Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
This is a generic question that I haven't found a solid answer for. Expedition was sold to my upper management to be an editing tool for importing rules from our current Cisco environment to a Palo Alto firewall. Is there a way for me to edit the rules in Expedition as in deleting rules. I have to split a single context of an ASA into 7 vsys and...
I have imported rules from a Cisco ASA to expedition in prep for putting them on a Palo Alto. Expedition made the zones that the rules are tied to into tags. I have tried editing the tag to the new design but I find that I can only choose an existing tag in expedition and if I try to make a new tag by just typing in the new name it generates a n...
All, I am working with a customer migrating from CP 2220 R80.10 to a PA820 PANOS 9.05. and am running into issues. I have followed the step 1-5 on exporting the settings from the CP and have imported them into Expedition, v1.1.51, after the import, the gui does not list the interfaces or the tunnels, which is going to be a huge undertaking to...
Does anyone know a good way to determine the current Expedition version for an offline upgrade?
Anyone who has migrated from Clavister to Palo Alto Networks with Expedition? If so, how? csv?
Hello, I am beginning a conversion of firewalls from CheckPoint R77.30 to Palo and we are getting all of the objects I would expect except for the IPSec Tunnels. The firewall's I am converting all have tunnels that would be great to get converted. I am following the MT20- Checkpoint: Different SOURCE files FORMAT guide found on the forms for g...
Hi Guys, I'm migrating to a PA 3220 running PAN-OS 8.1.5. I migrated the Cisco config using the migration tool 3.3.10. Policies, Zones, Interfaces, NATs, everything was migrated. However, site to site VPNs weren't. Doesn't the migration tool migrate site to site VPNs?Am I missing something?Thanks.
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Since the upgrade to 1.1.52.1 (this upgrade failed to upgrade the Best Practices code) and now updated to 1.1.53, Expedition is taking almost 30 minutes to import a 29 MB Panorama saved config. When we were on 1.1.30 something, this same size file (from the same Panorama with the same number of device groups, firewalls, etc) imported into a ne...
Whenever I try to Generate API Requests Expedition has been stalling out at Generating Log Settings. I made it really simple to. I imported Panorama configuration and then immediately tried to export it and received the same results. not sure if this helps or is related: expedition@pan-expedition:~$ cat /tmp/error Notice: Undefined offs...
Hi could someone see if they recognise what this error log is please: /home/expedition/PALogs# tail -f /tmp/error_logCoCoCaused by: java.net.ConnectException: Connection refused (Connection refused)at java.net.PlainSocketImpl.socketConnect(Native Method)at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)at java.net....
I have been working on an SRX to PANW migration in Expedition. The source Junos files come from JUNOS 12.3X48-D25.3 and have been sanitized prior to import in to Expedition. All of the objects appear in Expedition and after I run through all of the cleanup, I have attempted to merge and generate set and XML configurations. The resulting files...
we are able to login to the expedition and import the configuration, without doing anything clean up, we generate xml file. it stuck and log indicate the error below, please confirm expedition is not support multicast routing. thanks. Warning: simplexml_load_string(): Entity: line 1328: parser error : Premature end of data in tag any-source-mu...
Hi Community, I'm exploding... did a few Juniper migrations lately and we have an issue, that the address import is not working as expected. The object names are fine, but all the addresses got value "1.1.1.1" - lot's of manual work or scripting. So I did CSV Import to got duplicate entries with the right ip-values and merged them (CSV as me...
Hi everyone,I have added firewall logs from our Palo Alto 5000 series to the Expedition VM /PALogs . I have copied the orginal .csv as a duplicate with root as the owner and the original with expedition as the owner. Both files appear in Devices > M.LEARNING. When I run Process Files the job remains in pending and nothing happens. Any ideas w...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
