Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Hi! When i import my Firewall Configuration from Expedition 1.1.85.1 into a PAN-OS 10.0.2 Panorama, i have issues with Service-Groups and Address-Groups. It doesn't work with XML-Export and "load config partial..." and also not with Rest-API calls. I noticed that the XML-Format in PAN-OS 10.0 has changed from: <address-group> ...
Trying to update to the newest version of expedition and its stating that the im on the newest version. However, the newest version is 1.1.85.1 not 1.1.35.
Hello, I would like to use Expedition to see the use of security policies. I'm managing my devices through panorama. In the Security Policies tab in the project, there is an option to retrieve rule hits. When I select this option the status bar shows "Retrieving Reports" but never makes any progress. I have lots of free resources on the...
I installed Ubuntu 16.04 using AMD 64 bit server installer, then downloaded the expedition installer, unpacked, changer permissions ran the script and tried to access the Expedition gui using the IP the machine received and nothing comes up. Has the installation method changed? is there a way to view whether it is actually running everything nec...
According to this link - https://live.paloaltonetworks.com/t5/expedition-articles/expedition-release-notes-for-hotfixes/ta-p/216299 The latest version of expedition is 1.1.84 released today. When we do the following: From the CLI of the OS, do: sudo apt-get updatesudo apt-get install expedition-beta It indicates expedition is already a...
Hi, Can i check if expedition supports API call? Im exploring to see if i can trigger a API call to create a new project and import a firewall configuration file and run the BPA and export out the results in excel format. Thanks
After upgrading with sudo apt-get update && sudo apt-get install expedition-beta, I can no longer import any config. I have even tried starting from scratch with a fresh Ubunto 16.04 LTS VM. I cannot import any config -- Palo Alto for my base, nor Cisco ASA configs. Even tried same configs which had imported successfully before the upda...
Hi, Can we Import Cisco ASA SSL VPN ACL manager policies configuration through expedition tools in Palo Alto Firewalls? Thanks In advance!!
Hi, after upgrading to 1.1.83.2 I started getting this error when accessing the Security, NAT or Application Override tab. Chrome console logs this: /var/log/apache2/error.log: Any help is highly appreciated
When trying to send an rather large API call (atomic) to Panorama I receive this error message <Fail: Invalid target object in edit handler> What I found out so far: API calls work correct if the "payload" (element content) is below a specific size, but there are also 2 different error situations where the error message above is...
I'm trying to complete a cisco ASA to Palo Alto migration but Expedition seems to hang during the generation of the xml output. I've restarted jobs and task manger multiple times as well as updating Expedition and rebooting the vm itself. Below is the output from the "cat /tmp/error" command via cli. expedition@Expedition:~$ cat /tmp/error Notic...
Dear Sirs, Kindly i have faced many issues in 1.1.10 and was unable to scp to install the upgrade on it. So, appreciate to have drive link to download the ready 1.1.82 or the recommended stable version. Thanks
Reading the Expedition Log Analysis Guide (1.0.2), it has a tiny blurb about the "flow" in the Learning Results: The Flow has been calculated after figure it out who are the servers on the networks. In the resulting potential rules, there are mixes of "Client_to_Server" and "Server_to_Server". I import rules to my project and when merging r...
Hi, Wondering if there's a way to filter the results from ML to only show results for destination IP's in the 10.0.0.0/8 range? I'm building out a greenfield rulebase, would prefer to ignore any suggested rules for external networks at this stage. I tried the below but doesn't seem to work. Cheers
Hi Team, I am trying to use Expedition for PA-7050 to PA-5250 hardware refresh for the purpose of remapping interfaces. When I come to generate the XML it gets stuck at "generating schedules". My expedition is on the latest version [1.1.82.2] Log exerpt from /tmp/error below tailf error Warning: get_class() expects parameter 1 to be obje...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
