Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About alestevez
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About alestevez
yesterday
73Posts
108Likes
162Solutions
Apr 22, 2021Last Visited
User
Activity
User
Profile
Latest posts by alestevez
| Subject | Views | Posted |
|---|---|---|
| 6959 | 11-11-2019 06:41 AM | |
| 1391 | 10-10-2019 03:25 AM | |
| 4211 | 10-03-2019 10:48 AM | |
| 2632 | 09-17-2019 01:48 AM | |
| 13604 | 04-10-2019 05:42 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 3 Likes | 05-28-2018 04:58 AM | |
| 16 Likes | 05-28-2018 06:28 AM | |
| 2 Likes | 06-01-2018 08:44 AM | |
| 13 Likes | 05-23-2018 11:42 AM | |
| 1 Like | 06-27-2018 07:00 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 4 Likes | |||
| 6 Likes | |||
| 3 Likes | |||
| 2 Likes | |||
| 1 Like |
My Knowledge Base Contributions
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 2 Likes | |||
| 16 Likes |
User Badges
Community Statistics
| Member Since | 03-22-2011 08:43 AM |
| Date Last Visited | yesterday |
| Posts | 918 |
| Total Likes Received | 88 |
11-11-2019
06:41 AM
2 Kudos
Expedition 1.1.47 - Dynamic Log Connectors and Devices Monitor
Overview
The Expedition Team has been working very hard to bring these new functionalities to the community. In the spirit of continuously improving and enhancing Expedition capabilities, we added two new functions to help our customers speed up App-ID adoption function and get better visibility on the PAN-OS device state.
For more information on the new features for Expedition, please review the attached document below.
... View more
Labels:
10-10-2019
03:25 AM
Hi,
If you are trying to migrate from Checkpoint R80.XXX and you see Expedition is missing some address groups members its usually because the checkpoint exporter script is not working properly and it's failing to add all the member definitions. Seems there is a problem to grab all the nested objects so to succeed with your migration we have to update that script to the latest version.
Please follow the instructions here to download the latest version, upload it to your Management Server and run it from there.
https://github.com/CheckPointSW/ShowPolicyPackage
... View more
10-03-2019
10:48 AM
Hi, yes we are here. Are you in 1.1.38? is still there the problem? if yes, please send us an email to fwmigrate at paloaltonetworks dot com and we can schedule a zoom session to see what's going on!
... View more
09-17-2019
01:48 AM
Hi,
We have found our script was not correctly working when the VM was spinned in the cloud. So we updated the script to correctly install Expedition when you run the VM in google or Amazon Cloud (any cloud)
Try the process again:
wget https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz
tar xvzf expeditionInstaller.tgz
chmod +x initSetup.sh
sudo ./initSetup.sh
... View more
04-10-2019
05:42 AM
Only the Checks with the Dark Gray bag can be remediated by selecting them and clicking the Remediate button from the bottom bar. Only checks under Device Config can be remediated.
... View more
04-03-2019
08:57 AM
you are right, you could cut the policy from shared and paste into the rulebase under vsys1 and that's it 🙂 Only check to do if there is a rulename duplicated after the paste 🙂
... View more
03-29-2019
08:02 AM
2 Kudos
Hi, you are right. In Expedition and for backward compatibility between version we were using the old API calls under the path:
/esp/restapi.esp
In Panos 9.0 this way to call the API has been deprecated so now we are updating Expedition to use the current API Path
/api
Next version 1.1.12 will come with the hotfix.
... View more
03-29-2019
04:21 AM
2 Kudos
Expedition – The Glue Between IronSkillet and Best Practices
As you already know, Expedition was conceived to reduce the time and efforts a security admin needs to improve and optimize their Palo Alto Networks configurations. Following that effort, we have added, within Expedition, support not only to run a BPA analysis if not also be able to remediate some of the failed checks (all related to Device Config) and now integration with the project IronSkillet.
https://github.com/PaloAltoNetworks/iron-skillet
IronSkillet is basically a template that provides several best practices to minize the time to deploy a Day 1 Configuration in your Palo Alto Networks devices.
With this article, we show you how to create a new Base Configuration file plus remediate some of the checks failed at the time to run the BPA and export that configuration to your device. With this example, you will get a config that is 67% following the BPA recomendations.
... View more
01-30-2019
05:53 AM
@nburrows It should work, probably they didnt change the config. If you can please verify it. Thanks
... View more
01-14-2019
06:35 AM
1 Kudo
Hi, I will recommend close this threat here and re open it under the Firewall Community, This is for Expedition and it doesnt capture the attention of everybody 🙂
... View more
01-09-2019
04:44 AM
I just tried to run the 2 commands from the hardening guide and worked for me, Have you tried to use another browser to see if it gets the new certificate?
You can check in the config file if your apache is pointing to those certificates?
go to /etc/apache/sites-enabled
and edit the file "default-ssl.conf and check for
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
Regards
... View more
01-09-2019
04:04 AM
Probably you did but Have you restarted the apache daemon after the changes?
... View more
01-08-2019
02:59 AM
If the Firepower config has the access-lists like this will work
access-list myaccesslist advaced xxxx x xx x x x
... View more
12-22-2018
07:15 AM
Hi, not true at all 🙂 That means only the Release file was not found (in purpose) but if now you continue with the next command
sudo apt-get install expedition-beta
You will see how upgrades, please let us know
... View more
12-12-2018
03:56 AM
4 Kudos
Hi,
End of this week we will release Expedition 1.1 with IronSkillet integrated.
... View more
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
