topic Re: Query External Dynamic List Content in Automation/API Discussions

Query External Dynamic List Content

rmfalconer — Tue, 13 Jun 2017 22:35:29 GMT

If I have a list of IP addresses, is there a way to query a PA to see if the listed IP addresses are contained within an EDL? This would be a large list, several hundred, so automating this would be the most practical way.

Re: Query External Dynamic List Content

btorresgil — Thu, 22 Jun 2017 22:16:45 GMT

Hello,

You can query an EDL for its contents using an operational command via API.

Documentation on using operational commands via API:

https://www.paloaltonetworks.com/documentation/80/pan-os/xml-api/pan-os-xml-api-request-types/run-operational-mode-commands-api

The operational command you would pass as the 'cmd' parameter in the API call is:

PAN-OS 8.0 has a bug where that API call only returns the first entry in the EDL. This is being worked on now, and I'll post here which version contains the fix.

Re: Query External Dynamic List Content

JasonKC — Fri, 07 Jun 2019 20:23:36 GMT

Do you know what version(s) this was fixed in?

Edit:

Not sure where it was first fixed but it's fixed in 8.1.7 at least.