A: Palo Alto Networks no longer offers an official OVA file for Expedition. The recommended installation method uses the installation script on Ubuntu 20.04 LTS.
Expedition is free, powerful, and supported by a vibrant community. Do not fear the migration—download the OVA today and take control of your network security posture.
Since a direct OVA download is often deprecated, building it from a fresh Ubuntu VM is the most reliable path: Expedition | Palo Alto Networks - LIVEcommunity download palo alto expedition ova
Expedition includes powerful capabilities that go beyond basic configuration migration:
: Unofficial dockerized versions of Expedition are available on platforms like GitHub (e.g., doctorruin/expedition-palo_alto ), but users should be aware these are not official releases. A: Palo Alto Networks no longer offers an
First, ensure your system is up-to-date.
Expedition is a community-supported tool. The official Palo Alto Networks Technical Assistance Center (TAC) does not provide support for it. For help, you should post your questions in the Expedition discussions forum or contact the Expedition team directly via fwmigrate@paloaltonetworks.com . Do not fear the migration—download the OVA today
Despite its historical utility, the landscape of Palo Alto migration tools has shifted. As of , Palo Alto Networks officially reached the End-of-Life (EOL) for the Expedition tool. Support for all versions, including Expedition1 and Expedition2, ceased in early 2025. Consequently, the official "download" of the OVA is no longer the recommended path for active production environments. The Future: Strata Cloud Manager
: Open the vSphere Client or ESXi host interface.
: Deploy Expedition on its own dedicated virtual machine with resources allocated according to your intended usage pattern.
: Machine learning agents read traffic logs to convert legacy port-based rules into secure, application-based policies.