Anyone know server sizing requirements for this? Minimum cpu, memory and storage?
Also, what is the recommended way to install?
I started by running the command
scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csvon my PA220.
root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):
https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c
Be sure to go Settings > M. Learning > and change the Expedition ML Addr
...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini
sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...
Hello,
I would like to use Expedition (1.1.89) to clean up my rules on PA.I have a lot of 0 hit count rules in FW and I want to deleted them by multi edit. Now after import configuration from Palo Alto (Pan OS 9.1.5) I see in project->Polices that
...
Expedition 1.1.89
running machine learning on the traffic logs.
I've given www-data full permissions and chmod 777 to the file /data and all .csv files
When I try to "Process Files" under Palo Alto Network Devices>M.learning all i see in the co
...
If PAN-OS is sending the logs to expedition how or where can I tell that Expedition is getting and processing the latest logs from PAN-OS in Expedition?
I am trying to get the Project Statistics setup but I cannot find it on the latest version of Expedition 1.1.89. I am new to Palo Alto. I watched the videos on youtube but they seem to be for a much earlier version of expedition. We are using this to
...
Hi ,
we need to stop FW from responding to any DNS queries
currently if anyone from external add the external IP of the firewall as a DNS server and try to solve any domains , mu FW is responding to that queries which is high risk .
our DNS security
...
Hi Community,
I currently got a interesting case:
Existing PA5250 with 6 vsys instances and I want to cleanup a few unused objects, do multi-tagging and so on.
After doing the optimization and after generating output, I've lost all policies - I was
...
Hi,
is there any better way to migrate the OPNsense configuration to Palo Alto or is the only way entirely by hand? Does anyone have some experience or some good tips?
Many thanks!
Blaz
Team,
We imported checkpoint configuration into latest expedition tool, security policies are available as expected but nat rules are not available ( out of 280 only 7 nat policies came).
I found community article which mentioned about mis
...
New to PA.
Looking for steps in migrating Checkpoint FW (cluster - managed by Checkpoint SmartConsole) to PaloAlto.
We have a Checkpoint mgmt workstation at R77.30 managing firewalls on R75.47. We are attempting to convert the Checkpoint firewalls to Palo Alto using the Expedition freeware software. But the documentation contains no info as to what format the tool
...
Hi guys,
Do you have a guide on how to migrate from Forcepoint to Palo Alto using the latest Expedition version?
Which are the required files and steps to action this?
Thanks.
Ho.
Trying to migrate an ASA which uses BGP and OSPF. Since the dynamic routing tables are not part of the ASA configuration, destination auto zoning does not work as expected. I thought of adding those dynamic routes as static routs to the ASA config (b
...
Hi!
When i import my Firewall Configuration from Expedition 1.1.85.1 into a PAN-OS 10.0.2 Panorama, i have issues with Service-Groups and Address-Groups.
It doesn't work with XML-Export and "load config partial..." and also not with Rest-API call
...
Trying to update to the newest version of expedition and its stating that the im on the newest version. However, the newest version is 1.1.85.1 not 1.1.35.
Hello,
I would like to use Expedition to see the use of security policies. I'm managing my devices through panorama.
In the Security Policies tab in the project, there is an option to retrieve rule hits. When I select this option the status b
...
