Palo Alto Networks has officially announced the End of Life (EoL) for the Expedition migration tool as of January 2025. Consequently, direct downloads for pre-built OVA files are no longer officially supported or recommended, as the tool contains known vulnerabilities and should not be used on production networks.
If you still need to deploy it for a specific project, the current standard is to install it manually on a fresh Linux virtual machine rather than using an OVA. 1. Pre-Installation Requirements
Before beginning, ensure your host environment (such as VMware ESXi or Fusion) meets these minimum hardware specifications:
Operating System: Ubuntu Server 20.04 LTS (64-bit AMD). Do not use Ubuntu 22.x, as the installation script will fail. CPU: 4 Cores.
RAM: 8 GB minimum (16–32 GB recommended if using Machine Learning features).
Storage: 40 GB minimum (SSD is recommended for better performance with large projects).
Network: 1 NIC with internet access to download dependencies. 2. Installation Steps
Since an official OVA is not provided, follow this procedure on your Ubuntu 20.04 VM:
Download the Installer: Use wget to pull the latest installer package directly to your VM's /tmp directory:sudo wget https://conversionupdates.paloaltonetworks.com/expedition1_Installer_latest.tgz.
Extract the Files: Navigate to the folder and unpack the archive:tar -zxvf expedition1_Installer_latest.tgz.
Run the Setup Script: Make the setup script executable and run it to install the application and its dependencies (MariaDB, Apache, etc.): chmod 755 initSetup_*.sh sudo ./initSetup_*.sh.
Access the Web Interface: Once the script completes, identify your VM's IP address (using ifconfig) and log in via a browser at https://[VM_IP_ADDRESS]. Default Credentials: expedition / paloalto. 3. Critical Security Notice
Due to its EoL status, Palo Alto Networks is transitioning migration features into other products. If you are performing a new migration, consider checking for updated tools on the Palo Alto Networks Customer Support Portal or referring to the Expedition Article Section for the latest community-supported hotfixes.
If you are looking to set up the Palo Alto Networks Expedition Migration Tool, it is important to note that the software is no longer distributed as a standalone OVA file for direct import into VMware. Instead, the modern installation method involves provisioning a base Ubuntu Server and running a specialized installer script. Key Prerequisites download palo alto expedition ova install
Operating System: Ubuntu Server 20.04 LTS (64-bit AMD) is the currently supported platform for Expedition 1.x.
Hardware Resources: At least 8GB of RAM and 40GB of disk space are recommended for basic migrations.
Connectivity: The server must have internet access to download dependencies like MariaDB, Apache, and RabbitMQ during the installation process. Step-by-Step Installation Guide 1. Prepare the Base VM
Since a pre-built OVA is unavailable, you must first create a virtual machine manually: Download the Ubuntu 20.04 LTS ISO from the official site.
Create a new VM in your hypervisor (VMware, VirtualBox, etc.) using the downloaded ISO.
During setup, create a user named expedition with the password paloalto (this is the community standard for troubleshooting simplicity). 2. Download and Run the Installer Script
Once your Ubuntu server is running and you have SSH access, use the following commands to install the tool:
# Navigate to the temporary directory cd /tmp # Download the latest installer script sudo wget https://conversionupdates.paloaltonetworks.com/expedition1_Installer_latest.tgz # Extract and run the installer tar -zxvf expedition1_Installer_latest.tgz sudo ./initSetup.sh Use code with caution. Copied to clipboard
The script will automatically handle the installation of the web server and database components. 3. Access the Expedition Web Interface
After the script finishes, you can access the tool via your web browser: URL: https:// Default Credentials: Username: admin Password: paloalto Important: Support and Security Status
End of Life: Palo Alto Networks officially ended support for Expedition in January 2025.
