Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About sjanita
About sjanita
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
08-11-2019
216Posts
48Likes
31Solutions
Aug 11, 2019Last Visited
User
Activity
User
Profile
Latest posts by sjanita
| Subject | Views | Posted |
|---|---|---|
| 641 | 08-11-2019 08:28 PM | |
| 570 | 08-11-2019 08:27 PM | |
| 670 | 08-11-2019 08:25 PM | |
| 1655 | 08-07-2019 01:17 AM | |
| 1742 | 08-06-2019 10:44 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 12-05-2018 07:59 AM | |
| 1 | 04-16-2019 10:21 PM | |
| 1 | 12-31-2018 09:32 AM | |
| 1 | 07-16-2019 12:31 AM | |
| 1 | 07-09-2019 12:46 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 2 | |||
| 1 |
My Knowledge Base Contributions
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 2 |
User Badges
Public Statistics
| Date Registered | 05-01-2009 04:59 PM |
| Date Last Visited | 08-11-2019 11:49 PM |
| Total Messages Posted | 237 |
| Total Likes Received | 48 |
05-20-2019
12:59 PM
I have seen this issue/message with installations of ESXi on older server hardware that was not compatible with the vmx-12 drivers.
i'll see what can options there are to support this.
... View more
05-20-2019
12:53 PM
Can you try to generate an XML config file using the base config? If you receive an error that the base config is invalid this issue is being looked into.
... View more
05-20-2019
12:52 PM
This issue is being looked into. I will create a workaround document to clear this issue.
... View more
05-20-2019
12:40 PM
I would recommend you post this question to the PanOS live forum as this is unrelated to Expedition.
... View more
05-16-2019
09:47 AM
I am seeing similar behavior - tags are created but not applied. I will create a report for this issue
... View more
05-13-2019
04:07 PM
this is a PanOS issue and not related to expedition.
You can contact the PanOS support team for assistance with this matter.
... View more
05-13-2019
04:06 PM
1 Kudo
export in XML format is not currently supported.
The use of the excel format is to allow for offline reviewing of the migrated results. For example for those that may not have access to Expedition to assist with the review of the migrated configurations.
Can you describe your use case to export in XML? If you generate a base config and merge the results you will already have those configs in XML format and can use options like load config partial (aritcle linked below) to selectively move XML snippets from one PAnOS xml config to another.
https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-cli-quick-start/use-the-cli/load-configurations/load-a-partial-configuration
... View more
05-13-2019
04:03 PM
depends on your end goal.
Are you looking to migrate a production firewall config to be managed from panorama?
if yes then using the import option from Panorama is the best process to follow (article linked below):
https://docs.paloaltonetworks.com/panorama/8-0/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-to-panorama-management
If your goal is to use the configurations to be moved to a template then you can import both configs (firewall and panorama) into Expedition, make the Panorama your base configuration (under 'EXPORT') then merge the objects from the firewall config to the appropriate panorama device-group or template.
... View more
05-13-2019
03:59 PM
can you test with ver 1.1.17 and update if fixed in this release.
... View more
05-09-2019
11:11 PM
in the lower right hand corner can you change the view from 'all' to 'vsys1' and verify if the policies are displayed.
... View more
05-09-2019
10:08 AM
only analyzes the traffic logs for now - to optimize for both app-ID and user-ID information. You will need to create a user-ID connector to mine the user-ID to IP mappings to enable the machine learning and rule enrichment to make security policy recommendations to further tighten access.
No plans yet to make use of the other logs, the primary use cases are to focus on how to utilize app-ID and user-ID to reduce the access control footprints.
... View more
05-07-2019
09:54 PM
The list of update servers are below:
http://sgp1.mirrors.digitalocean.com/mariadb/repo/10.1/ubuntu xenial InRelease
https://conversionupdates.paloaltonetworks.com expedition-updates/ InRelease
http://security.ubuntu.com/ubuntu xenial-security InRelease [109 kB]
http://us.archive.ubuntu.com/ubuntu xenial InRelease
http://ppa.launchpad.net/adiscon/v8-stable/ubuntu xenial InRelease
http://us.archive.ubuntu.com/ubuntu xenial-updates InRelease [109 kB]
https://www.rabbitmq.com/debian testing InRelease
http://ppa.launchpad.net/jonathonf/python-3.6/ubuntu xenial InRelease
http://us.archive.ubuntu.com/ubuntu xenial-backports InRelease [107 kB]
https://www.rabbitmq.com/debian testing Release
http://us.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages [947 kB]
https://www.rabbitmq.com/debian testing/main i386 Packages.diff/Index
... View more
05-06-2019
07:45 AM
thanks for reporting, the issue you described has been identified and will be fixed in an upcoming Expedition release.
... View more
05-03-2019
12:30 AM
to clarify, the Sonicwall SRA is a dedicated remote access device. If this is an accurate description and function of the SRA, the equivalent PanOS configuration will be the integrated Global Protect feature.
Expedition currently does not migrate client access VPN's to Global Protect. There is no option to import this configuration using CSV as Expedition currently cannot manage Global Protect configurations.
