Anyone know server sizing requirements for this? Minimum cpu, memory and storage?
Also, what is the recommended way to install?
I started by running the command
scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csvon my PA220.
root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):
https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c
Be sure to go Settings > M. Learning > and change the Expedition ML Addr
...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini
sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...
Hi,
We have Cisco Firepower 4100 series appliances and are thinking to migrate to PA 3200 series. I have never seen anyone doing that migration before, I would like to ask you if anyone of you have done this migration and would it be same like ASA
...
Need to have expedition tool OVA file
The link to get the tool is not working.
https://paloaltonetworks.app.box.com/s/vt2o3l1lptojma8sjejgjvkgydcqoquc
Hi All,
I have uploaded the required Checkpoint Config files into Expedition tool. When I looked at the policy, many rules have more than single zone assigned in both source and destination unlike Cisco policy migration. Especially if there are che
...
Can anyone point me to the area in expedition that contains the lldp server profiles? I continue to get an a error with the lldp profile and can't find where this would be setup in expedition GUI. Thank you
not sure what i am doing wrong.
importing objects : objects_5_0.C
policy : took the rulebases_5_0.fws - renamed to after_change.W
i have deleted the global rules container and now the file starts with
(
:rule-base ("##after_change"
:AdminInfo (
:c
We have a scenario whith a client, who has been using router ACLs as their primary source, and looking to get them into PA. Will the latest version of Expidition allow the conversion of a routers ACL to Palo config? Or are we looking at having to bui
...
I'm trying to block unauthorize devices (non-domain machine and not having our approved anti-virus install) to establish a client VPN session into our network via GlobalProtect. The only way right now is to apply HIP check once a VPN connection via G
...
I stumbled across two potential bugs in Expedition 1.0.107 the other day, using it to merge duplicates and unused objects from a Panorama (8.1.5) config.
1. Editing a config that originally contained over 10,000 objects (across different DGs) resul
...
Looking to move addresses, address groups, services and service groups from a FGT1000C to a Palo 3060 and then build the policy in Palo manually. I've backed up the FGT config and created a new project in Expedition and was able to import it success
...
1- Rules from Application Blade are coming disabled (Not an issue, just needed to know why)
2- Interfaces are coming without an IP Address (Just network address)
3- OSPF routing are being loaded onto migration as fi they were static routes.
4- Some f
...
Hi,
I am upgrading from 3050 appliance to 3220, devices are in HA. is there any migration tool available in PA?
Please advice me the upgrade path.
Regards
Zahid
Hey All,
had an issue today while migrating apps from 7050 config to pa220R (bloody slow device) with 8.1.5 on board.
on 7050 I have few vsyse's with shared applications and application-groups used (to share them in ruleset between vsyses). New PA-
...
Scenario:
Two RADIUS servers added, tested fine.
They were both added by user "admin".
Added a new user with Admin role.
new user logs in fine, goes to add other users (because hes an admin), he can add a user, but not specify a RADIUS server for use
...
Hi, all.
I'm trying to use Expedition for the first time and it won't let me upload a config from a FortiGate. It's showing me the following error:
Thoughts?
EDIT: I was able to load this config file into the old MT 3.3.10 and it read it c
...
