Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
When I try to merge address objects with the same value the description of all objects (not only with the same value) are merged together. I think this is a bug. Expedition Version is 1.81.1.1, but bug was seen in older versions too. Example: Before merge: Before merge After merge: Thanks for your help
Hi Expedition Live Community users, Expedition Developer team is in process of developing Expedition 2.0 and would like to hear your feedback. Here is a brief overview of the new Expedition 2.0 Expedition 2.0 contains major features in previous version, and added below new features: Brand new Web GUI API enabled Support automated workflows O...
Dear, Using MT3, there was a nice working feature for quickly finding rules with the same sources/destinations etc. see below. I'm trying to obtain similar querries on the Expedition tool on the Security rulebase (not for objects, services etc), but am failing in it. - There are some predefined filters: Invalid Services, Duplicate values o...
I have one instance of Expedition where I am apparently unable to manually trigger log processing for enabled files (Devices/M.learning). Initially, Expedition was set to autoprocess CSV files, and it did it successfully. After a reboot, three logfiles piled up due to scheduled log export via scp from firewall and I didn't notice that the task m...
Hi team, I have to convert Juniper configuration, but when importing configuration file, Expedition tool shows only object, no policy. Does anyone experience that before?
Trying to migrate from Cisco ASA to Palo Alto using Expedition. These 6 addresses are being flagged as Invalid Addresses. object network obj_any-01subnet 0.0.0.0 0.0.0.0object network obj_any-02subnet 0.0.0.0 0.0.0.0 object network obj_any-03subnet 0.0.0.0 0.0.0.0 object network obj_any-04subnet 0.0.0.0 0.0.0.0 object network obj_any-05subnet ...
Hi, just trying to install expedition in my Ubuntu server and I'm not finding the installation file, any help is appreciated. https://conversionupdates.paloaltonetworks.com/expeditioninstaller.tgz Not resolving in any other computer either...
Hi team, Can anyone help share the export commands for Checkpoint R77.30? I read a document before but I cannot find it anymore. Please help if you have. Thank you.
Hello to all, I want to address a bug in expedition 1.1.81.1. I imported a PaloAlto configuration (FW 8.1.11) to perform object cleanup and it disabled almost all my ipsec tunnels configured on the PA. You can imagine the downtime...:( Any of you that have ipsec tunnels configured on PA can import to expedition and check the status in Expedition...
Hello everyone. Thanks in advance for any help you can offer! I'd like to do a fresh install and have loaded up a VM with Ubuntu 16.04 and downloaded the latest Expedition installer, and running it doesn't get very far. The install script updates system services and installs things just fine from outside of Palo Alto's apt-get repo. However, P...
I have Panorama configured as a device in Expedition. Devices managed by Panorama have been imported/retrieved into the device within Expedition. Some stuff I've done/is configured: crontab is set to fix permissions on imported logs daily at midnight. It runs successfully and resulting files look like they have the right permissions:-rw-rw---- ...
Hello There, After importing ASA config in to Expedition, one of the security policy marked with a red cross. What is meaning of the red cross? I could not find anything wrong with the policy. Thanks,
Hello There, After importing ASA config in to Expedition, one of the security policy marked with a red cross. What is meaning of the red cross? I could not find anything wrong with the policy. Thanks,
We are going to expand CPU, Memory and Disk Space for our expedition server in order to work with Machine Learning and Rule Enrichment. Is there a way to add "hot-add" functionality in order to add resources without a reboot? Also, are there configuration changes that we need to make to get expedition to recognize the new CPU, Memory and Disk s...
Is it possible to move selected rules from one DG to another in Expedition. If so, some direction on how pls. Thanks
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
