Expedition Discussions
Showing results for 
Search instead for 
Did you mean: 
Expedition Discussions


Resolved! ML gets stuck at "Pending"

I started by running the command

scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@

on my PA220. 


root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe


mbowling by L1 Bithead
  • 26 replies

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):



Be sure to go Settings > M. Learning > and change the Expedition ML Addr


trice by L1 Bithead
  • 44 replies

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini


sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...

alestevez by L7 Applicator
  • 5 replies

XML file load failed



I am currently trying to merge config from 4 different firewalls (2 checkpoints and 2 juniper) into a single Palo Alto cluster with 2 vsys.


First, i'd like to import all objects from the 4 source config into shared objects in the panorama.



PMU-DER by L0 Member
  • 1 replies

Expedition Software Version

I am new to expedition, but not new to the Palo Alto and Cisco ASA.


I spun up an AWS ubuntu server and installed expedition.  What is the lastest version?  When I installed expedition I received version, but I see comments about 1.1.6 and


sgnormo by L0 Member
  • 1 replies

ML Jobs failing on

Hello all

Our Expedition instance failed to compress ML logs after processing and ran out of storage. I noticed this too late,  after couple days of it not working.

I cleared out space by deleting old  compressed files and manually gzip'd processed b


Best Practise Analysis Not working

Can someone help me here.

I am running expedition version. DId  retrieve  config from my device able to see all policies ,nat, object etc.

I would like to find duplicate policies and merge together, But when i try  running best practise anal


Resolved! Static group to Dynamic group

Hi everybody,

I'm using Expedition 1.1.42 and need to use function migrating Static Address Groups to Dynamic ones.

When I use the feature, it changes static group to dynamic  - match Tag is same as device group. Tag object is also created correctly.


Shadowed Rule clean-up Expedition

Good Morning!


We are in the process of installed the latest version of Expedition. We currently are using the v3 Migration tool


I am wondering if there is a shadowed rule clean-up feature in Expedition?

Trouble Installing Expedition

Hello all,

Ubuntu 16.04 LTS fresh off the ISO in Oracle Virtualbox. No updates or anything else, first thing I did after the install was to fetch and run the installer.

I've been trying to follow the instructions on the video guide; the first part wh


Unused objects actually used by NAT

I am using Expedition to remove unused objects from firewalls via a partial config import.  What I ran into is the tool removed an unknown number of objects that, while not used by a security policy, they are in fact used by a NAT policy!  Because of


Capture logs virtual wire or tap

If a legacy firewall has more then two connection, i.e. 3, internet, inside and DMZ, do we virtual wire all 3 interfaces?  Or do we just do between internet and users?  I wouldnt see everything then , trying to understand best approach to get all tra


Resolved! Log Processing not working

Greetings! My instance of Expedition (1.1.43) has stopped processing all logs. The devices detail shows the new logs. I've clicked process logs from there and it appears a job is added but the job includes zero tasks and never completes or fails. I'v


ehelm by L1 Bithead
  • 12 replies

Bi-directional NAT

I have three feature requests that are all related, that I think everyone will appreciate.


1) When converting ASA configs, true like for like bi-directional 1-to-1 NATs should be created, not the horrible implicit rule that Palo Alto Creates i.e. t


dega by L2 Linker
  • 9 replies

Importing CSV Services

I'm attempting to migrate from a Sonicwall config and just get at least the data entry portion of all the address objects and services out of the way ... My address objects are coming in fine. I am trying the services now, but it doesn't seem to be w


Top Solution Authors
Top Liked Authors