Expedition is accessed via a web browser, not the console.
on a machine that can reach that IP.
Ubuntu 20.04 LTS (64-bit AMD). Do not use Ubuntu 22.x , as it is currently unsupported by the installer.
The Expedition OVA is hosted officially on the Palo Alto Networks Customer Support Portal. Step-by-Step Download Instructions download palo alto expedition ova install
The tool can convert configurations from Check Point, Cisco, and most other major firewall vendors into PAN‑OS format. But Expedition goes far beyond simple "like‑for‑like" conversion. It also includes:
The system will immediately prompt you to change the default password. Enter a secure, unique password. Setting a Static IP Address
After successful installation, you'll see confirmation with access URLs. The default web interface is available at http://<your-vm-ip> . Expedition is accessed via a web browser, not the console
Once you have downloaded the .ova file, follow these steps to install it in your VMware ESXi environment: Open your vSphere Client.
Whether you are migrating hundreds of rules or optimizing existing Palo Alto policies, Expedition is an essential tool for security administrators. This article provides a comprehensive guide on how to , install it, and get started in 2026. What is Palo Alto Expedition?
Several community members have created unofficial OVA packages to simplify deployment. These are , but may be useful for lab environments or rapid testing. Do not use Ubuntu 22
Navigate to the extracted directory and run the installer:
After the VM powers on, you must perform initial network configuration via the VM console. Open the console of the Expedition VM in VMware. Log in with the default credentials: paloalto
Just remember: Expedition entered end‑of‑life in January 2025. For new projects, contact Palo Alto Networks to understand the current migration tooling landscape. For existing deployments, Expedition remains functional and useful — just ensure you have appropriate backups and avoid relying on it for mission‑critical ongoing operations without a support path.
From the console, run: