Anyone know server sizing requirements for this? Minimum cpu, memory and storage?
Also, what is the recommended way to install?
I started by running the command
scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csvon my PA220.
root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):
https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c
Be sure to go Settings > M. Learning > and change the Expedition ML Addr
...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini
sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...
Expedition v1.2.86
Remediated all issues less the following:
Expedition is reporting the following remediation:
www-data may not have rights to compress/delete CSV files
Remediation: Include www-data into expedition via "sudo usermod -a -G expedition ww
I am looking for a collective answer best practice when using expedition to migrate from a Cisco ASA to a Palo Alto Pan-OS. Expedition typically maps the ASA Management interface to an ethernet interface and management zone on the Pan-OS and then som
...
Hello,
I am currently migrating my ASA 5585 to a Palo 3260. Everything on the dashboard has been rectified, except for one address group that shows "invalid". I'm not sure how to correct this, it appears to hit two rules, but I'm not sure what the
...
Hello
I am not able to use the ML functionnality on imported log trafic.
Spark tasks are skipped..
I have nothing in those directories :
Log files are in PALogs/
PALogs directory is owned by www-data.
Here is my ML menu when i try to analy
...
I've imported a Panorama from xml to help me do a cleanup.
Panorama manage 2 device group called "intranet" and "internet"
I already knew about an unused service "tcp-2222".
This service it's used on Intranet but unused on Internet. If I set a "unu
...
Hello,
I recently deleted our Expedition VM and created a new one so it on a newer OS. Everything seems to work besides the Project > BPA tool. I seem to be running into the same issue in the link below and their fix was a downgrade to known working
Community,
I am in a project migrating a checkpoint in version r81.10 in expedition to palo alto, but the object groups are blank when I export the configuration, and it eliminates most of the objects that I need for the configuration. This problem d
...
We currently use Panorama to manage multiple firewalls across our organization.
We have a Edge ASA Cluster we are needing to migrate over to an existing pair of Palo Alto Firewalls, managed by Panorama.
I would like to only migrate over the Objec
...
Is there a Expedition "Key" anywhere that will tell you what each icon means?
I am not sure what the spinning green check mark indicates, or non spinning green check mark means.
Hi everyone.
I am really struggling to get Expedition working so I can use it to migrate setting from our existing firewall to new firewalls that will be managed by Panorama.
I have deployed Ubuntu 20.04.* LTS Server (64-bits AMD) to an EXSi server
...
The imported config had an OSPF dynamic routing so some routes were not in routing table. Therefore zones aren't correct on some rules. I can add the routes from OSPF manually into VR in my Expedition project. But how do I force Expedition to re-po
...
I'm working on business unit segmentation projects so I have to identify rules affecting specific subnets and build a new policy. The policies are normally several thousand rules and sometimes over 15 thousand rules so the "Affects the IP" filter co
...
I am getting the following error when trying to scan my log folder on expedition "The '/PALogs/<firewall logs folder>' cannot be scanned. '." I am on version 1.1.101. I also am wondering if maybe my rsylog configuration is not right. The folders bei
...
Hi,
Im currently migrating a specific context of an ASA with version 9.6.
The migrated rules reference the actual objects or any other network/service object group which name does not begin with "DM_INLINE".
Is this as intended? im left with a
...
