I started by running the command scp export log traffic start-time equal
2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to
email@example.com:/PALogs/mltest.csv on my PA220.
root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedit...
I created an OVA for my team and put it up here (Note, this isn't the
official release now offered by PANW):
sure to go Settings > M. Learning > and change the Expedition ML Addres...
Expedition uses APACHE as a web server and PHP as module for the
scripts. By default PHP allow users to upload files with a maximum size
of 2M, this can be updated by changing the PHP.ini sudo vi
/etc/php/7.0/apache2/php.ini go to line where this var...
I ran into issues updating Expedition through my PAN Firewall running
SSL decryption. After a bit of troubleshooting there are two changes I
needed to make on the expedition VM. Update cert file with your SSL
Decrypt cert - This allows apt to trust y...
Downloaded tgz today and tried apt-get update without success. Looks
like some repository issues? root@Expedition:/etc/apt/sources.list.d#
apt-get update [...]W: The repository
I'm trying to get Expededition to authenticate my users via Radius but
am receiving immediate invalid UN/PW. When I started digging through the
apache error log file I noticed this line with every failed attempt. It
looks like apache is logging at le...
Is there a place that the hotfix xan be downloaded rather than using the
CLI method with apt-get? My server is behind a very strict firewall and
cannot access the sites needed for apt-get to function. Can the hotfix
be downloaded and installed from t...
I am planning on using the migration tool to conver the config from
pa500. To do this once I get the same firmware on both the boxed do I
also have to import the base config from the pa820 to the migration
tool? I also read somewhere something about ...
I've got a pretty straight forward ASA to Palo migration. I followed the
guide step by step. Unused objects and invalid stuff has been removed.
When I click on the merge button it stays in the pending state forever.
(No error message or any other fee...
Hello, I have Problem when trying to import the checkpoint config to
expedition, The checkpoint version is R75.45, I have 2 files config from
checkpoint, - objects_5_0.C - rulebases_5_0.fws I have tried to convert
the .fws file to .W based on Checkpo...
I have several invalid address objects that were migrated with a name
#.#.#.#/# and i want to replace the '/' with a '-' so that the name is
valid, but the replace option is not functioning. The method was to
right click and select predefined filters...
I have run into two ASA pre 8.3 Problems. 1) importing a deny security
rule that had a destination port of 445, was changed to be all tcp ports
( that would be a small problem =D) 2) Importing routes pointed to the
inside with a vpn on the outside th...
Does Expedition actively use the following PALogs subdirs, or can I
clean these out? connections.parquet sparkLocalDir spark-warehouse
Basically, I am asking because I have a limited ammount of space and
LOTS of logs being sent to the PALogs dir, and...
This is more of an Ubuntu question but I'm hoping others will find it
helpful. Our VM admins expanded the available disk, but restarting the
system doesn't cause it to automatically use it. What do I need to do?
Googling for it gave me too many answe...
I have three feature requests that are all related, that I think
everyone will appreciate. 1) When converting ASA configs, true like for
like bi-directional 1-to-1 NATs should be created, not the horrible
implicit rule that Palo Alto Creates i.e. the...
After upgrading to 1.0.105 I recieve an error that E: sub-process
/usr/bin/dpkg returned an error code (1). I also see the following
error: "No apport report written because MaxReports is reached already".
Any help would be appreciated. Thanks,Bob