Expedition Discussions

Expedition server sizing

Anyone know server sizing requirements for this? Minimum cpu, memory and storage?

Also, what is the recommended way to install?

Resolved! ML gets stuck at "Pending"

I started by running the command

scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv

on my PA220.

root@Expedition:/PALogs# ls -l
total 64296
-rw-rw-r-- 1 expe

...

If You Need an OVA...

I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW):

https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c

Be sure to go Settings > M. Learning > and change the Expedition ML Addr

...

Resolved! How to Upload configuration files bigger than 2MB

Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini

sudo vi /etc/php/7.0/apache2/php.ini go to line where this ...

Resolved! Temporary Data Structure Folder

Hi,

I am having issues with Disk Usage 15GB out of 17GB but when I go into ML and try "DELETE ALL DATA STRUCTURE FILES" under Temporary Data Structure Folder I get an error "Error deleting the Connections File".

When I actually browse to the fo

...

Resolved! Expedition + Iron Skillet Integration

Are Iron Skillet's XML files being integrated into Expedition? If so, how soon? If not...

Setup Expedition on VMware Workstation, exported to ESXi, web ui says password is wrong?

As title says, I had VM running and working in Workstation, updated, configured, etc. then exported to OVA and deployed to ESXi, but now the web UI says my passwords are incorrect. How can I reset the admin and other account passwords from CLI?

Hyper-V image or install instructions

Hi,

I really want to run this in our environment but we are Hyper-V based, so I could really do with either :-

Hyper-V base image or Instructions to install on generic Ubuntu install.

Or even steps to modify the current vmware image.

I have tri

...

Resolved! Problems with Expedition retrieving info

Hi

I've installed OK. It's up and running. I've added the device, with API keys. But it just blinks when I try to retrieve content and Panorama devices. I can see in the firewall that traffic is allowed and flowing. What am I doing wrong?

GT

Erorr when generating XML and Set

I'm running on the lastest verison, and post merge (when exporting) I receive an error when attempting to generate the XML and Set output. A blank error box pops up and says "Aborted" at the top.

Resolved! Best Practices Analysis Not Running

I'm trying to run a BPA for one of my Panorama-managed devices. I got everything imported into the project, but the BPA never runs. The progress bar advances to "Done!" with no visible errors on the front-end, but Last Run stays at Never Analyzed. Ch

...

Dynamic Address Groups, Tags and Excel outputs

I've got a number of objects defined in my policy that have tags, and are used in Dynamic Address Groups. The DAGs are then used in the policy, from a policy standpoint, they work great. The issue that i'm running into is that Expedition thinks the o

...

Resolved! Expedition ML rules with any/any

After a week of logs from a NGFW I tryed to ML rules from it and got a couple of "suspicious" rules, for example these two below:

In these, as you can see, the source, destination and service are any. What is the threshold that makes Expedition c

...

Expedition vm missing

I have vm fusion on a mac and the vm disappeared, but I found it on the drive but all projects were gone. Is there an issue with vmware fusion on mac, are the project files recoverable? thanks