The use of the Palo Alto Expedition OVA represents more than just a software install; it signifies a move toward automated security excellence
Go to the profile settings right away to change this password to a secure alternative. Troubleshooting Common Installation Issues
Palo Alto Networks has deprecated the standalone OVA for Expedition. The tool is now primarily installed via a script onto a clean installation of Ubuntu Server 20.04 LTS (or 16.04 for legacy versions) Current Installation Method
Before diving into the installation, it's worth understanding what makes Expedition such a valuable tool. Expedition is the fifth evolution of the Palo Alto Networks Migration Tool, designed to reduce the time and effort required to migrate configurations from third‑party vendors to Palo Alto Networks firewalls.
Even if you installed from a script, keep the tool current:
By default, the appliance attempts to pull an address via DHCP. It is standard best practice to configure a permanent static IP address for server infrastructure. Open the Netplan configuration file using the text editor: sudo nano /etc/netplan/01-netcfg.yaml Use code with caution.
After deployment completes, you must configure the operating system's network settings via the VMware virtual machine console. Powering On and Logging In
VMware ESXi 6.5 or later (compatible with vSphere 7.0 and 8.0). Network and Firewall Requirements
Are you planning to leverage the features for App-ID conversion?
This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later.
wget https://conversionupdates.paloaltonetworks.com/expedition1_Installer_latest.tgz ``` Use code with caution. Copied to clipboard
On the vSphere client, Alex hit Deploy OVF Template , selected the local OVA file, and gave the VM a name: Expedition-Migrator . Default compute, storage, and disk provisioning (thin was fine). Network? A VLAN with access to both the legacy devices and the new Panorama/firewalls. Power on.
Once the OVA file is sitting in your local downloads folder, you can deploy it directly to your VMware infrastructure.