About rkoenig

Sorry this may be cross posting but as of June 8th we successfully installed Expedition in Azure using the manual method of standing up an Ubuntu Server from the Azure store and following some guidance from the following post/articles https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/tac-p/332467#M226 https://live.paloaltonetworks.com/t5/expedition-articles/new-expedition-installation-procedure/ta-p/... https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz When we attempted to run the script we were prompted to " to create the 'expedition' user via adduser" once we created the user we re-started the script and it completed. Upon completing this process as described in: https://live.paloaltonetworks.com/t5/expedition-articles/new-expedition-installation-procedure/ta-p/... we attempted to access the URL and ran into an Apache error as described in another post, we then used the following commands sudo apt-get update sudo apt-get install expedition-beta sudo bash /var/www/html/OS/BPA/updateBPA306.sh after the updates we were able to get to the URL and login, now I just want to have our server/azure admin take a snapshot before I go about hardening the system in case I hose things up. Thanks to everyone who shared their issues and going through the trials and tribulations so that we could succeed.  LOL. ... View more

Greetings, I just wanted to add that we used the following process as mentioned in several individual posts above. Downloaded the script, unpacked the files as stated in the Expedition_Installer_July_2019 PDF https://live.paloaltonetworks.com/t5/expedition-articles/new-expedition-installation-procedure/ta-p/275276?attachment-id=8128 https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz Upon completing this process we attempted to access the URL and ran into an Apache error as described in another post, then we used the following commands (after creating a security policy on the firewall to allow the traffic)   sudo apt-get update sudo apt-get install expedition-beta sudo bash /var/www/html/OS/BPA/updateBPA306.sh after the updates we were able to get to the URL and login, now I just want to have our server/azure admin take a snapshot before I got about hardening the system in case I hose things up. Thanks to everyone who shared their issues and going through the trials and tribulations so that we could succeed.  LOL. ... View more

We have a similar policy like that, acces to online storage is denied through our default Internet URL policy. We have another policy that allows access to online storage if you are a member of a specific AD group. We also have a "read-only" policy that allows everyone access to the approved applications within online storage category and underneath the read-only policy is another policy that denies upload via app ID. I know that theorhetically we do not need the extra policy denying upload but I think it adds an extra layer of security. Hope that makes sense.  ... View more

Hmmm I thought you could choose ANY in Filetypes, Im assuming that even when you do choose ANY it still doesnt work?  ... View more

Thanks guys, cant believe it's been two years since I last checked up on this post.  I will have to check up on the policy to see if we still have unkown-tcp traffic hitting the policy. ... View more