Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Expedition ver 1.1.98 Case: Migrating 2 ASA configs to single PA. After cleanup on both ASA configs removal of dups and invalids. Merged the configs to the base config from a set of clean 3250's. Generated .xml and set commands. Downloaded, imported and loaded. Navigate to commit - validate receive the following errors: vsys -> vsys1 -&g...
Hello Community, I have a client that wants to do a multiple asa configs into a single pair of 3250's that will be pulled into their Pano when migration config has been confirmed and validated. Do I have anything to worry about when I pull the devices into the Pano? Such as duplicated/shared objects? My understanding and experience is that...
I run Best Practice Analysis on my PA device using Expedition and one of the results is the device software EoL. I am currently running 9.0 based version on my device and expedition recommends to upgrade since it is now EoL last Feb 2021 but as per checking on Palo Alto website 9.0 is still valid until February 2022. Can someone tell me which in...
Folks, I've installed Expedition on an Azure 16.04.7 instance of Ubuntu in Azure. To get the setup script to successfully complete, I had to run a few prerequisite commands. Everything in Expedition seems to run correctly, but when I import a Palo xml config, the import hangs about 3/4 the way through. The same config imports successfully on ...
I ran the script to install Expedition 2.0 on an Ubuntu 18 VM. The web interface launches and I can authenticate, but I don't see where I can change the default username and password. Can anyone advise?
Hello, I know that Expedition is supporting Juniper SRX 12.4 and 12.3. I have Juniper SRX with version 18.4, and I tried to import its XML file into Expedition but failed and error occurred. Where I can see the error logs? What I need to modify in 18.4 XML file to be the same as for 12.4 or 12.3?
Hello, we are trying to migrate configuration from Cisco Firepower using Expedition to Palo Alto. When it comes to address objects, IPv6 networks are not migrated properly. The object name is modified automatically where at the end of the IPv6 address object expedition adds -32 and changes IPv6 address to 1.1.1.1. It is even marked as IPv4 add...
I'm trying to connect to a VM Panorama to retrieve the configuration, but am getting a remote exception error (see screenshot) Expedition Version: 1.1.89
I have a config file with Pan Os 8.1.18, can I convert it into 9.16. using expedition and upload into a test environment?
Hello everyone, The CPU usage is above 100% and keeps spiking. We have expedition that has 8 CPU's assigned, we usually use expedition tool to generate rules by transferring logs manually through CLI. But from past few days tool is less responsive and taking much longer than usual times in processing logs, building rules. Under Local firewall&...
Hi community, I need to know if is possible load multiple configuration to merge in one. This is the scenario. I have 3 Cisco ASA with different config, I need to migrate this 3 different (3 sites) ASA configuration to one PANOS config. I proceed to create in my expedition 3 projects, one for each ASA firewall or site. The question, exist o...
So it appears that UserID requires something more to apply to multiple rules. I see conversations from 2019 posts that have no real answers. I need to apply a UserID group pulled via LDAP across 5000 rules. Expedition shows the full LDAP name that I added to a rule in Panorama which is fine but I can do nothing with that information. I canno...
It's able to download Applications, Regions, etc but is not pulling the running config. This was happening before I did the recent update to 1.1.96. I also tried rebooting and restarting processes. Any ideas which logs I should check to see if I can narrow down the issue?
Hi, Anyone experience upgrading expedition 2.0? I've done an upgrade but encountered an issue after the upgrade completed. I'm not able to access Web GUI after the upgrade and it showed me ERR_Connection_Refuse. Thanks.
Hi All, My client has big Check Point VSX setup with multi-domain (MDM/CMA) management. Gateway/Firewall are running R80.30 and Management is running R80.40. We are now replacing Check Point firewall's with Palo Alto firewall's. I have Expedition tool installed and ready but i am unsure on next step as i have read through few links and forum...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
