Expedition Discussions
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Expedition Discussions

Discussions

Resolved! ML gets stuck at "Pending"

I started by running the command

scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv

on my PA220. 

 

root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe

...

Untitled.png
mbowling by L1 Bithead
  • 35292 Views
  • 26 replies
  • 3 Likes

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):

https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c

 

Be sure to go Settings > M. Learning > and change the Expedition ML Addr

...

trice by L1 Bithead
  • 53868 Views
  • 45 replies
  • 22 Likes

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini

 

sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...

alestevez by L7 Applicator
  • 24086 Views
  • 5 replies
  • 11 Likes

"flow" in Machine Learning

Reading the Expedition Log Analysis Guide (1.0.2), it has a tiny blurb about the "flow" in the Learning Results:

The Flow has been calculated after figure it out who are the servers on the networks.

 

In the resulting potential rules, there are mi

...

ML Destination IP Filte

Hi,

 

Wondering if there's a way to filter the results from ML to only show results for destination IP's in the 10.0.0.0/8 range? I'm building out a greenfield rulebase, would prefer to ignore any suggested rules for external networks at this stage.

...

ikunduraci_0-1602478897139.png

stuck at generating schedules

Hi Team,

 

I am trying to use Expedition for PA-7050 to PA-5250 hardware refresh for the purpose of remapping interfaces.

 

When I come to generate the XML it gets stuck at "generating schedules". My expedition is on the latest version [1.1.82.2]

 

L

...

Expedition Bug when merging Address objects

When I try to merge address objects with the same value the description of all objects (not only with the same value) are merged together.

I think this is a bug.

Expedition Version is 1.81.1.1, but bug was seen in older versions too.

Example:

Before

...

Merge1.JPG
Merge2.JPG

Expedition 2.0 Features suggestions

Hi Expedition Live Community users, 

Expedition Developer team is in process of developing Expedition 2.0 and would like to hear your feedback.  Here is a brief overview of the new Expedition 2.0

Expedition 2.0 contains major features in previous ver

...

lychiang by L6 Presenter
  • 13258 Views
  • 10 replies
  • 3 Likes

Resolved! Rule consolidation in Expedition

Dear, 

 

Using MT3, there was a nice working feature for quickly finding rules with the same sources/destinations etc. see below.

 

I'm trying to obtain similar querries on the Expedition tool on the Security rulebase (not for objects, services etc)

...

consolidation.PNG

Resolved! Manual processing of ML logs is greyed out

I have one instance of Expedition where I am apparently unable to manually trigger log processing for enabled files (Devices/M.learning). Initially, Expedition was set to autoprocess CSV files, and it did it successfully. After a reboot, three logfil

...

Resolved! How to handle auto zone?

Trying to migrate from Cisco ASA to Palo Alto using Expedition.

These 6 addresses are being flagged as Invalid Addresses.

 

object network obj_any-01
subnet 0.0.0.0 0.0.0.0
object network obj_any-02
subnet 0.0.0.0 0.0.0.0

object network obj_any-03
subnet

...

rhap4boy by L1 Bithead
  • 4984 Views
  • 4 replies
  • 0 Likes

Expedition tool url not resolving

Hi, just trying to install expedition in my Ubuntu server and I'm not finding the installation file, any help is appreciated.

 

https://conversionupdates.paloaltonetworks.com/expeditioninstaller.tgz

 

Not resolving in any other computer either...

BBravo by L0 Member
  • 1763 Views
  • 0 replies
  • 0 Likes

Resolved! Expedition tool disabled the IPSEC tunnels

Hello to all,

I want to address a bug in expedition 1.1.81.1. I imported a PaloAlto configuration (FW 8.1.11) to perform object cleanup and it disabled almost all my ipsec tunnels configured on the PA. You can imagine the downtime...:(

Any of you tha

...

Resolved! forwarded logs not deleting after processing

I have Panorama configured as a device in Expedition. Devices managed by Panorama have been imported/retrieved into the device within Expedition. Some stuff I've done/is configured:

  • crontab is set to fix permissions on imported logs daily at midnight
...

  • 1102 Posts
  • 78 Subscriptions
Top Solution Authors
Top Liked Authors
Labels