topic Re: Help: how to use dynamic block list in General Topics

Help: how to use dynamic block list

dat.tran — Mon, 25 Feb 2013 07:49:28 GMT

Hi all.

I want use " Dynamic Block List" to block some IP.

I creat a IP list on a local web servers

But I can't import list in to Palo Alto?

Something wrong?

Pls help me.

Thanks

UhMayYeah — Mon, 25 Feb 2013 13:30:53 GMT

Does the "Test Source URL " succeed?

Has this DBL been used in a security rule as an Address-Object?

If Yes,Do you see any error messages?

-Ameya

dat.tran — Tue, 26 Feb 2013 08:50:37 GMT

Does the "Test Source URL " succeed?

>> yes, PA say "Source URL is accessible."

Has this DBL been used in a security rule as an Address-Object?

>>already

when i commit, all computer in zone can't access internet.

i Don't understand why. may be PA don't understand file txt?

UhMayYeah — Tue, 26 Feb 2013 22:21:19 GMT

Can you try configuring the rules without using the 'negate' feature.

As a quick test,create explicit rules to deny traffic from/to the dynamic block-list and allow the rest of traffic.

-Ameya

dat.tran — Wed, 27 Feb 2013 01:38:14 GMT

thanks you, it's ok.

i change file txt and chang server, now it 's ok.