Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
We are using a fresh installation using ExpeditionVM-1.1.10.ova. Unfortunately, we do not find any Best practices installed. Running sh /var/www/html/OS/BPA/updateBPA306.sh produces lot of errors. The last ones are: File "/tmp/pip-standalone-pip-e9jji8d_/__env_pip__.zip/pip/_vendor/resolvelib/resolvers.py", line 472, in resolvestate = resolution...
Hi Everyone, I am doing the Expedition tool migration from Cisco ASA to Palo ALto 3020 and have received 12-13 obj_any 0.0.0.0 Invalid addresses. I don't see the predefined address object of 'any' as described in another article, and am struggling with the creation of object name:any-0.0.0.0 value 0.0.0.0/0 Are there any references on how ...
Hi I upgraded expedition and I failed some times but finally got it working (was missing some dependencies + upgraded to python3) But I coudn't log on anymore with my account. I then tried to reset it with the PHP file (below) and while it succeeded I still couldn't log in with the default credentials. I can see that is uses a hash for the p...
Hello, I tried to import Palo Alto Firewall Config to Expedition. But I didn't see ipv6 in the interface and Virtual-Route. It just shows only ipv4. and in the Security Policy and Object Address can show IPv6 normally. Do I have to Enable any Feature or It doesn't support IPv6 in the interface and Virtual-Route? Details Expedition Version: 1...
We are on version 1.1.14 and need to get Expedition current but am getting the following errors when trying to upgrade from CLI: expedition@Expedition:~$ sudo apt-get updateGet:2 http://sgp1.mirrors.digitalocean.com/mariadb/repo/10.1/ubuntu xenial InRelease [4,597 B]Hit:3 http://us.archive.ubuntu.com/ubuntu xenial InReleaseHit:4 http://us.arch...
Hi all, i've just updated PaloAlto Expedition from 1.1.105 to 1.1.107 but now the Import config from ASA firewall doesn't work anymore. It stops to "loading address objects" How to rollback to 1.1.105 release?? If rollback is not possible how fix the issue Thank you Davide
Hello community, Do you have some document or link to see what is the proceed to migrate from checkpoint to palo alto with expedition? Best regards
Hi Community, I have a couple of simple questions. I'm migrating from Cisco ASA to PA3220. 1. The base configuration is extracted from Device>Setup>Export named configuration snapshot>running-config.xml ? Correct. Or is another option like device-state or configuration version ? 2. Is necessary the base configuration is a empty conf...
Hi, Is this currently a known issue that the expedition 2 initsetup script fails because of unavailable ressources from conversionupdates.paloaltonetworks.com? All the webserver answers is a http 404 error. It starts with https://conversionupdates.paloaltonetworks.com/ex-repo.gpg where only a 404 error is sent back when the script treis to downl...
Hi Team! We wish to use the Expedition tool for some logs coming from a PA-7000 series. Since the scheduled log export option is not feasible we wish to export logs via syslog. A few questions with this. 1. Where is the default location that the syslogs will go to? 2. Can we change the default log location, if so how? (We will be adding new ...
Hey everybody, I'm setting up a 7050 with a log forwarding card to a dedicated log collector and we have on top of that Panorama VM - Management only . On the log collector, I have it set to device log collection and collector group communication on ethernet1/9. I have log settings configured as well as a log forwarding profile. now I add th...
Expedition shows 1.1.105 is available, but sudo apt-get install expedition-beta says 1.1.104 is the latest I see this in both my production and lab environments. -Blake
Can not ssh to expedition installed on Ubuntu Using username "expedition".expedition@192.168.152.128's password:Access denied
Hi! Has anyone noticed issues with the search (filter) for members in address or service groups? Based on Expedition 1.1.105 and a PANW config it seems the search for both address and service group members fails and returns no results, although I'm positive I did see this functionality work in the past:
We are trying to get started on expedition trying to import policies and objects from checkpoint r80.40. We have a central management server from which we tried the command required as per gui expedition instructions to import security rules: mgmt_cli show access-rulebase name policy-20160115 details-level "full" use-object-dictionary true --for...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
