Before clicking any download links, it’s crucial to understand what you are deploying. Expedition is a free, community-supported tool provided by Palo Alto Networks. It is a that runs as a virtual appliance.
The deployment takes 1-2 minutes. Once complete, power on the virtual machine.
The modern way to get Expedition is to download the installer script directly to a fresh Ubuntu 20.04 instance using this Expedition Installer Link OVA Workaround download palo alto expedition ova
Once the installation completes, open a web browser and navigate to http://<your-server-ip> . Default credentials are typically admin / paloalto (or admin / Ignite19 ), depending on the version.
After the initial import, remember to change the default credentials (usually admin / paloalto ) immediately. Before clicking any download links, it’s crucial to
Immediately after login, navigate to or click on your avatar in the top right. Change the default password. Expedition holds sensitive firewall configurations, so secure it.
Since a direct OVA is no longer the standard, follow these steps to install the tool: Deploy Ubuntu: Install a clean instance of Ubuntu 20.04 LTS Download Installer: Fetch the latest installer script from the Palo Alto Networks Conversion Updates Execute Script: The deployment takes 1-2 minutes
Here is the exact process as of 2025:
Palo Alto Networks hosts all official migration tools on their secure support ecosystem. Follow these exact steps to find the official, untampered OVA file. Step 1: Log in to the Customer Support Portal
Palo Alto Networks Expedition is the evolution of the Migration Tool. It helps security administrators accelerate the migration of configuration from legacy firewalls to Next-Generation Firewalls. By using Expedition, you can convert configuration files from vendors like Cisco, Check Point, and Fortinet into PAN-OS compliant configurations.
In the world of network security, the tool is a legendary "fourth evolution" of the company's migration software. It was built to bridge the gap for engineers moving from legacy firewalls like Cisco or Checkpoint to the more advanced PAN-OS.