topic Re: External Dynamic List error in General Topics

External Dynamic List error

Laurent_Dormond — Tue, 15 Mar 2022 09:08:05 GMT

Hello,

I have configured External Dynamic Lists by using Minemeld a few month ago. It was workinf fine.

The lists are available (tried from a web Browser)

I noticed that I have following system logs for a few weeks :

Unable to fetch external dynamic list. Failure when receiving data from the peer. Using old copy for refresh.

We are running PanOS 10.0.7.

How can I troubleshoot this problem ?

Regards,

Laurent

Re: External Dynamic List error

Mudhireddy — Tue, 15 Mar 2022 09:45:40 GMT

Can you try to test Minemeld URL from WebUI of the firewall?

you can also try from CLI command >request system external-list stats IP name "<<name of EDL>>."

If the test fails, you have to troubleshoot the route reachability from the firewall.

Resolution: Traffic from this source either needs to be allowed via a security policy, or the service route needs to be changed to "Use default." If the latter solution is implemented, this traffic will not appear in the traffic logs (management plane traffic is not logged.)

find the URL https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UH2CAM&lang=en_US%E2%80%A9

Re: External Dynamic List error

Laurent_Dormond — Wed, 16 Mar 2022 07:36:20 GMT

Hello,

Thanks for your help.

When I test the EDL from the WebUI by clicking Test Source URL I got "Source URL is accessible."

When using CLI : "Server error : entry not found"

When I use "show" CLI command :

> request system external-list show type ip name EDL-Test_IP

EDL-Test_IP
EDL is either not referenced in policy, not downloaded, or empty

Total valid entries : 1
Total ignored entries : 0
Total invalid entries : 0
Total displayed entries : 1
Valid ips:
0.0.0.0/32

However the EDL is used by a policy.

Minemeld server hosting the lists is directly reachable from the mgmt interface of the FW device.

Re: External Dynamic List error

echahine — Mon, 11 Apr 2022 09:23:21 GMT

Hi, were you able to fix the issue?