameter? If I can, do I need to restart the server/app? Tha...
Hello, i installed Expedition on Ubunty Server 20.04.03 There is no way I can solve the problem with rabbitmq-server. I tried all the options and all the solutions that were offered here. Fatal error: Uncaught ErrorException: stream_socket_client(): unable to connect to tcp://localhost:5672 (Connection refused) in /var/www/html/libs/vendor/p...
this may be a silly question but is there a docker version available for Expedition? thought I would check here. thank you!
Hi, I have just got through the import-import-merge-remove invalid-dedupe with a Checkpoint source to an existing Panorama config. At the very last step I do the export and I get xml and pretty xml - which contain the new policy but the Set command file is empty. Am I missing something? Paul [Edited to remove separate upgrade issue]
Hi All, I have been having issues with logs files not showing up or being processed in ML. Set up is Expedition on 20.04, connected to panorama to pull in devices. Selected firewall set up to copy logs via SCP as my own user, which works fine. Added cronjob to update permissions on CSV files. sudo crontab -l -u root[sudo] password for username...
I attempted to do a fresh install last night and when the script attempts to install the GPG key, it's receiving a 404. ####################Installing Expedition debian repository --2021-10-21 23:36:37-- https://conversionupdates.paloaltonetworks.com/ex-repo.gpgResolving conversionupdates.paloaltonetworks.com (conversionupdates.paloaltonetworks....
Hello, I'm attempting to upgrade my Expedition from 1.1.104 to 1.1.113 and I'm running into the following error. expedition@ubuntu:~$ sudo apt-get install expedition-beta Reading package lists... Done Building dependency tree Reading state information... Done The following packages will be upgraded: expedition-beta 1 upgraded, 0 n...
Currently have expedition 1.1.46.1 installed and running. on "sudo apt-get update" I receive the message below. W: The repository 'https://conversionupdates.paloaltonetworks.com expedition-updates/ Release' does not have a Release file. N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use. I was...
Hello All, we have done a Migration from Checkpoint (R80.20) to Palo Alto with Expedition. Everything is working good and the Configuration is already imported into the new 5200 Cluster. Since there are more than 3000 Security Policies, we have done some checks to make sure that all Options and Zones are there (Auto Zone assignment worked real...
I finally got Expedition working and retrieved Panorama configuration successfully. When creating a project, should I add the firewall or Panorama ? Also, after cleaning up the config to the point it is ready to be deployed how can I push the config to the managed device through Panorama ? I know Panorama have a configuration for device group ...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
