Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Hello there, I imported the configuration of a PA-5050 to Expedition to make some changes till a new PA-3260 arrived to the office. I did the changes, and imported a new base config of the PA-3260. I migrated all network and device objects (policies, IPSec VPN, etc.) to the base config (PA-3260) and merged it "successfully". However, when hit...
I am trying to do some rule enhancement on stuff that is in Prisma. I know that Prisma can export filtered syslogs and Expedition can consume those logs, but the last mile isn't as clear. I want to plug in these logs for machine learning purposes- but I can only do so if I can first import Prisma device groups/rules into an Expedition Project, w...
We are using a fresh installation using ExpeditionVM-1.1.10.ova. Unfortunately, we do not find any Best practices installed. Running sh /var/www/html/OS/BPA/updateBPA306.sh produces lot of errors. The last ones are: File "/tmp/pip-standalone-pip-e9jji8d_/__env_pip__.zip/pip/_vendor/resolvelib/resolvers.py", line 472, in resolvestate = resolution...
Hi Everyone, I am doing the Expedition tool migration from Cisco ASA to Palo ALto 3020 and have received 12-13 obj_any 0.0.0.0 Invalid addresses. I don't see the predefined address object of 'any' as described in another article, and am struggling with the creation of object name:any-0.0.0.0 value 0.0.0.0/0 Are there any references on how ...
Hi I upgraded expedition and I failed some times but finally got it working (was missing some dependencies + upgraded to python3) But I coudn't log on anymore with my account. I then tried to reset it with the PHP file (below) and while it succeeded I still couldn't log in with the default credentials. I can see that is uses a hash for the p...
Hello, I tried to import Palo Alto Firewall Config to Expedition. But I didn't see ipv6 in the interface and Virtual-Route. It just shows only ipv4. and in the Security Policy and Object Address can show IPv6 normally. Do I have to Enable any Feature or It doesn't support IPv6 in the interface and Virtual-Route? Details Expedition Version: 1...
We are on version 1.1.14 and need to get Expedition current but am getting the following errors when trying to upgrade from CLI: expedition@Expedition:~$ sudo apt-get updateGet:2 http://sgp1.mirrors.digitalocean.com/mariadb/repo/10.1/ubuntu xenial InRelease [4,597 B]Hit:3 http://us.archive.ubuntu.com/ubuntu xenial InReleaseHit:4 http://us.arch...
Hi all, i've just updated PaloAlto Expedition from 1.1.105 to 1.1.107 but now the Import config from ASA firewall doesn't work anymore. It stops to "loading address objects" How to rollback to 1.1.105 release?? If rollback is not possible how fix the issue Thank you Davide
Hello community, Do you have some document or link to see what is the proceed to migrate from checkpoint to palo alto with expedition? Best regards
Hi Community, I have a couple of simple questions. I'm migrating from Cisco ASA to PA3220. 1. The base configuration is extracted from Device>Setup>Export named configuration snapshot>running-config.xml ? Correct. Or is another option like device-state or configuration version ? 2. Is necessary the base configuration is a empty conf...
Hi, Is this currently a known issue that the expedition 2 initsetup script fails because of unavailable ressources from conversionupdates.paloaltonetworks.com? All the webserver answers is a http 404 error. It starts with https://conversionupdates.paloaltonetworks.com/ex-repo.gpg where only a 404 error is sent back when the script treis to downl...
Hi Team! We wish to use the Expedition tool for some logs coming from a PA-7000 series. Since the scheduled log export option is not feasible we wish to export logs via syslog. A few questions with this. 1. Where is the default location that the syslogs will go to? 2. Can we change the default log location, if so how? (We will be adding new ...
Hey everybody, I'm setting up a 7050 with a log forwarding card to a dedicated log collector and we have on top of that Panorama VM - Management only . On the log collector, I have it set to device log collection and collector group communication on ethernet1/9. I have log settings configured as well as a log forwarding profile. now I add th...
Expedition shows 1.1.105 is available, but sudo apt-get install expedition-beta says 1.1.104 is the latest I see this in both my production and lab environments. -Blake
Can not ssh to expedition installed on Ubuntu Using username "expedition".expedition@192.168.152.128's password:Access denied
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
