Expedition server sizing
Anyone know server sizing requirements for this? Minimum cpu, memory and storage?
Also, what is the recommended way to install?
Discussions
Resolved! ML gets stuck at "Pending"
I started by running the command
scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csvon my PA220.
root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe
If You Need an OVA...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):
https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c
Be sure to go Settings > M. Learning > and change the Expedition ML Addr
...Resolved! How to Upload configuration files bigger than 2MB
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini
sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...
Resolved! Unable to define the Spark Temporary Data Structure
Just upgrade to the latest version 1.1.31 from the CLI:
sudo apt-get update
sudo apt-get install expedition-beta
sudo bash /var/www/html/OS/BPA/updateBPA306.sh
My problem is now Expedition will not come up because GUI checks complain about:
Spark
...Fortinet migration
Hi
I need to migrate Fortinet FW to a Next Gen 850 PA could you please advice which files I should get from the Fortinet FW in order to do the migration
Please advise
Dlopez
Checkpoint & tags
Hi,
When migrating from Checkpoint to Palo Alto, the section titles within the security policy are becomming tags - which is perfectly fine.
On the NAT policy however, section titles are not taken into account and not migrated to tags.
This brings
...Feature Request NOT in Filters
Some of the predifined filters are great, Show Duplicate Names and Values is great for identifying duplicate objects to be deleted (or merged). Show Duplicate Names is great for identifying objects that need more investigation.
When you are workin
...Bug in CSV NAT import: not all values for "interface" ingested
Hi again!
Running Expedition 1.1.28.
A new bug in CSV import of NAT rules.
I have many lines that contain the same value for the field "interface" ("Interface" in the GUI). Only the first line get this value imported. On the subsequent lines wi
...Addresses "null" instead of "any" in NAT and Security rules?
Expedition 1.1.28
Lately I have seen some occasions where Source or Destination fields in NAT or Security rules show up as "null" in the main table. Earlier, when I worked on this project, they showed up as "any". In some rules they still show up a
...
Resolved! Srx to panos conversion via Expedition -policy name issue
Hi
I have noticed one issue during the conversation. Srx supports policy names having more than 31 character but paloalto max name suze is 31.
Expedition tool not detect this name issue. Is there any way to search the policy having more than 31 cha
...Resolved! Missing filter attribute 'Interface' for NAT Policies
Hi!
I'm running Expedition 1.1.28 and working with at large (200+) set of NAT policies imported via CSV. In my case, I would have liked the possibility to apply filters based on the value of the Interface attribute. However, that attribute is missi
...Resolved! Viewing the migrated configuration in Panorama
Hi,
I used "Expedition" tool to migrate configuration from a cisco FWSM context to Panorama. I follwed the steps mentioned in the "Expedition-UserGuide-v1.0". I followed the steps to export the configuration from Expedition to Panorama. The actio
...Resolved! Running version 1.1.26 Merge done HUNG at Generating Applications vsys/dg:vsys1
I have exited the project reloaded the xx.xml file before I started the merge and I get the same issue Hung at Generating Applications over and over
Bug in CSV Interface import with unnumbered interfaces
Hi!
Running Expedition 1.1.28.
I recently begun importing tunnels via CSV import. I have discovered that interfaces with type (media) "tunnel" are ignored if they are not assigned an address at all. Tunnel interfaces often don't need addresses as
...Bug in CSV Static Route import with unnumbered interfaces
Hi!
This is related to another bug I just described (Bug in CSV Interface import with unnumbered interfaces).
If you import static routes with only an interface (typically a tunnel interface) but without a gateway address, the entry does not get
...Expedition MFA Problem - "Incorrect user or password" error
Hello All,
I have run into an issue while trying to integrate Expedition with DUO. Here is the synopsis:
Expedition sends an anonymous bind request to Duo. Duo responds back a response. The response always reads as incorrect user or password.
I set
...Please share an example of correct CSV for NAT import
I'm working on producing a CSV file to use as a source for NAT rules. Right now I only need interface hide NAT (using default interface address as hide address).
I have not been able to find any documentation (including the latest published CSV imp
...Remote Exception when creating new project
I am getting a "Remote Exception" mesage when trying to create a project. I am running Expedition 1.1.25. Just updated it to this version, still getting the error though.
Can anyone help?
Copyright 2007 - 2022 - Palo Alto Networks