Dynamic IP lists and FQDN?

JimMcGrady — Fri, 14 Sep 2018 02:44:33 GMT

The only type of external dynamic list i appear to be able to specify in my firewall policy is a dynamic IP list (not a dynamic domain list). And the formatting of such lists appears to be purely for IP addresses. So my question is, how can i specify fully qualified domain names in a dynamic list usable in a firewall policy?

Re: Dynamic IP lists and FQDN?

bvandivier — Fri, 14 Sep 2018 14:54:06 GMT

Hello Jim, I believe the following documentation should address your concerns.

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/external-dynamic-list.html

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/use-an-external-dynamic-list-in-policy

Note that EDLs support three types: IP Address, URL, and Domain

I believe in your situation you would want to use a URL type EDL in a security policy rule. Otherwise, a second option would be to create an address object group which contains multiple FQDN address objects.

topic Re: Dynamic IP lists and FQDN? in Advanced Threat Prevention Discussions

Dynamic IP lists and FQDN?

Re: Dynamic IP lists and FQDN?