Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Hello, i'm trying to migrate from Juniper ssg config, and on the dashboard i see 1030 duplicated addresses. However i was not able to remove them before exporting to xml PA config. Any tips to do it? i searched alot, but saw no suitable solution. I use the latest expedition version and see no tools inside it's interface to perform this kind of a...
Hi Team i installed the expedition tool in the ubuntu server by referring the below link https://live.paloaltonetworks.com/t5/expedition-migration-tool/ct-p/migration_tool but when i try to load in the browser and i am getting the apache2 ubuntu default page can anyone help how to solve this issue
"Sometimes when we do a merge job, the mysqld process goes to 100% on a single core and Expedition freezes and throws an error, forcing us to reboot the server. Mysqld doesn't utilize any other cores, even though more cores are available. Is there a way to enable the process to load balance across multiple cores?"
Hello, I'm facing some problems here with the Expedition 1.1.89 with BPA 3.33.0 versions. When I upload a configuration and do a BPA "Start Analysis" the BPA results appoint that the Firewalls don't have Theat Prevention, Web Filtering and Wildfire licenses, but this is wrong because all the devices have a valid licenses. Tested in: Device: ...
Hello, I would like to use Expedition (1.1.89) to clean up my rules on PA.I have a lot of 0 hit count rules in FW and I want to deleted them by multi edit. Now after import configuration from Palo Alto (Pan OS 9.1.5) I see in project->Polices that I have 0 Rule hit on all rules (I also try to retrieve rule hits). How to import configuration...
Expedition 1.1.89 running machine learning on the traffic logs. I've given www-data full permissions and chmod 777 to the file /data and all .csv files When I try to "Process Files" under Palo Alto Network Devices>M.learning all i see in the comments is "Today's file in progress"
If PAN-OS is sending the logs to expedition how or where can I tell that Expedition is getting and processing the latest logs from PAN-OS in Expedition?
I am trying to get the Project Statistics setup but I cannot find it on the latest version of Expedition 1.1.89. I am new to Palo Alto. I watched the videos on youtube but they seem to be for a much earlier version of expedition. We are using this to find invalid rules and objects. How does expedition get its information from the PA firewalls? I...
Hi , we need to stop FW from responding to any DNS queries currently if anyone from external add the external IP of the firewall as a DNS server and try to solve any domains , mu FW is responding to that queries which is high risk . our DNS security subscription is expired . please advise how to solve this issue
Hi Community, I currently got a interesting case: Existing PA5250 with 6 vsys instances and I want to cleanup a few unused objects, do multi-tagging and so on. After doing the optimization and after generating output, I've lost all policies - I was lucky, to check the config before importing. I thougt, maybe a few changes where to much, so I c...
Hi, is there any better way to migrate the OPNsense configuration to Palo Alto or is the only way entirely by hand? Does anyone have some experience or some good tips? Many thanks! Blaz
Team, We imported checkpoint configuration into latest expedition tool, security policies are available as expected but nat rules are not available ( out of 280 only 7 nat policies came). I found community article which mentioned about missing nat which is for checkpoint object nat/hide nat/auto nat, also its 5 years old. I like to kn...
New to PA. Looking for steps in migrating Checkpoint FW (cluster - managed by Checkpoint SmartConsole) to PaloAlto.
We have a Checkpoint mgmt workstation at R77.30 managing firewalls on R75.47. We are attempting to convert the Checkpoint firewalls to Palo Alto using the Expedition freeware software. But the documentation contains no info as to what format the tools needs to see the Checkpoint info. The Checkpoint to HTML product cpdb2web does not apprear to b...
Hi guys, Do you have a guide on how to migrate from Forcepoint to Palo Alto using the latest Expedition version? Which are the required files and steps to action this? Thanks. Ho.
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
