Anyone know server sizing requirements for this? Minimum cpu, memory and storage?
Also, what is the recommended way to install?
I started by running the command
scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csvon my PA220.
root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):
https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c
Be sure to go Settings > M. Learning > and change the Expedition ML Addr
...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini
sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...
Hello there,
I am migrating from Juniper to Palo Alto, everything went well until I started the merging it says installing, and nothing happening on the screen no warnings, no errors nothing. and object and policies say pending. can anyone help me ou
Hello Dears,
I'm working on migrating 3000 rules from Cisco FTD to PaloAlto. As you know, the Expedition tool migrates the ASA syntax, not the Snort. The ASA configuration exported won't include the Rule name. Instead, all rules will have a name like
...
Is there an installer script for Expedition Ubuntu 22.04?
Expedition v1.2.86
Panorama 10.2.7-h3
Firewall PA-5200 10.2.7-h3
Exported 24 hours of monitor traffic logs to .csv file format from Panorama
uploaded to /PALogs on server and set permissions
See file from Firewall > M.Learning in Expedition
Click [Process
Can I get some clarification on what is considered an unused object?
For example is an Address or Service Object considered unused if it is not part of any rules if it is listed individually and that is it?
How about if the object is not listed ind
...
running Expedition v1.2.86
Panorama v10.2.7-h3 Active/Passive HA
joined Panorama(s) into Expedition using API KEY successfully
This was working until it was upgraded to v1.2.86 and it broke. I removed Panorama and Devices from Expedition, and re-configu
Hi Team,
Apologies if this issue is being discussed on another thread. I am unable to find it.
I am trying to add devices (Panorama M600) in Expedition. However, Panorama tab remains greyed out for it.
can you please tell me how to fix it.
Expedition v1.2.86
Remediated all issues less the following:
Expedition is reporting the following remediation:
www-data may not have rights to compress/delete CSV files
Remediation: Include www-data into expedition via "sudo usermod -a -G expedition ww
I am looking for a collective answer best practice when using expedition to migrate from a Cisco ASA to a Palo Alto Pan-OS. Expedition typically maps the ASA Management interface to an ethernet interface and management zone on the Pan-OS and then som
...
Hello,
I am currently migrating my ASA 5585 to a Palo 3260. Everything on the dashboard has been rectified, except for one address group that shows "invalid". I'm not sure how to correct this, it appears to hit two rules, but I'm not sure what the
...
Hello
I am not able to use the ML functionnality on imported log trafic.
Spark tasks are skipped..
I have nothing in those directories :
Log files are in PALogs/
PALogs directory is owned by www-data.
Here is my ML menu when i try to analy
...
I've imported a Panorama from xml to help me do a cleanup.
Panorama manage 2 device group called "intranet" and "internet"
I already knew about an unused service "tcp-2222".
This service it's used on Intranet but unused on Internet. If I set a "unu
...
Hello,
I recently deleted our Expedition VM and created a new one so it on a newer OS. Everything seems to work besides the Project > BPA tool. I seem to be running into the same issue in the link below and their fix was a downgrade to known working
Community,
I am in a project migrating a checkpoint in version r81.10 in expedition to palo alto, but the object groups are blank when I export the configuration, and it eliminates most of the objects that I need for the configuration. This problem d
...