To migrate, the Global Protect configuration will need to be configured directly on Panorama or the firewall.
... View more
05-01-2019
12:43 AM
Updates to the CSV import features allows for auto-populating of the field mappings.
For more information see the How-To guide linked below on how to take advantage of the new feature.
https://live.paloaltonetworks.com/t5/Expedition-Articles/A-How-To-guide-on-the-Import-CSV-option/ta-p/258388
... View more
04-30-2019
11:29 PM
recommended resources:
CPU or cores: 4
RAM: 16 GB
Storage for ML usage: 100 GB (minimum), recommended 1 TB (10 or more firewalls)
... View more
04-25-2019
09:48 PM
yes if you can share the ASA config by sending to the fwmigrate (at) paloaltonetworks.com that will be helpful
... View more
04-23-2019
08:54 AM
no recommended vcenter version.
The ESXi versions supported are:
5.5, 6.0, 6.5, 6.7
... View more
04-23-2019
08:53 AM
Logging into the WebUI is described in the User Guide:
https://live.paloaltonetworks.com/t5/Expedition-Articles/Expedition-Documentation/ta-p/215619
from the CLI find the IP address assigned to the Expedition server:
$ifconfig
open a browser session - https session to the IP address listed.
https://<ip assigned to your Expedition server>
username: 'admin'
password: 'paloalto'
expedition@Expedition : /home/userSpace $ ifconfig
ens33 Link encap:Ethernet HWaddr 00:0c:29:85:1a:47
inet addr:192.168.252.136 Bcast:192.168.252.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe85:1a47/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:254037 errors:0 dropped:0 overruns:0 frame:0
TX packets:161590 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:183128773 (183.1 MB) TX bytes:86094261 (86.0 MB)
... View more
04-23-2019
08:24 AM
4 Kudos
Expedition TechNote: CSV Import Guide: This document provides examples and descriptions on how to import configurations using the "Import CSV" option available in Expedition.
There are many use cases to utilize the CSV import feature with one of the main use cases being used to migrate 3rd party firewall configurations that Expedition currently does not have a native configuration parser for.
Updated May 15, 2019
... View more
- Find more articles tagged with:
- CSV Import Guide
- Expedition
- Import CSV
- technote
Labels:
04-22-2019
08:25 AM
the DB cannot start likely due to the lack of storage left in the primary HDD.
if you are free for a zoom conference monday or tuesday afternoon feel free to send an email to fwmigrate (at) paloaltonetworks.com
... View more
04-19-2019
07:09 AM
it also look as if you expenaded the size of the default partiion and also added a second disk.
were you priginally storing traffic logs in the /PALogs directory? If yes have you checked that directory for any traffic log files that can be deleted?
... View more
04-19-2019
07:06 AM
you will want to remove the newer files first.
But looking at the size of the files, these specific files are MB in size so I don't know how much of an impact they will have to free up disk space, but if those files are not needed they can be deleted.
... View more
04-18-2019
02:10 PM
Please review the attached document for SHA256 hash of the Expedition OVA.
... View more
Labels:
04-18-2019
01:56 PM
from the cli you will need to issue the command:
expedition@Expedition : /home/userSpace $ sudo su
[sudo] password for expedition:
root@Expedition:/home/userSpace# whoami
root
root@Expedition:/home/userSpace#
Now that you are root you can cd into the projects directory and into each directory to check for backup files
root@Expedition:/home/userSpace# cd projects/
root@Expedition:/home/userSpace/projects# ls -al
total 60
drwxrw-rw- 15 www-data www-data 4096 Apr 18 11:41 .
drwxr-xr-x 5 www-data www-data 4096 Mar 25 15:52 ..
drwxr--r-- 3 www-data www-data 4096 Mar 25 15:58 5250MLRE
drwxr--r-- 4 www-data www-data 4096 Apr 17 01:02 850MachineLearning
root@Expedition:/home/userSpace/projects# cd 850MachineLearning/
root@Expedition:/home/userSpace/projects/850MachineLearning# ls -al
total 596
drwxr--r-- 4 www-data www-data 4096 Apr 17 01:02 .
drwxrw-rw- 15 www-data www-data 4096 Apr 18 11:41 ..
drwxr--r-- 2 www-data www-data 4096 Apr 16 11:32 Backups
-rw-r--r-- 1 www-data www-data 53200 Apr 1 09:45 MT-850MachineLearning.xml.dat
-rw-r--r-- 1 www-data www-data 20752 Apr 1 09:45 MT-850MachineLearning.zip.dat
-rw-r--r-- 1 www-data www-data 83680 Mar 27 11:31 PA-850_011901002830.xml_2019.03.27_11h32m.dat
-rw-r--r-- 1 www-data www-data 80912 Mar 25 15:58 PA-850_011901002830.xml.dat
-rw-r--r-- 1 www-data www-data 129424 Mar 28 10:17 Panorama-QA_007307000481.xml_2019.03.28_10h17m.dat
-rw-r--r-- 1 www-data www-data 129360 Mar 28 09:16 Panorama-QA_007307000481.xml.dat
-rw-r--r-- 1 www-data www-data 84736 Mar 27 11:36 panos_8.xml.dat
drwxr-xr-x 2 www-data www-data 4096 Mar 28 10:17 toImport
root@Expedition:/home/userSpace/projects/850MachineLearning# cd Backups/
root@Expedition:/home/userSpace/projects/850MachineLearning/Backups# ls -al
total 93792
drwxr--r-- 2 www-data www-data 4096 Apr 16 11:32 .
drwxr--r-- 4 www-data www-data 4096 Apr 17 01:02 ..
