Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
I am using Expedition v1.1.17. I've imported a Check Point R80.10 config using the R80.10 (beta) tab. In each case all addresses, services, etc are importing mostly properly, but security rules and NAT rules are not showing. The project dashboard does show the correct rule count, but there is nothing under policies. Am I missing something? Th...
Has anyone been able to successfully deploy expedition on Redhat instead of ubuntu? I have noticed that the OVA is prepackaged as Ubuntu and there seems to be no way to force it to use a different linux os.
Is there any update for the issue with the "No Rules Configured" error when selecting the option for all on the policies tab to show all rules? Thanks.
When adding a device I receive an empty error message in the UI as shown below In the Apache error.log I see the following message appear: PHP Fatal error: Uncaught PDOException: SQLSTATE[42S22]: Column not found: 1054 Unknown column 'avoidToday' in 'field list' in /var/www/html/libs/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/PDOConnecti...
We all know expedition is able to make use of traffic logs. But it's not clear which data from those logs are used ? I know it suggest app-id, but what about user-id(groups) ? PA have many more types of logs: auth, data, thread, traffic, tunnel, url, wildfire. Because one of the expedition outputs - rules, i believe it could make use of url and ...
Hello there, We want to give Expedition a try and so far, it runs smooth. Features are good and everything works out of the box so far. Except we ran into one issue, we downloaded the OVA (ExpeditionVM-1.1.10.ova), created a new VM for it and upgraded the hardware version from 12 to 13. The current issue now is, that we can't assign more tha...
Where i can find release notes for every minor version ? for example i've just updated from 1.1.16 to 1.1.17. But what have changed ?
Why doesn't Expedition have TACACS authentication when all the firewalls and Panorama have it and it works fine? We run Cisco ISE and are having issues with Expedition working with the Cisco ISE RADIUS server. We cannot get users to authenticate. We followed the https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFsCA...
When I perform a RADIUS test to our Cisco ISE RADIUS server, why does Expediation come back with an LDAP error message?
Is migrating Sonicwall SRA to Palo Alto supported in Expedition? Specifally, is mapped accounts and resources in Sonicwall SRA migrateable to Palo Alto equipvalent? If not, is it possible to map users accounts using Expedition CSV? What fields are actually importable?
Updates to the CSV import features allows for auto-populating of the field mappings. For more information see the How-To guide linked below on how to take advantage of the new feature. https://live.paloaltonetworks.com/t5/Expedition-Articles/A-How-To-guide-on-the-Import-CSV-option/ta-p/258388
Is there an AWS AMI for Expedition? If not, when will an AMI be created for Expedition. We have Panorama running in AWS and would like to Expedition running is AWS; not have to convert an OVA file to an AMI. Thank you.
I have expanded the root directory like 2 times already and it keeps filling up. So now the expedition gui will not load. So what is taking all the space? expedition@pan-expedition:/hdd/PaloLogs$ df -h Filesystem Size Used Avail Use% Mounted on udev 2.9G 0 2.9G 0% /dev tmpfs ...
expedition@pan-expedition:~$ service mysql status ● mariadb.service - MariaDB 10.1.38 database server Loaded: loaded (/lib/systemd/system/mariadb.service; enabled; vendor preset: enabled) Drop-In: /etc/systemd/system/mariadb.service.d └─migrated-from-my.cnf-settings.conf Active: failed (Result: exit-code) since Thu 2019-04-18 ...
Hi! We are trying to migrate a Checkpoint firewall. We have Expedition set up and have imported Panorama as our base config. We were able to add the Checkpoint as well and merge the configurations. However, upon export, the process hangs. We have tailed the logs to find an unterminated entity reference and it gives a line number. Are there...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
