About dgildelaig

You could check to modify the Expedition Custom Parameters to increase it to over 1G (default value).   From the main view, go to Settings -> Custom Settings. There you will see that you can change the allowed RAM consumption by a process as well as the time that a process may require for the execution (migrations may take some time, and 10.000 secs may not be long enough in rare occasions) ... View more

Sure, you can combine both.   The idea is, as you have the whole configuration managed by panorama, you would create a project importing the Panorama configuration.  Make sure that you have declared the Panorama as a device in Expedition and that you link this Panorama to your project. Is using this Panorama that you will import the config into the project.   Declare a log connector in your project that uses the Panorama, the specific source you are checking (in case you have imported the Panorama configuration more than once, the device group that your firewalls hang from and, within the Device Group, select the firewalls that should have been seeing the traffic.   This is the "mapping" that we can do to relate security rules in a Panorama configuration with the traffic reported by the NGFW.   On the device list, you should still be able to pre-process the CSV traffic files that the NGFW are sending to your Expedition. ... View more

This usually happens when at booting, it discovers a corrupted partition and it can't proceed with the booting.   This seems to be an issue that has effected your Ubuntu machine. Have you recently powered off your ubuntu while working on it, or modified the partitions? https://askubuntu.com/questions/137655/boot-drops-to-a-initramfs-prompts-busybox ... View more

I would recommend that you check the documentation in how to perform a migration, because you may see how to bring a configuration into the tool and the options that you have to get a resulting PANOS configuration, either as an XML to bring to your device (offline) or via API calls (online).   But there are many other things that you may want to do before the output is generated, such as configuration cleanups. ... View more

Thanks for pointing out that the recommended dependencies were missing in the contextual menu ... View more

You can do your tasks as if you were going to push later the configuration into a PANOS device nd, instead, export the resulting Security Rules grid view in Excel.Notice that on the Security Rules view, there is a menu icon on the top right and has an option called Export to Excel.   Not sure if this is what you are looking for but if so, that is one way to export it instead of using the database backups that you referred to. Those are only useful within Expedition, as they have all the tables and relationships across the different identified objects.   We did not put efforts on doing other vendors config clean up that would allow a config export for other vendors. I mean, Expedition has not been prepared to generate Cisco ASA configurations as an output, so the Excel format is option I could point you to. Also notice that you may get your Cisco ASA configuration improved to use L7 rules, having converted some L4 services into L7 applications, as the goal of Expedition is to help you use the benefits of the PANOS platform. ... View more