topic Verify EDL is working after applying a Certificate Profile to the list in General Topics

Verify EDL is working after applying a Certificate Profile to the list

1treelanedrv — Wed, 07 Aug 2024 22:06:16 GMT

I have EDLs configured and applied to security policies. The List Entires is populated.

Since I get warnings about no certificate, I am configuring a certificate profile to apply to each of these EDLs.

Warning message in Commit log:

"External Dynamic List Microsoft Worldwide Required Skype and Teams IPv4 is configured with no certificate profile. Please select a certificate profile for performing server certificate validation."

My question is: how do I verify the list is still functional after pushing the certificate profile?

I think there are two ways:

1) Login to firewall GUI

Objects > External Dynamic Lists
select "Microsoft Worldwide Required Skype and Teams IPv4" > Import Now

view Tasks and view the last Commit All. Ensure the respective certificate warning has cleared.

2) Login to firewall CLI

request system external-list show type ip name "Microsoft Worldwide Required Skype and Teams IPv4"

show jobs all
copy last EDLRefresh ID #
show jobs id #
examine output for success without errors.

Any thoughts on this verification or is there something else to do?

Re: Verify EDL is working after applying a Certificate Profile to the list

aleksandar.astardzhiev — Fri, 09 Aug 2024 13:37:21 GMT

Hi @1treelanedrv ,

I believe EDL is refresh at the end of each Commit. So when you appl the certificate profile and commit that change.

You can go to the CLI or the Tasks window and review if there is any failed EDL refresh task

Re: Verify EDL is working after applying a Certificate Profile to the list

1treelanedrv — Wed, 28 Aug 2024 19:15:19 GMT

Deployed the changes and the Commit no longer shows the warnings. Then we went back firewall to view the EDLs and verified the List Entries were populated. Select any entry and click Test Source URL. Success!