topic Re: EBL during upgrading a PAN from 6.1.10 to 7.1.5 in General Topics

EBL during upgrading a PAN from 6.1.10 to 7.1.5

Nitish05 — Wed, 16 Nov 2016 20:37:43 GMT

We are planning a have an version upgrade on PA firewall from 6.1.10 to 7.1.5 and the firewall is using the EBL, want to get any confirmation if the upgrade gonna impact the EBL in any way. Thanks

Re: EBL during upgrading a PAN from 6.1.10 to 7.1.5

DonohoeRobert — Wed, 16 Nov 2016 22:17:29 GMT

Hi Nitish,

Hope you are well. The upgrade will not impact the EBL in anyway. If any trouble observed raise a support case with you ASC.

best regards,

robert D

Re: EBL during upgrading a PAN from 6.1.10 to 7.1.5

Nitish05 — Wed, 16 Nov 2016 22:28:23 GMT

Hi Robert,

Thanks alot, any how will confirm once i am gone through that.

Thanks

Re: EBL during upgrading a PAN from 6.1.10 to 7.1.5

DonohoeRobert — Thu, 17 Nov 2016 07:51:48 GMT

Hi Nitish,

There is a nice article runs through EBL's here and includes cli command for checking the EBL once configured.

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Dynamic-Block-List-DBL-or-External-Block-List/ta-p/53414

{>request system external-list show name example-list}

double checked the command on 7.1.5 and still valid, so try that after the upgrade.

If any hassle with it contact your support provider. Can't forsee any issues however.

Best regards

Robert D

Re: EBL during upgrading a PAN from 6.1.10 to 7.1.5

TranceforLife — Thu, 17 Nov 2016 10:02:04 GMT

Hi,

EBL is essentially a list of the websites/IP addresses. So after upgrade just confirm your firewall can still connect to the EBL site and still can refresh/see these ip on the box:

https://live.paloaltonetworks.com/t5/Learning-Articles/Working-with-External-Block-List-EBL-Formats-and-Limitations/ta-p/58795

Re: EBL during upgrading a PAN from 6.1.10 to 7.1.5

OtakarKlier — Thu, 17 Nov 2016 22:17:49 GMT

I agree with those above. I have EBL's and performed a similar upgrade and everything was good with the EBL's.