Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Running Expedition 1.1.26 Saving a project snapshot with a name works well, I can select it and load it again later. If I don’t explicitly fill in a name but leave it blank the system creates a name for me. If I later try to select that name to load, the selection dialogue immediately closes without any effect. In reality that function do...
Can a OVF be load on earlier version before vmx12 ?
I was able to parquet logs every day for 10 days. After the upgrade, Expedition no longer sees new files. Path and permissions have not changed. A stand-alone firewall has no issue. Should I delete the Pano and managed devices and recreate?
Hello Guys Expedition tool is not allowing me to merge and download the configuration, can anyone help please? i have also attached the below screenshot for your reference. Thanks Lalit Budhori
Hi, I have a 2 Checkpoint clusters to be migrated to Palo Alto, Panorama managed. The checkpoints are centrally managed via 1 security policy , while on each cluster the routing and dmz can be different. In the example clusterA has 1 local dmz, which isn't exsiting on ClusterB. 1. I've imported the Checkpoint objects, rulebases, policy into Ex...
I'm looking for a list of 'Gotcha' items that get missed by Expedition during import for each of the different vendor / config file types. In other words, configuration items that either aren't contained within the files imported or items that won't convert. Also, things that get pulled over during import that can be simply removed because the...
Cisco ASA Version 9.0 NAT Migration Support? As we use import ASA config , then expedition will be show running on destination NAT step for a long time, then don’t any action. It seems don’t support ASA 9.0 NAT migration.
Expedition hangs on the first login using Default GUI credentials using Firefox. It just sits there and spins in the browser
Hi Guys Does anyone have a method to migrate from a single firewall (specifically checkpoint) to two or more vsys? Thanks
Trying to use Expedition to migrate port based rules to App-ID. I have imported the Panorama running config and added the Log Collector Plugin. I clone the rules and then select App-ID Adoption to retrieve Apps on my selected rules and Expedition generates the report but I never see any Applications populated. I aslo should add that we are using...
I am trying to import logs exported from the firewalls to a mounted secondary drive. Expedition says it cannot access that location. I tried multiple permission combinations. Permissions are the same as in the locations that it can access ok. The file system is the same too. It can access this directory, untill I mount the external drive to it. ...
We are moving from a Juniper SRX to PA 5250.We have 125 data center networks, 1200 addresses, 1000 rules, 5 zones, 250 services, and many NAT rules. I would like to migrate in phases - either a small zone (we have 2 going into a trust zone in PA) or by groups of subnets. I have imported the SRX config into Expedition but I don see how to mig...
Hi! Running Expedition 1.1.21. Still struggling with Clavister import. Have created CSV files for NAT policy. Address already populated. When I import the CSV file, the columns 'src' and 'dst' always get the value 'any' not matter what value I put in, except for the last line in the file!! The very last line in the file populates the col...
Merge button doesn't appear after drag and drop. After I drag my vsys to the vsys in the imported panorama configuration on the right side, merge button is still greyed out.
I have tied my Panorama into Expedition so that I can create a Project and import the Panorama config into it. I've done this and went into one of the device groups and did some bulk changes. (log forwarding profile set for all rules, log on end and not on start for all, and a security profile on all) Then I generate the api calls and send ju...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
