topic Re: Dynamic block lists - possible xml config corruption in General Topics https://live.paloaltonetworks.com/t5/general-topics/dynamic-block-lists-possible-xml-config-corruption/m-p/41653#M30637 <HTML><HEAD></HEAD><BODY><P>That is certainly not the expected behavior!&nbsp; If you are able to reproduce this (or if anyone else has run into the same issue), please do open a case with Support so that we can properly troubleshoot the issue and determine what the issue is.</P><P></P><P>Thanks,</P><P>Doris</P></BODY></HTML> Fri, 30 Nov 2012 20:41:54 GMT dyang 2012-11-30T20:41:54Z Dynamic block lists - possible xml config corruption https://live.paloaltonetworks.com/t5/general-topics/dynamic-block-lists-possible-xml-config-corruption/m-p/41652#M30636 <HTML><HEAD></HEAD><BODY><P>We recently upgraded to 5.0 and one of the first things I wanted to try out was the dynamic block lists.&nbsp; I set up 4 block lists (dshield, zeus tracker, palevo tracker, spyeye tracker) and tested to make sure the URLs were accessible.&nbsp; I rec'd the message that they were accessible/readable, so I set them to pull data daily at 7:00am, 7:01am, 7:02am, and 7:03am.&nbsp; It turns out the files weren't in the correct format so we got the message that no valid IPs were found (or something like that).&nbsp; At 7:00:59am the firewall started to go a bit haywire.&nbsp; DHCP would not traverse the firewall, VPN connections kept dropping, and we kept getting logged off the firewall web interface.&nbsp; It turns out the config file got corrupt (apparently due to the block lists).&nbsp; In a rush to get the firewall back inline, we were not able to save the config file at the time to review it.&nbsp; What fixed it was downgrading and upgrading again.</P><P></P><P>My question is - has anyone else run in to issues due to the dynamic block lists?&nbsp; </P><P></P><P>I'm wondering if this was just a fluke thing or if there are issues with the block lists.</P><P></P><P>Future plans include making sure the block lists we use are in the proper format.</P></BODY></HTML> Fri, 30 Nov 2012 14:51:41 GMT https://live.paloaltonetworks.com/t5/general-topics/dynamic-block-lists-possible-xml-config-corruption/m-p/41652#M30636 sconley 2012-11-30T14:51:41Z Re: Dynamic block lists - possible xml config corruption https://live.paloaltonetworks.com/t5/general-topics/dynamic-block-lists-possible-xml-config-corruption/m-p/41653#M30637 <HTML><HEAD></HEAD><BODY><P>That is certainly not the expected behavior!&nbsp; If you are able to reproduce this (or if anyone else has run into the same issue), please do open a case with Support so that we can properly troubleshoot the issue and determine what the issue is.</P><P></P><P>Thanks,</P><P>Doris</P></BODY></HTML> Fri, 30 Nov 2012 20:41:54 GMT https://live.paloaltonetworks.com/t5/general-topics/dynamic-block-lists-possible-xml-config-corruption/m-p/41653#M30637 dyang 2012-11-30T20:41:54Z Re: Dynamic block lists - possible xml config corruption https://live.paloaltonetworks.com/t5/general-topics/dynamic-block-lists-possible-xml-config-corruption/m-p/41654#M30638 <HTML><HEAD></HEAD><BODY><P>I've currently got a ticket open with our support provider to see if we can find anything.</P></BODY></HTML> Fri, 30 Nov 2012 21:06:08 GMT https://live.paloaltonetworks.com/t5/general-topics/dynamic-block-lists-possible-xml-config-corruption/m-p/41654#M30638 sconley 2012-11-30T21:06:08Z