Hotfix of Expedition

[JerryCollins]

Is there a place that the hotfix xan be downloaded rather than using the CLI method with apt-get? My server is behind a very strict firewall and cannot access the sites needed for apt-get to function.

Can the hotfix be downloaded and installed from the cli locally?

[hbalzac]

This is a real headache for me aswell, im trying to do it manualy and transfer the file but cant get it to work 😞

[alestevez · Accepted solution]

Expedition itself only needs one debian package to get updated. That package is hosted in our repository located at:

https://conversionupdates.paloaltonetworks.com

The access is made via (ssl) but we should detect as paloalto-updates app-id if your firewall is a Palo Alto Networks device.

Best Practices. The funcitonality of BPA uses some external dependencies located in Internet and while the update process occurs Expedition tries to go to Internet to find the latest version of those depencies. If you dont have Internet access Expedition will wait for the timeout and will not update them.  But BPA it goes on its own. 

If you want to download the hotfix by hand and upload them to your Expedition VM you can just do something like this

https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.0.106.all.deb(fixed the broken link)

once you upload this file to Expedition you can update by running this command:

sudo dpkg -i expedition_1.0.106.all.deb

[hbalzac]

I tried to use proxy, it worked to a extend. But for some reason it tried to go and use pip to download some python package. And that bypassed all my proxy settings. Ended up open wide in my (atm non palo)firewall temporary.

I can try this now (looking forward to the release notes for the new hotfix)

[alestevez]

Check how to setup pip with proxy here https://live.paloaltonetworks.com/t5/Expedition-Discussions/Expedition-update-via-webproxy-server/m-...

[hbalzac]

That did not work either. Will try again next time. But if it works with just dl the deb package its much easier for me 🙂

[MichaelSonen]

I get a 404 when connecting to:

https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.0.106.all.deb

[alestevez]

I have updated my post with the right link 🙂

https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.0.106-all.deb

[MichaelSonen]

Still getting a 404 for the path:

https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.0.106.all.deb

[alestevez]

I have updated all the links on this page 🙂 Try it it works for me. Regards

[MichaelSonen]

Thanks alestevez. I was able to get the .deb file and install. 

[Gun-Slinger]

Anyone else getting the php-radius error on the install of the HF? This is deployed in an esx environment and works fine but noticed this error on the update install.

expedition@Expedition:~$ sudo dpkg -i expedition_1.0.106.all.deb
[sudo] password for expedition:
(Reading database ... 209795 files and directories currently installed.)
Preparing to unpack expedition_1.0.106.all.deb ...
Unpacking expedition-beta (1.0.106) over (1.0.84) ...
dpkg: dependency problems prevent configuration of expedition-beta:
expedition-beta depends on php-radius; however:
Package php-radius is not installed.

dpkg: error processing package expedition-beta (--install):
dependency problems - leaving unconfigured
Errors were encountered while processing:
expedition-beta
expedition@Expedition:~$ ls -l
total 39140
-rw-rw-r-- 1 expedition expedition 40078732 Oct 8 10:26 expedition_1.0.106.all.deb

[alestevez]

It should be installed, if not please try this to install manually

sudo apt-get install php-radius