topic EDLs in General Topics

EDLs

SThatipelly — Thu, 22 Mar 2018 20:33:17 GMT

Can we group EDLs?

Once the url is fetched and content is read by the firewall and later the url is deleted, does firewall keep the cache of contents?

can firewall detect redundant entries?

Re: EDLs

BPry — Fri, 23 Mar 2018 14:44:07 GMT

@SThatipelly,

"Can we group EDLs?"

You can't really create a EDL 'group' like you can with addresses or services to the best of my knowledge. You can however utilize MineMeld to combine multiple different Lists into a single output for your firewall. If you are doing anything with EDLs I highly recommend you setup MineMeld.

"Once the url is fetched and content is read by the firewall and later the url is deleted, does firewall keep the cache of contents?"

The firewall will update its EDL content as often as you've configured as part of the setup process. Whatever your 'Repeat' interval is set to is how often the firewall will update the EDL entries. If your interval is setup Hourly and you delete an entry 38 minutes after the last refresh, the entry will still be present on the firewall until it refreshes in 22 minutes.

"can firewall detect redundant entries"

No. If you send it through MineMeld you can trim out duplicate entries or "merge" multiple different EDLs into one list that will trim out any duplicates that it catches and combine multiple addresses into an address range where applicable. By itself the firewall will simply read whatever is in the list you're feeding it.

Re: EDLs

SThatipelly — Fri, 23 Mar 2018 14:46:56 GMT

Thank you so much BPry.What if the whole list/url is deleted?will firewall delete all the entries after a referesh?

Can you please provide me any docs for setting up/using minemeld?

Re: EDLs

kiwi — Fri, 23 Mar 2018 14:55:57 GMT

Hi @SThatipelly,

Anything you need to help get you started with MineMeld should be available at the MineMeld portal located here :

MineMeld

Cheers !

-Kiwi.

Re: EDLs

BPry — Fri, 23 Mar 2018 14:56:18 GMT

@SThatipelly,

So that can depend on what exactly happens. If the firewall can still reach the link to check the EDL and it's simply empty, the firewall will delete all entries. If the firewall can't reach the EDL because it was trully removed, it will consider the EDL host to be offline and continue to utilize the cache entry until the EDL is removed from the firewall.