Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Hi, I would like to migrate a couple of Checkpoint Firewalls to Paloalto but I’m not sure what’s the best approach to proceed with this migration. Also, Checkpoint has all blades ON with full configuration. Does Expedition migration tool able to migrate all Checkpoint Blades configuration? Is any documentation available for Checkpoint to Paloa...
I enabled the Linux Sub-system in Windows 10, installed Ubuntu, and also was able to install Expedition using the new installation procedure. I wiped it and reinstalled it a few times to understand the installation and noticed a few things. If you don't initially setup Ubuntu with the "expedition" user, the installer will tell you to create that...
Export to Excel for any object I select results in empty spreadsheet. Anything I'm missing to export objects to Excel? v1.1.66.2
Hello, I try a migration from checkpoint 8R0.10. I've updated to the last bersion (1.1.12) and I see option "VERSION 80.10" in the checkpoint tab, but this option is grayed out. I try with R80 option but It does nothing after "upload" is clicked. Do I miss something ? Thanks.
Migrating four Checkpoint clusters into single Panorama/HA firewall pair. My initial thought was to tackle each Checkpoint cluster as it's own project (good/bad idea? not sure how projects fit into overall workflow). Running 1.1.66.2 if it matters. I was able to import Checkpoints and Panorama base config. I needed to provide rules to someone ...
Hi everyone. I want to migrate one Cisco ASA 5506 Firewall to a new PA-220 Firewall. I have looked at the "Expedition" tool that PaloAlto provider, but I can't really wrap my head around how it works.I have access to the complete config file from the Cisco Machine, but that is all. The config is pretty small.I have tried to find a "step for step...
Hello dear community I'm currently migrating an ASA configuration to Palo VM, and after importing config files expedition has correctly calculated the from and to zones on my ruleset However, after adapting some IP address of my ethernet interfaces, plus changing few NAT rules, I wanted to proceed to another auto zone assignement. The proble...
Greetings I'm trying to migrate from Cisco ASA to Palo Alto and I'm using current xml file from our live Panorama server. When I exported the xml I made sure to only select the device-group for the firewall I will be migrating to. I imported both the ASA and Pan files and fixed any issues that I saw. On the export tab while merging config I...
Hi All, i am doing migration from Cisco ASA to PA and in using Expedition tool at the last step where API Output Manager to push/send API some of the APIs failed to push with error '\...\is not a valid reference' error, a couple of APIs are successful (ex NAT, tag, VSYS) but address, address groups, security rules, service groups failed.. Pls a...
I run the sudo apt-get update and I get the following errors Get:1 http://security.ubuntu.com/ubuntu xenial-security/main amd64 git-man all 1:2.7.4-0ubuntu1.8 [737 kB]Err:2 http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial/main amd64 python3.6 amd64 3.6.7-1~16.04.york3403 Forbidden [IP: 91.189.95.83 80]Err:3 http://ppa.launchpad.net/...
I have imported the config of an existing 7080 (PANOS 8.1.13) into a new expedition project to see if i can analyze duplicate objects that can be potentially removed. I'm not seeing what I expected though. In expedition there shows no Address Objects, Address Groups, Security Policies, very few Services (only 3) , but seems to have all the zon...
On Expedition there is a file size limit to import of 8meg ? My client has a Panorama config that is 12meg...
My expedition is running on version 1.1.66, but I do not have any Best Practices packages. Executing sudo bash /var/www/html/OS/BPA/updateBPA306.sh produces a lot of warnings and errors: expedition@expedition:~$ sudo bash /var/www/html/OS/BPA/updateBPA306.sh [sudo] password for expedition: Cannot add PPA: 'ppa:~deadsnakes/ubuntu/ppa'. ERROR: '~d...
Just built a brand new VM running Ubuntu 16.04.6 with Expedition version 1.1.65, but I cannot login to the GUI using any credentials, including admin/paloalto or expedition/paloalto. Also, when looking at the /home/userSpace directory, the /utils subfolder is missing. Please advise where I should look for an issue. Thanks in advance!
Hi, In a somewhat unusual case I'm trying to use objects pushed through Panorama, in a policy in expedition. Both Panorama and the firewall are linked & imported in the expedition project. Moving the firewall policy to an all Panorama policy isn't an option here (yet). Is there a way I can use a Panorama object (already present on the fire...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
