Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Hi Team, could you please tell us is there a way to perform migration from Huawei to 5250 Palo Alto. we are aware that the migration tool would not support from Huawei to Palo Alto. Is there any scripting or other automated way available
Hi, I'm working on a migration from Checkpoint R80.20 to panOS 9.0.5. I injected both configurations in expedition. When I merge Policies and objects with the base configuration, the operation seems successful because I have the "Done!" message. But I noticed that actually the polices have merged correctly but the objects don't merge at all. T...
Hi, i have done with setup machine learning it analysed 1 firewall's 1 day log and populated 2080 policies and 13518, still i have to analyze the logs for 29 days I am afraid how i am going to optimize my newly populated firewall rules and how i am going to push the policies into firewall kindly help to advise on this.
Is there a way to export a policy to CSV while resolving the Object Names to IP? I know you can export policy, addresses, and addresses groups individually. I would like one worksheet that contains the policy with both object name and IP in the SRC and DST fields. Or if there is a way to get this output within Expedition that would be good as...
Using Expedition 1.1.60 and BPA 3.6.3, we are able to import Panorama and firewall configurations. The best practice adoption tool will show initializing after running "Start Analysis" and will show "Done!" in the progress bar, but there is no information provided. Current % Adoption shows 0%, Last Run shows "Never Analyzed". None of the other ...
I upgraded Expedition to version 1.1.59 and it's telling me that all of my address objects, that are set to "ip ranges", are invalid. They aren't invalid. I can add them to my Palo Alto firewall in the same format without issue. I'm unable to add address objects using the "ip range" selection. I imported a Cisco ASA config.
So my expedition GUI died and I couldnt get it back. I copied the projects directory out and into the same directory on the new one. But the GUI isnt seeing the projects that were imported via cli. Is there hope?
After installing Expedition on VM WS Pro, the Expedition GUI does not display or show. I get a default Ubuntu page. This is what show after installation: Here is the page that displays: What needs to be done to fix this?
Hi Expedition Forum, When migrating from a Cisco PIX I am receiving the following error when I attempt API call to push to Panorama. This is the PIX line. access-list FROM-Zone extended permit icmp object-group Subnets any unreachable /config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='DG-Host-device']/applicati...
Hi Team, I'm having an issue where after successfully merging and then generating the config, I am unable to download either the XML or the ZIP file. Clicking the button just does nothing. In /home/userSpace/projects/{project name}/MT-{projectname}.xml.dat I SCP this off the Expedition server but its just an unreadable dat file. Help!
Hi, I had recently did a migration via expedition from ScreenOS (6.3.0r25.0) to PANOS, ScreenOS supports both TCP and UDP ports within a single object. When the configuration gets ported over to PANOS, Expedition creates one TCP service and one UDP service, then adds both of them into a Service Group. This is because PANOS does not support both ...
I've followed a number of articles to import our Checkpoint config into Expedition ready to import into our Palos but for whatever reason the Rules won't import, objects and NATs import fine but the rules don't. Our Checkpoint version is 77.30. I've followed https://live.paloaltonetworks.com/t5/Migration-Tool-Articles/Checkpoint-Different-Sou...
I am importing rules from a Cisco 5585 ASA in prep to move to a 5260. I have noticed that when I go through the log file from the ASA trying to clean up the objects starting with invalid characters or edit objects that exceed 31 characters that I have issue with what is imported. Example is I import 220 lines based on the count in ultra edit and...
Does anybody know of any effective size limits on Exped. I have a 32mb Panorama config that I can import after changing the php.ini settings but after removing duplicate address objects, when I generate the XML output, it logs you out immediately. I can see from useing "top" in an ssh session that the processes are still running, and when it cal...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
