topic Re: Dynamic Block List Question. in General Topics

Dynamic Block List Question.

Apadilla — Thu, 04 Feb 2016 23:28:09 GMT

Hello Community,

Blacklist (such as IP Void or SpamHaus) with a suggestion that we should block that IP.

I'm hoping there's a way that we can leverage such a blacklist - for example, to have a rule in the FW that references an existing Blacklist (such as IP Void) and is able to dynamically update based upon the published list.

I know that the Palo Alto has a 'Dynamic Block List' option, but I"m not sure if there's a way to use that to make this work or not. Any insights or feedback you could provide would be appreciated.

Best Regards

Re: Dynamic Block List Question.

kiwi — Fri, 05 Feb 2016 08:58:04 GMT

Hi,

That is possible.

First create your DBL :

After that you can simply refer to the DBL object in your security policy :

Hope this helps,

-Kim.

Re: Dynamic Block List Question.

Raido_Rattameister — Fri, 05 Feb 2016 10:53:11 GMT

And rule action should not be Allow as it is on screenshot 🙂

Re: Dynamic Block List Question.

Apadilla — Fri, 05 Feb 2016 16:31:23 GMT

Kiwi,

Do you know if is possible to updating automatically this file ? I mean, if it is possible this information is comming from a thirth party or organization that publish a blacklist like as raimbow tables.

best regards