Expedition Discussions

Expedition server sizing

Anyone know server sizing requirements for this? Minimum cpu, memory and storage?

Also, what is the recommended way to install?

Resolved! ML gets stuck at "Pending"

I started by running the command

scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv

on my PA220.

root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe

...

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):

https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c

Be sure to go Settings > M. Learning > and change the Expedition ML Addr

...

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini

sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...

NAT rules missing from checkpoint file

Team,

We imported checkpoint configuration into latest expedition tool, security policies are available as expected but nat rules are not available ( out of 280 only 7 nat policies came).

I found community article which mentioned about mis

...

Checkpoint FW cluster managed by SmartConsole - Migration to PaloAlto

New to PA.

Looking for steps in migrating Checkpoint FW (cluster - managed by Checkpoint SmartConsole) to PaloAlto.

Checkpoint to Palo Alto using Expedition

We have a Checkpoint mgmt workstation at R77.30 managing firewalls on R75.47. We are attempting to convert the Checkpoint firewalls to Palo Alto using the Expedition freeware software. But the documentation contains no info as to what format the tool

...

Resolved! Forcepoint migration using Expedition

Hi guys,

Do you have a guide on how to migrate from Forcepoint to Palo Alto using the latest Expedition version?

Which are the required files and steps to action this?

Thanks.

Ho.

Auto Zoning Issue : Cisco ASA Migration with Dynamic Routing

Trying to migrate an ASA which uses BGP and OSPF. Since the dynamic routing tables are not part of the ASA configuration, destination auto zoning does not work as expected. I thought of adding those dynamic routes as static routs to the ASA config (b

...

Expedition PAN-OS 10 Support

Hi!

When i import my Firewall Configuration from Expedition 1.1.85.1 into a PAN-OS 10.0.2 Panorama, i have issues with Service-Groups and Address-Groups.

It doesn't work with XML-Export and "load config partial..." and also not with Rest-API call

...

Resolved! expedition update issue

Trying to update to the newest version of expedition and its stating that the im on the newest version. However, the newest version is 1.1.85.1 not 1.1.35.

Resolved! Retrieve Rule Hits Does Not Work

Hello,

I would like to use Expedition to see the use of security policies. I'm managing my devices through panorama.

In the Security Policies tab in the project, there is an option to retrieve rule hits. When I select this option the status b

...

Resolved! Expedition GUI not Available

I installed Ubuntu 16.04 using AMD 64 bit server installer, then downloaded the expedition installer, unpacked, changer permissions ran the script and tried to access the Expedition gui using the IP the machine received and nothing comes up. Has the

...

Issues upgrading expedition?

According to this link - https://live.paloaltonetworks.com/t5/expedition-articles/expedition-release-notes-for-hotfixes/ta-p/216299

The latest version of expedition is 1.1.84 released today.

When we do the following:

From the CLI of the OS, do:

...

API support for Expedition

Hi,

Can i check if expedition supports API call?

Im exploring to see if i can trigger a API call to create a new project and import a firewall configuration file and run the BPA and export out the results in excel format.

Thanks