Anyone know server sizing requirements for this? Minimum cpu, memory and storage? Also, what is the recommended way to install?
I started by running the command scp export log traffic start-time equal 2018/07/30@00:00:00 end-time equal 2018/07/30@23:45:00 to expedition@172.30.200.117:/PALogs/mltest.csv on my PA220. root@Expedition:/PALogs# ls -ltotal 64296-rw-rw-r-- 1 expedition expedition 65830760 Aug 1 17:35 mltest.csvdrwxr-xr-x 2 www-data www-data 4096 Aug 1 ...
I created an OVA for my team and put it up here (Note, this isn't the official release now offered by PANW): https://drive.google.com/open?id=1Z9GrCF8I_BZzpbEmEh6G75npo05_4G0c Be sure to go Settings > M. Learning > and change the Expedition ML Address address to your VM's IP. Then return to the Dashboad and Start the Agent. [UPDATE 6.4...
Expedition uses APACHE as a web server and PHP as module for the scripts. By default PHP allow users to upload files with a maximum size of 2M, this can be updated by changing the PHP.ini sudo vi /etc/php/7.0/apache2/php.ini go to line where this variable is defined upload_max_filesize = 2M and replace by upload_max_filesize = 250M There...
I am trying to migrate configuration from Fortinet, It's quite big configuration (around 65K rule). When importing the config file. Expedition is stuck at reading config files. I tried updating, increasing resources and even a fresh installation of Expedition but with the same result.Is this a system limitatio n for the number of objects to b...
Hello! I have been trying to migrate from Junos to a PA-5450 running PanOS v10.2.6 with Panorama v10.2.6-h3, although hopefully the version and model have nothing to do with this. I keep ending up with a single hidden "invalid" Service. I say "hidden" because when I click on the "1" saying I have an invalid service nothing shows. After 1...
Currently previous Security team had one Panorama to manage Palo 3020. Want to remove objects from Panorama and transfer config from 3020 to new 3410 Palo Firewall. Any converter for this or gotchas that I am missing? Thanks
We have a pair of Palo PA820 firewalls that were pulled out of service. I want to use them to replace a pair of Cisco ASA 5508s. I'm planning to wipe the configuration on the PA820s before we start. Then I just need to port the ASA config to an a Palo version of the same config. I can't bring the Palos up on the network beforehand, because t...
Hi, I have to migrate a PA-3020 cluster in version 9.1.15-h1 (which is the latest version available for this old model) to a new PA-1410 cluster which, if I am not mistaken, only supports version 11.0.I imagine that I will not be able to export and import the xml from one to the other and I will have to use Expedition.Is this correct?With Expe...
Attempting to upgrade one of our Expedition instances to 1.2.87 and receiving this error. I'm not sure if it is safe to ignore it or not. This is after following another thread on 4-24 regarding issues with rabbitmq install and getting past that. Ign:15 https://conversionupdates.paloaltonetworks.com expedition-updates/ Translation-en Ign:16 ht...
Currently I have a Panorama managed firewall, I have added Panorama to Expedition (Running v1.2.86), and I am sending syslogs from the firewall to Expedition. Logs are showing up and are being processed: I have a project created, Panorama configuration imported, I can see the ruleset for the firewall in question. I have the log connector...
HI all, I can see there have been a number of issues with rabbtimq/erlang as part of the installation, but I have hit one I can't see a solution for. The rabbitmq install is failing like this: The following packages have unmet dependencies:rabbitmq-server : Depends: erlang-base (>= 1:25.0) but it is not going to be installed orerlang-base-hi...
Hi, It appears that SonicWall configs are not supported in the Expedition Migration Tool. Are there any plans to add support for this firewall vendor? Thanks.
I'm running the latest version of Expedition 1.x and I'm attempting to migrate my config from an ASA to a PA-440. When I attempt to import the resulting config to the Palo, it hangs and just sits at the "uploading" status. I'm on the latest 11.x version on the 440. Not sure if there's something I need to do in Expedition or if there's somethi...
I see on a prior message that exporting a PA-850 configuration allows it to be imported into a PA-3430 and there seems to be no issue with the version either firewall is running. I have a pair of PA-3050's that are being replaced with PA-3410's which are very similar hardware setups but have been told there is no migration procedure to move the...
Migrating from PA-820 SW ver. 10.0.2 to PA-440 SW ver. 10.1.8 and have been instructed to use Expedition. Is the new FW config used as the Base Configuration in Expedition and the old FW config is the Configuration to Migrate? Are there migration issues migrating to a newer SW ver? Are there other considerations I need to make? The current confi...
Hi, I am working on replacing PA-850s with PA-3430 and I would like to know if I can use Expedition tool to migrate the configuration from 850s to 3430s. If yes can someone list out the steps as I am trying to use it for first time. Thanks Vishwas
Expedition will not pull contents from PAN. I add my pan with no issues, but when I pull contents nothing pulls. I can see configured account login to creating the API from PAN system logs but nothing else after that not even the attempts when I initiate the content pull. Pan info: VM Mode Microsoft Azure running software version 11.1.2-h1 ...
Hello there, I am migrating from Juniper to Palo Alto, everything went well until I started the merging it says installing, and nothing happening on the screen no warnings, no errors nothing. and object and policies say pending. can anyone help me out with this please.
reaper
on:
Preparing Exp Tool for Fortigate to PA migration
reaper
on:
Need to in Expedition tool from scrach
