topic Re: External Palo Alto Dynamic List in General Topics

External Palo Alto Dynamic List

RanjithDass — Sun, 19 Nov 2017 08:58:27 GMT

Hi Team

Have a PA220 licensed for Wild fire, Threat prevention, and PANDB URL filtering .

Though I had configured the External Dynamic List based on the best practice, I could not get the default PaloAlto Dynamic IP lists feed : Palo Alto Networks - High-risk IP addresses and the Known malicious IP addresses showing up

Could someone please guide me on how to configure the prefined Palo Alto list ?

Thanks

Re: External Palo Alto Dynamic List

BenLassila — Sun, 19 Nov 2017 18:56:04 GMT

Palo Alto Networks - High risk IP addresses and

Palo Alto Networks - Known malicious IP addresses

are selectable as source address or destination address in your security rules without any other prior configuration.

You can view them as Predefined in Objects > External Dynamic Lists if you wish

Hope that helps

Kind regards

Re: External Palo Alto Dynamic List

RanjithDass — Mon, 20 Nov 2017 00:51:43 GMT

Thanks for the reply.

Those two lists are not showing up under Dynamic list. I too thought that after syncing with the license and other updates, I should be able to see those default list under External Dynamic list but it is not.

Is it possible to create them manually?

Regards

Re: External Palo Alto Dynamic List

BPry — Mon, 20 Nov 2017 13:37:50 GMT

@RanjithDass,

I'm going to guess that you are not running 8.0.* at all?

Re: External Palo Alto Dynamic List

RanjithDass — Mon, 20 Nov 2017 17:42:45 GMT

Thanks Bpry for the reply .

It is a brand new PA220 and running on 8.0.6.

Regards

Re: External Palo Alto Dynamic List

BPry — Mon, 20 Nov 2017 17:48:25 GMT

@RanjithDass,

Well that is really weird, as it should have them included without you having to manually create them. That being said, if you do the following you should be able to create them manually.

1) Create a new External Dynamic Lists entry and under Type, switch it to Predefined IP List.

2) Under Source you'll have two options High risk IP addresses, and Known malicious IP addresses.

Re: External Palo Alto Dynamic List

RanjithDass — Mon, 20 Nov 2017 18:16:20 GMT

Thanks again --I know 😞

My license License part

I can create new EDL list but the default ones are not showing up

the drop down options not showing up

Not sure why the default ones were not showing up

Regards

Re: External Palo Alto Dynamic List

BPry — Mon, 20 Nov 2017 20:29:13 GMT

@RanjithDass,

I would contact TAC or reinstall the OS at this point. These lists should be populating perfectly fine.

Re: External Palo Alto Dynamic List

RanjithDass — Mon, 20 Nov 2017 21:32:33 GMT

Thanks again for the reply .

There should be some steps on how to add it since i have tried a factory reset and built it from the scratch so definitely, a setup issue somewhere

Regards

Re: External Palo Alto Dynamic List

RanjithDass — Thu, 23 Nov 2017 00:27:08 GMT

The default list is not appearing because the PA is not having the Antivirus installed . To get this please run the following command using the CLI.

"request url-filtering download status vendor paloaltonetworks "

Go to Devices\Dynamic Updates and do " check now "

The PA will download the Antivirus -install the same

Viola --- the default Dynamic IP list appears under Objects/External Dynamic List ... 🙂

Regards

Re: External Palo Alto Dynamic List

AndresAlfaro — Fri, 29 Apr 2022 21:25:34 GMT

I found this article where it specifies that for the Dynamic Lists to appear you must install the antivirus.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PM0pCAG