topic Re: EDL in Panorama in Panorama Discussions

EDL in Panorama

MGMGMG — Fri, 23 Dec 2022 08:22:56 GMT

Hi all,

i've configured a couple of EDL in Panorama as shared list and pushed to all the devices.

No problem at this point.

Now,if i check the accessibility of the URL is normally available

But if i try to list all the domains ,the output is always 0 entries.

the test source URL is successfull from both Panorama and local device.

I tried to connect to local device trough Panorama and trough his own MGMT IP and result is the same.

I've to say that i not still configured EDL in any policy,so is possible that is working anyway(altough i don't believe).

Any tips?

TIA,

Re: EDL in Panorama

Arnesh — Fri, 23 Dec 2022 10:00:05 GMT

Hi @MGMGMG

You are right to think that the EDL should be called in a security policy for the IPs/Domains to the reflected. The idea behind is that the firewall does not fetch the EDL information which are not being referenced in a policy on firewall.

This is a similar post. Also, this KB can be helpful.

Regards,

Re: EDL in Panorama

MGMGMG — Fri, 23 Dec 2022 10:17:51 GMT

Hi Arnesh,

many thanks for your answer.

Just one more advise,i configured an iplist.txt and a domainlist.txt both as URL list,is this best practice or better configure them as IP list and DOMAIN list respectively?

TIA,

Re: EDL in Panorama

Arnesh — Fri, 23 Dec 2022 10:44:14 GMT

Hi MG,

We need to make sure that the an external dynamic list of one type —IP address, URL or Domain—must include entries of that type only. Please refer Formatting Guidelines for an External Dynamic List

Regards,

Re: EDL in Panorama

MGMGMG — Fri, 23 Dec 2022 13:06:19 GMT

Hi there,

again thanks for your reply.

Checked the link and found that domain ending in .txt has to be URL.

Solved!

Thanks,