Expedition Discussions
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Expedition Discussions

Discussions

Resolved! ML gets stuck at "Pending"

I started by running the command

scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv

on my PA220. 

 

root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe

...

Untitled.png
mbowling by L1 Bithead
  • 39721 Views
  • 26 replies
  • 3 Likes

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):

https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c

 

Be sure to go Settings > M. Learning > and change the Expedition ML Addr

...

trice by L1 Bithead
  • 61040 Views
  • 45 replies
  • 22 Likes

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini

 

sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...

alestevez by L7 Applicator
  • 26703 Views
  • 5 replies
  • 11 Likes

Issues upgrading expedition?

According to this link - https://live.paloaltonetworks.com/t5/expedition-articles/expedition-release-notes-for-hotfixes/ta-p/216299

 

The latest version of expedition is 1.1.84 released today.

 

When we do the following:

 

From the CLI of the OS, do:

...

API support for Expedition

Hi,


Can i check if expedition supports API call?

 

Im exploring to see if i can trigger a API call to create a new project and import a firewall configuration file and run the BPA and export out the results in excel format.

 

Thanks

yctan by L2 Linker
  • 6888 Views
  • 5 replies
  • 0 Likes

Resolved! Expedition 1.1.83 hangs during xml export

I'm trying to complete a cisco ASA to Palo Alto migration but Expedition seems to hang during the generation of the xml output. I've restarted jobs and task manger multiple times as well as updating Expedition and rebooting the vm itself. Below is th

...

"flow" in Machine Learning

Reading the Expedition Log Analysis Guide (1.0.2), it has a tiny blurb about the "flow" in the Learning Results:

The Flow has been calculated after figure it out who are the servers on the networks.

 

In the resulting potential rules, there are mi

...

ML Destination IP Filte

Hi,

 

Wondering if there's a way to filter the results from ML to only show results for destination IP's in the 10.0.0.0/8 range? I'm building out a greenfield rulebase, would prefer to ignore any suggested rules for external networks at this stage.

...

ikunduraci_0-1602478897139.png

stuck at generating schedules

Hi Team,

 

I am trying to use Expedition for PA-7050 to PA-5250 hardware refresh for the purpose of remapping interfaces.

 

When I come to generate the XML it gets stuck at "generating schedules". My expedition is on the latest version [1.1.82.2]

 

L

...

Expedition Bug when merging Address objects

When I try to merge address objects with the same value the description of all objects (not only with the same value) are merged together.

I think this is a bug.

Expedition Version is 1.81.1.1, but bug was seen in older versions too.

Example:

Before

...

Merge1.JPG
Merge2.JPG

Expedition 2.0 Features suggestions

Hi Expedition Live Community users, 

Expedition Developer team is in process of developing Expedition 2.0 and would like to hear your feedback.  Here is a brief overview of the new Expedition 2.0

Expedition 2.0 contains major features in previous ver

...

lychiang by L6 Presenter
  • 14854 Views
  • 10 replies
  • 3 Likes

Resolved! Rule consolidation in Expedition

Dear, 

 

Using MT3, there was a nice working feature for quickly finding rules with the same sources/destinations etc. see below.

 

I'm trying to obtain similar querries on the Expedition tool on the Security rulebase (not for objects, services etc)

...

consolidation.PNG

Resolved! Manual processing of ML logs is greyed out

I have one instance of Expedition where I am apparently unable to manually trigger log processing for enabled files (Devices/M.learning). Initially, Expedition was set to autoprocess CSV files, and it did it successfully. After a reboot, three logfil

...

  • 1153 Posts
  • 83 Subscriptions
Top Solution Authors
Top Liked Authors
Labels