Security Risk: Because the tool is no longer receiving security patches, it should only be used in a secure, isolated management network and never exposed to the public internet. Expedition Installation Guide - Palo Alto Networks
Palo Alto Networks has deprecated the standalone OVA Expedition Palo Alto Networks has officially announced the End
. The modern installation method requires deploying a fresh Ubuntu 20.04 LTS Server (64-bit AMD) and running a dedicated installer script. 1. System Requirements
Before installation, ensure your virtual machine meets the following minimum specifications: CPU: 4 Cores.
RAM: 8 GB (16 GB or more is recommended for Machine Learning features). Storage: 40 GB. OS: Ubuntu Server 20.04 LTS (AMD64). 2. Prepare the Ubuntu Server
Download the Ubuntu 20.04 LTS ISO from the official Ubuntu site.
Install the OS on your hypervisor (VMware, VirtualBox, etc.).
Ensure the server has internet access to download necessary dependencies.
Log in to the console (default credentials if using a pre-built base image are often expedition/paloalto). 3. Download and Run the Installer Script
The installer automates the setup of MariaDB, Apache, and required Java components. Download the script:
wget https://conversionupdates.paloaltonetworks.com/expeditionInstaller.tgz ``` Use code with caution. Copied to clipboard Extract the files: tar -zxvf expeditionInstaller.tgz Use code with caution. Copied to clipboard Make the script executable: chmod +55 initSetup.sh ``` Use code with caution. Copied to clipboard Execute the installer:
sudo ./initSetup.sh ``` *The script will prompt for passwords for MariaDB and other services. Follow the on-screen instructions.* Use code with caution. Copied to clipboard 4. Access the Web Interface
Once the script completes, you can access the Expedition dashboard via a web browser: URL: https://. Default Credentials: Username: admin Password: paloalto.
For further guidance, consult the Expedition Documentation on the Palo Alto LIVEcommunity.
Getting Started with Palo Alto Expedition: A Complete Download and Installation Guide 🧩 Feature Enhancement Ideas (If Building Into a
Palo Alto Networks Expedition is the powerful successor to the original migration tool, designed to streamline the transition of complex firewall configurations from vendors like Cisco and Check Point into PAN-OS. While many users search for a direct OVA file for a quick virtual machine (VM) deployment, current official methods prioritize a manual installation on Ubuntu Server to ensure greater flexibility and security.
This guide covers everything you need to know about downloading the necessary components and getting your Expedition instance up and running. 1. Prerequisites and System Requirements
Before beginning the installation, ensure your environment meets the minimum standards to support the tool's machine learning and parsing capabilities.
Operating System: Ubuntu Server 20.04 LTS (64-bit) is the officially supported platform for Expedition 1.x.
Hypervisor: You will need a virtualization platform like VMware Workstation, Fusion, or ESXi. Compute Resources:
RAM: At least 8GB (more is recommended for large log analysis). CPU: 2 to 4 vCPUs.
Storage: 50GB minimum; using an SSD is highly recommended for faster database processing. 2. Step 1: Download the Base Image (ISO)
Since Palo Alto Networks has largely moved away from providing a pre-packaged OVA for Expedition, you must start by setting up a clean Ubuntu environment.
Visit the Official Ubuntu Download Page and select Option 2: Manual Server Installation. Download the Ubuntu 20.04 LTS server image (amd64 ISO).
In your hypervisor (e.g., VMware), create a new VM and mount the downloaded ISO to begin the OS installation.
Note: During the Ubuntu setup, create a user named expedition for easier management. 3. Step 2: Download and Run the Expedition Installer
Once your Ubuntu server is online and has internet access, you can download the automated installer script. Expedition | Palo Alto Networks - LIVEcommunity
| Feature | Description | |---------|-------------| | One-click download | Embed secure session to fetch OVA directly | | Auto-deploy | Detect hypervisor and deploy with default settings | | Health check | After boot, validate all services (MongoDB, Redis, Celery) | | Snapshot & backup | Create initial clean snapshot after setup | | Version rollback | Download and deploy older Expedition versions |
ip addr show in the console.nmtui (Network Manager Text UI) command in the console.https://<Expedition-IP-Address>adminpaloalto