-rw-r--r-- 1 www-data www-data 4593712 Mar 27 04:19 base-3-27_MT_2019-03-27_10-19-31.sql.dat
-rw-r--r-- 1 www-data www-data 6011680 Apr 11 02:11 current_MT_2019-04-11_02-11-51.sql.dat
-rw-r--r-- 1 www-data www-data 1252368 Mar 25 16:01 undo_MT_2019-03-25_22-01-27.sql.dat
-rw-r--r-- 1 www-data www-data 4237120 Mar 25 17:16 undo_MT_2019-03-25_23-16-57.sql.dat
-rw-r--r-- 1 www-data www-data 4429968 Mar 27 04:05 undo_MT_2019-03-27_04-05-24.sql.dat
-rw-r--r-- 1 www-data www-data 4361488 Mar 27 04:00 undo_MT_2019-03-27_10-00-00.sql.dat
-rw-r--r-- 1 www-data www-data 4593712 Mar 27 04:19 undo_MT_2019-03-27_10-19-32.sql.dat
-rw-r--r-- 1 www-data www-data 4978240 Apr 1 09:39 undo_MT_2019-04-01_09-39-19.sql.dat
-rw-r--r-- 1 www-data www-data 6014112 Apr 10 13:34 undo_MT_2019-04-10_11-34-19.sql.dat
-rw-r--r-- 1 www-data www-data 6014256 Apr 11 02:04 undo_MT_2019-04-11_00-04-53.sql.dat
-rw-r--r-- 1 www-data www-data 6011856 Apr 11 02:12 undo_MT_2019-04-11_00-12-25.sql.dat
-rw-r--r-- 1 www-data www-data 6013072 Apr 11 02:12 undo_MT_2019-04-11_00-12-51.sql.dat
-rw-r--r-- 1 www-data www-data 6013248 Apr 11 02:13 undo_MT_2019-04-11_00-12-59.sql.dat
-rw-r--r-- 1 www-data www-data 6011680 Apr 11 02:13 undo_MT_2019-04-11_00-13-27.sql.dat
-rw-r--r-- 1 www-data www-data 6011824 Apr 11 02:13 undo_MT_2019-04-11_00-13-33.sql.dat
-rw-r--r-- 1 www-data www-data 6011952 Apr 11 02:20 undo_MT_2019-04-11_00-20-38.sql.dat
-rw-r--r-- 1 www-data www-data 6718736 Apr 15 04:24 undo_MT_2019-04-15_04-24-20.sql.dat
-rw-r--r-- 1 www-data www-data 6719552 Apr 16 11:32 undo_MT_2019-04-16_11-32-55.sql.dat
root@Expedition:/home/userSpace/projects/850MachineLearning/Backups#
... View more
04-18-2019
11:14 AM
if there were many snapshots taken for each project this could grow the storage for the projects.
You can check the backup directories for each project.
Note: you will need su access to move into the project directory.
/home/userSpace/projects
within each project there will be a 'Backups' directory that can be checked for the snapshots.
... View more
04-18-2019
09:50 AM
Unfortunately there is no option to upgrade MT to Expedition. You will need to download the OVA and deploy Expedition into your environment.
https://live.paloaltonetworks.com/t5/Expedition-Migration-Tool/ct-p/migration_tool
... View more
04-18-2019
02:56 AM
(DO NOT EDIT resolv.conf)
If needed, the steps to statically configure a DNS server to the Expedition server will be to edit the dns-nameserver in the /etc/network/interfaces file.
Editing resolv.conf is not reliable as any edits will be overwritten on reboot of the Expedition server.
expedition@Expedition:/etc/network$ sudo vi interfaces
Configured to use DHCP
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto ens33
iface ens33 inet dhcp
dns-nameservers 8.8.8.8 4.2.2.2
Configured with a static IP
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto ens33
iface ens33 inet static
address 192.168.252.136
netmask 255.255.255.0
gateway 192.168.252.2
dns-nameservers 8.8.8.8 4.2.2.2
... View more
- Find more articles tagged with:
- DNS server
- Expedition
- Resolv.Conf
Labels:
04-18-2019
12:35 AM
Delvin.C
If you can capture (to a text file) the sonicwall config from the output of the command:
admin@sonicwall> show current-config
I can test the migration against some internal tools being developed.
send an email to fwmigrate (at) paloaltonetworks.com
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-11-2019
11:49 PM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
