Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
Hello, I currently push my security profiles from Panorama to devices, When adding the device to expedition I do not see the security profiles show up in Expedition. Would someone be able to explain why and also let me know how I can pull them into Expedtion?
Been having trouble over the last few weeks logging into expedtion from win pc running chrome. For some reason, I have to clear my cache before I can get the loging page to load. is there a setting (browser/server) so as to prevent having to clear cache after i logout? Thannks for a response
I was reading through the hardening guide and it covered how to change the password for the admin user in the GUI but not how to change the password for the expedition user that is used to login to the CLI. Seems like this is equally important. How is this done? Can the guide be updated? Thanks,
Hi guys, it seems there is still a bug regarding the definition of a ldap server for authentication. When I try to create a server entry, I only get an exception without further infos. In the releases before, the error message was "The following errors have ocurred:, Enter the server type" - but the option to select a server type is not exis...
After upgrading expedition, I am no longer able to login. When going to the GUI it freezes after I put in my credentials. I am still able to login successfully to the GUI. I tried some of the suggestions of adjusting the mysqli.ini file, but to no avail. Has anyone run into this issue or know how to resolve it? I've updated the expedition t...
Hello, Does any one know how I can see the intrazone-default rules under policies for a project. I can see all the Pre-rules vsys1, but I do not see the intrazone-default rule at the end on the project, any reason why?
I ran the following commands in the CLI on expedition. sudo apt-get updatesudo apt-get upgrade -ysudo apt-get dist-upgrade -ysudo apt-get install expedition-betasudo apt-get autoremove -ysudo apt-get autoclean -y sudo reboot (I used the following command to run them all at once and I also attempted it running them all one at a time). sudo --...
Where can I find a list of supported vendors, I see mention of Cisco but cannot find a definitive list of who is support by the tool.
Hi, I have recently migrated the R77.30 Checkpoint config to migration tool and eventually to PANORAMA, whatever I do, its not migrating the Zones, when I merge the migrated config with base config the zones are disappearing. I am not seeing them in the base config aftrer the merge? Does anyone ran into this kind of issue when you are doing...
I upgraded to Expedition version 1.1.6 and now Expedition will not load in browser. I am able to access via cli.
When going to the updates tab in Expedition I see the following message: "Expedition uses an external repository to retrieve new versions and hotfixes. In order to get access Expedition to it and you have a Palo Alto Networks firewall protecting you we need to create a new FQDN object and allow the paloalto-updates application." What is the FQD...
Currently importing data from a CSV allows the IP/CIDR field to be assigned multiple times, but only the value from the last column assigned populates in the IP address field. It'd be great if we could multiple assign to be able to import primary and secondary IP addresses.
Hello, I'm going to be using machine leanring for all my sites to build an entire new rulebase. All my firewalls are in Panorama, I wanted to start with one paticular site (lets call it site 1). All the firewalls were added as devices to Expeidtion when I imported Panorama. I have started forwarding daily logs from site one to a directory on t...
After adding my Panorama server I have to restart the PanOrders Agent after every device config retrieval I will go to Devices > My Panorama VM > Panorama devices > choose the one I want > Retrieve contents > running config It will work but the next one I try crashes the PanOrders Agent and even if I restart it with the pendin...
We are trying to use Expedition to help migrate our local Palo configuratons to Panorama for a more centralized management of the firewalls. What we have noticed when exporting the configurations from Expedition into Panorama, that the device rules that use Security Profiles that are defined within Panorama do not carry over. The rule no long...
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
