Downloading the Palo Alto Expedition OVA allows for a streamlined, automated migration process. Despite the upcoming end of support in January 2025, the tool remains a powerful resource for organizations migrating to Palo Alto Networks PAN-OS. Always use the official LIVEcommunity resources to ensure you have the correct version.

For a more security-focused or controversial angle, there was a significant security incident involving the Expedition OVA in late 2023/early 2024.

Since Expedition is no longer receiving security patches or feature updates for newer PAN-OS versions, Palo Alto Networks recommends transitioning to:

: Certain cleanup and optimization features previously in Expedition will be available in SCM for configurations managed there.

: Use the search functionality on the website to find "Palo Alto Expedition."

Run the installer on your Ubuntu server to pull the necessary packages and dependencies.

Use wget to download the latest .deb file. For version 1.2.102 , the command would be (check for the latest version on the Release Notes page ):

A: Palo Alto Networks no longer offers an official OVA file for Expedition. The recommended installation method uses the installation script on Ubuntu 20.04 LTS.

Download Palo Alto Expedition OVA: A Comprehensive Guide to Migration Automation

To obtain the official Expedition OVA file for migration and network assessment.

As of my knowledge (last updated May 2025), Palo Alto Networks is a migration tool that helps convert firewall configurations from other vendors (like Cisco, Check Point, Fortinet) to Palo Alto Networks format.

A: No. The installation script only supports Ubuntu 20.04 LTS. Attempting installation on Ubuntu 22.x will fail.

: https://support.paloaltonetworks.com

: 1 Virtual Network Interface Card (vNIC) with access to your management network. 4. Deploying the OVA in VMware ESXi

: Keep detailed records of what configurations you migrate, when, and what changes were made during the process.

Palo Alto Networks originally designed Expedition as a Best Practice Assessment (BPA) and configuration conversion workspace. It accelerates the process of migrating complex rulebases from legacy vendors—such as Check Point, Cisco, and Fortinet—into PAN-OS configurations.