Expedition server sizing
Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
What are the differences among Mega, Atomic SubAtomic and Clean options when generating API Requests? When do you use what?
There seems to a bug with Expedition. In Project\Network\Zones, both trust and untrusted has been deleted. In Project\Network\Virtual Wires, existing wires deleted and is empty. Yet, I am still getting this error message when doing API Output Manager to the device {"3":{"device":"PA-850VideoPro","status":"fail","text":"<msg><line&...
When exporting a configuration from Expedition the XML has empty lines in it. Additionally, it seems the xml tags aren't generating line breaks as expected. Screenshot included for reference. My workaround has been importing the exported configuration into the old migration tool and exporting again from there, in which case it is fixed.
Hi guys, i'm getting the below error when updating expedition, i'm using expedition 1.0.95 and would like to update to the latest release, would appreciate any help: expedition@Expedition:~$ sudo apt-get install -f expedition-beta[sudo] password for expedition:Reading package lists... DoneBuilding dependency treeReading state information... ...
Hi experts, I wanted to confirm if this is currently/or will be supported when using the "merge" function with filters. Currently when attempting this I get unexpected results in the duplicate cases results. eg. - before performing the merge, I setup some filter condition say, 'From' equals 'Internal' with an 'AND' condition. I apply the fil...
Hi, My objective is to import a Panorama config to Expedition in order to make changes to a template that are not possible locally on panorama - for example moving ethernet interfaces and having all the dependencies move with them. I connected my panorama to expedition, created a project and imported the panorama device to the project. The...
recently after the last update imnot able to import any configuration file to the expedition tool. import progress will stuck at "initializing" and notthing will happen.. tried restart , delete project and creat new one , tried different configuration file types all same result. please advise.
One of the Security policies has a spinning circle with X. It is not flagged under project statistics. Any ideas why and how to fix?
Trying to migrate from Cisco ASA to Palo Alto using Expedition. These two are being flagged as Invalid IPSec Tunnels. (Some IP addresses has been renamed) object network obj-X1.X1.X1.X1host X1.X1.X1.X1object network NETWORK_OBJ_192.168.169.0_24_02subnet 192.168.169.0 255.255.255.0object network obj-10.0.0.141host 10.0.0.141object network obj-X...
Hi, I guess schedule expiry date and SRX IPsec migration isn't supported yet? Are they coming? -Anders
Attached are the release notes for this release. PAst notes about new features added and bugs fixed can be found from the link below. https://live.paloaltonetworks.com/t5/Expedition-Articles/Expedition-Hotfix-Release-Notes/ta-p/232307
The machine learning and rule enrichment requires expanded storage for most customers. The best option to expand the storage capacity is to add a second hard disk to your Expedition VM. To start the recommended disk size if 100GB if you plan to upload traffic logs from many firewalls.
Hello folks, I'm having issue with Expedition after importing ASA config. The application doesn't transfer client base VPN, LDAP profile for VPN client setting, Radius profile. The major important factor for me is the LDAP profile since we have users directory/file access permission by mapping the LDAP setting. Can some body help? Thanks...
Hi All, I am trying to consolidate firewall rules on one Palo Alto firewall. I have uploaded the config to Expedition but I am struggling to understand how to run the analysis that will provide me with information on duplicate rules or suggested consolidation. Would someone be able to provide me with some detailed instructions? Any help is ap...
Hi all, The current issue I have is the export traffic logs are too large for Expedition ML and manipulation. 1 hour worth of logs is around 2GB. 2 days is around 100GB. After Machine Learning with the 100GB logs is done (around 80k rules) it fails to import to the project. An error dialog box pops up without much detail. Is there further erro...

