About AlexNC

Hi Lychiang   In my case I was installing Expedition fresh on a Ubuntu 20.04 (i cannot remember which Expedition version it was initially). Also in my case php7-radius was not installed and after following your instructions I had to run the following command: sudo apache2ctl restart Regards Alex ... View more

Heya We've gotten the following workaround to fix our issue with 10.1.5h1 on Panorama. > Panorama will need to perform a commit fix and apply some transforms using the transform script. Resolution: > Run the following CLI commands to resolve the validation error, 'hip-profiles expected here'. >configure #load config from running-config.xml  #commit force <<   This workaround is by far better then the copy replace in notepad workaround for all the wrong rules. Anyhow, even though the fix is quick and simple. One would wish Palo documentation would be update and well documented for this. Also a hotfix for the hotfix would be appreciated.   Best regards Alex ... View more

We are facing the issue now to, after upgrading from 10.1.3 to 10.1.5h1. Downgrade to 10.1.4h4 as suggested would not fix the OpenSSL vulnerability:  https://security.paloaltonetworks.com/CVE-2022-0778 From the looks of it, this bug was fixed in 10.5.0: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-5-known-and-addressed-issues/pan-os-10-1-5-addressed-issues# PAN-171869 Fixed an issue where HIP profile objects in Security policies and authentication policies were replaced with source HIP and destination HIP objects.   After hitting already lovely bugs with 10.1.3 and 10.1.4 with device tag assigned security rules and dynamic object groups. 10.1.x looks like a bullet proof release of PAN-OS. Regards   ... View more

Hi   Did the 1.2.3 version get pulled again? I am also unable to update or manually download the 1.2.3 file (i can do the manual update and download with the 1.2.2 version)   regards Alex ... View more

@lychiang today I noticed that under Devices it shows for example 3 CSV files ready. When I expand the Device tree to see all devices managed by Panorama in Epxedition, none of the devices show any CSV files.  When I select the firewall device that has the 3 CSV files I do see them und M. Learning. Is this a Bug? i can't recall how it was on the old Expedition instance with 16.04   Cheers Alex ... View more

Hello @lychiang thank you for getting back to me and letting me know about it. Looking forward to the fix. Thank you and best regards Alex ... View more

Does that sound like a Bug in expedition or something else wrong with my installation?   Cheers Alex ... View more

@lychiang    Yes you are correct, of course I had to go to the actual device and not Panorama itself.   Regarding the Radius authentication, i got the following error from the log you mentioned: [Thu Oct 20 17:32:35.870372 2021] [:error] [pid 50121] [client CLIENT-IP:55677] PHP Fatal error: Uncaught Error: Call to undefined functio n radius_auth_open() in /var/www/html/userManager/API/auth/login.php:134\nStack trace:\n#0 /var/www/html/bin/Auth.php(168): login('username' , 'password')\n#1 {main}\n thrown in /var/www/html/userManager/API/auth/login.php on line 134, referer: https://expedition.hostname.com/   Thank you for your help and best regards   ... View more

Hi Everyone   We did a fresh install of Ubuntu 20.04 and Expedition with the new installer. For us there are two things not working - Radius Authentication  - ML Learning > Processing files   Details: - Radius Authentication: we can configure the Radius Server but doing a "test" will only show "error" nothing more. On our old Expedition Server we get a error message if the User was rejected or if auth was successful. - ML Learning > Processing files We see all the files under the Device (in our case the Panorama) but when we select a single file or multiple files. we cannot click/select the "Process Enabled Files" button We can toggle all or just single files between "Disable Files/Enable Files"   Are these still some open issues that will get addressed or is there something else wrong with this install and someone might be able to help here. Thank you and best regards Alex ... View more

Hello Dgildelaig   Quick question, how will I know when the installer is working for Ubuntu 20.04? Will you post a Update on here with an new link for this, or will the download link stay the same?   Thank you and best regards Alex ... View more

Hello Dgildelaig   This is great news, I will therefore hold off on further troubleshooting. Can't wait to deploy Expedition on Ubuntu 20.04 - Many customers will be happy their CISO can finally get rid of the 16.04 instance 😄     Thank you for your effort, much appreciated. Alex ... View more

HI  Dgildelaig   When will the installer be ready for Ubuntu 20.04? I got it somehow working with only 1 error message left. I am currently testing how well it works or if there are any show stoppers. Just wondering how much time one should spend on it, if a 20.04 installer is coming in a few days.   Regards Alex ... View more