WinSyslog

The Windows Syslog Server

WinSyslog

The Windows Syslog Server

Download 'link' Palo Alto Expedition Ova Install File

Modern versions of Palo Alto Networks Expedition (the replacement for the Migration Tool) are no longer primarily distributed as standalone OVA files. Instead, the standard practice is to install Ubuntu Server 20.04 LTS and then run an automated installer script. 1. Download Options

While a legacy OVA existed, current deployments should use the official script to ensure the latest security updates and features. Installer Script: Download from Palo Alto Updates.

Legacy OVA: If you specifically require an OVA for a lab environment, users sometimes share links on the LIVEcommunity forum, but these are often outdated. 2. Installation Steps (Modern Method)

Prepare the OS: Install a clean instance of Ubuntu Server 20.04 LTS (64-bit) on your hypervisor (ESXi, Workstation, or Fusion).

Download the Tool: Use wget or curl to pull the installer directly to your server:

wget https://conversionupdates.paloaltonetworks.com/expedition1_Installer_latest.tgz ``` Use code with caution. Copied to clipboard

Run the Installer: Extract the file and run the script as root: download palo alto expedition ova install

tar -xf expedition1_Installer_latest.tgz sudo ./install.sh ``` Use code with caution. Copied to clipboard

Initial Access: Once complete, access the Web UI via https://. Default Username: admin Default Password: paloalto 3. Minimum System Requirements

Ensure your virtual machine meets these specifications for stable performance: Feature Minimum Requirements Recommended (Machine Learning) CPU RAM 16 GB - 32 GB Storage 100 GB+ (SSD preferred) Expedition migration tool - LIVEcommunity - 998402

Palo Alto Networks has deprecated the standalone OVA for Expedition. The tool is now primarily installed via a script onto a clean installation of Ubuntu Server 20.04 LTS (or 16.04 for legacy versions) Current Installation Method

Instead of downloading a pre-built virtual machine (OVA), you must provision your own virtual environment and run the installer script: Deploy a Virtual Machine : Install a fresh instance of Ubuntu Server 20.04 LTS

(64-bit) on your hypervisor (ESXi, VMware Workstation, etc.). Download the Installer Modern versions of Palo Alto Networks Expedition (the

: Use the command line to fetch the installer script directly to your Ubuntu server:

wget https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz Execute the Script

: Extract and run the installer. The script will automatically download necessary dependencies like Apache, MariaDB, and the latest Expedition packages. Default Credentials

: Once installed, the default WebUI credentials are typically admin / paloalto Palo Alto Networks LIVEcommunity Important Support Notice Palo Alto Networks has announced the End of Life (EoL) for the Expedition tool. Support Status : Official support ended in January 2025 Security Recommendation

: Because the tool may contain unpatched vulnerabilities, it is recommended to run it in an isolated environment and not leave it connected to a production network. Future Alternatives

: Core migration functionalities are being transitioned into newer integrated product features. Palo Alto Networks LIVEcommunity Legacy OVA Access If You Need an OVA... - LIVEcommunity - 229596 Step 7 — Backup and snapshot

Step 7 — Backup and snapshot

  • Take a VM snapshot after initial configuration for quick rollback.
  • Export the VM or keep a backup copy of the OVA and configuration files.

Part 8: Next Steps – What to Do After Installation

With Expedition now installed, you can:

  1. Import a configuration from a legacy firewall (e.g., Cisco ASA show running-config or Check Point database).
  2. Run the migration wizard to convert access rules, NAT policies, and objects to PAN-OS syntax.
  3. Validate the migration using Expedition’s built-in rule analyzer and shadowing detection.
  4. Export the configuration as a CLI script or directly push to a Panorama or NGFW device.

Post-Installation Checklist

After successfully logging in, perform these final steps to ensure the system is ready:

  1. Update the Software: Navigate to the Operations tab in the Web UI and check for updates to ensure you have the latest migration libraries and security patches.
  2. Apply License: If you downloaded a license file, upload it via the License section to enable Expedition Enterprise features.
  3. Set Admin Passwords: Ensure you have changed both the OS-level admin password and the Web UI admin password from the defaults.

Step 3: Power On and Initial Configuration

Once the deployment is complete:

  1. Power on the newly created VM.
  2. Open the Console within the vSphere client.
  3. The VM will boot into the Linux OS. You will eventually see a login prompt.

📦 Example CLI Tool Output (User View)

$ palo-expedition deploy --latest

[✔] Logged into Palo Alto Support
[✔] Downloading Expedition-2.1.5.ova (2.1 GB)
[✔] SHA256 match confirmed
[✔] Detected VMware ESXi 7.0
[✔] Deploying OVA to datastore "datastore1"
[✔] VM "Expedition-2.1.5" powered on
[✔] IP address: 192.168.1.100


✅ Expedition ready: https://192.168.1.100
Username: admin
Password: (set during deployment)

Scroll to top