About azuniga

For layer 7 migration policies we offer no tool. But for cisco ASA configurations the expedition tool will work fine. ... View more

Hello,   For installation there is a video created on the expedition forums demonstrating how to perform this function, you can watch the video here ( https://live.paloaltonetworks.com/t5/expedition-migration-tool/ct-p/migration_tool ), also there are guides listed from that link as well.   As for the Cisco FirewPower migration the expedition tool will not migrate over the layer 7 policies but only the layer 3/4 policies so you will need to export the configuration with the asa format for conversion. ... View more

Hello @jjevans    You should be specifying a folder path where these logs where be stored, generally this is within your connections parquet settings of expedition under settings>M.Learning.   If you go into that folder within the linux CLI you should see a folder being created for each individual firewall you are adding machine learning to. If you haven't taken a look at our guide regarding this I would recommend you do so as it can probably help you ( https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/ta-p/215619 )   I hope this helps. ... View more

Hello @engreda22 ,   This is the expedition tool forum. I would suggest you post this question in the firewall board. ... View more

This is a security measure built into expedition, do you have this same problem in another browser or in incognito mode? ... View more

Hello @HonoAl    No at this time expedition does not support layer 7 policies from Cisco Firepower. ... View more

Hello @RamBalaji    Can you send a mail to fwmigrate@paloaltonetworks.com so we can take a deeper look at your issue? ... View more

Hello @Sundar    Did you try the steps located within the expedition tool? You would run these steps from within the smart console to achieve what you are trying to do.     ... View more

You should always upgrade to the latest beta release as there are always news updates and fixes to parse the files you are importing, if you would like to stay up to date with all of the releases we have made with expedition feel free to follow it here.   https://live.paloaltonetworks.com/t5/expedition-articles/expedition-release-notes-for-hotfixes/ta-p/216299   Once you have your expedition online and have imported your checkpoint files we have written articles on next steps you can take here.   https://live.paloaltonetworks.com/t5/expedition-articles/tkb-p/ExpeditionArticles   Although this is a video on an ASA import most of what you're trying to do applies because after you import your configuration you will need to remap interfaces resolve duplicate addresses etc. So feel free to also view this video has a tool to help with your conversion.   https://www.youtube.com/playlist?list=PLD6FJ8WNiIqVez8EBeoyRsnQcKTA5FuZ-   Many questions have been answered here on these forums but we monitor them to help when we can, so feel free to always post more questions here. ... View more

1. Objects_5_0.C - found this on: /opt/CPsuite-R77/fw1/conf 2. Rulebases_5_0.fws - found this on: /opt/CPsuite-R77/fw1/conf 3. PolicyName.W - a file with extension .W”, the filename takes the policy’s name (by default Standard.W). Those files are stored in the SmartCenter (Management) under “$FWDIR/conf”   You will need to perform backups of these types of files, also within expedition it does state the file types that are required. XML is not stated as a supported file type since the object files require .C format and the Rulebases .fws and the Policyname a .W   I believe once you create a backup of these files they should be located within a .tgz file as specified within the checkpoint user manual.   For more information regarding checkpoint I would recommend this document.   http://dl3.checkpoint.com/paid/c7/c76b823d81bab77e1e40ac086fa81411/CP_R77_versions_CLI_ReferenceGuide.pdf?HashKey=1605733861_6ace53e7d03db05bb7b5a7dcdd7223c1&xtn=.pdf ... View more

Hello @btalyorrrd    Once you install expedition and head to the import tab the instructions are located there on how to import them. Attached is a screenshot of the steps that need to be taken for an import.   ... View more

Hello @kurtac    Thank you for bringing this to our attention I was also able to verify it on pan OS 10.0. We will look at implementing this fix in a new release. ... View more

Hello @tcannon-cancom    If you are already manually trusting the repo you should just need to issue the command apt-get install expedition-beta   Can you run that command without the allow unauthenticated and see if you have an issue? ... View more