topic Strangeness with EDL - for Office 365 in General Topics

Strangeness with EDL - for Office 365

Alex_Samad — Sun, 09 Dec 2018 23:10:09 GMT

I have minemeld mining O365 address for my PA's. Moved to the new API as well.

I have a hybrid Exchange setup.

I have moved some mailboxes up to the cloud

What I have found recently is mail stops flowing

I have a rule that basically say

MS Public IPv4 to my beachhead port 25 smtp

O365 attempts to talk to me and gets blocked.

I check the src address and its in the EDL range.

If I clone the rule and place it below it and then commit and push (from panorama)

once the push has finished it starts to work . same src ip and it matches the original policy.

almost like there is a TTL on the edl ip addresses

Now I have the EDL set to refresh at 6am. guessing I can change that to every hour ?

Any one else had issues

BPry — Mon, 10 Dec 2018 03:49:38 GMT

What's the target firewall and what PAN-OS version is it running?

Alex_Samad — Mon, 10 Dec 2018 04:06:02 GMT

pa-5220

8.0.12

I have done a

resquest system to look at the EDL - and the right ip address range is there

I have done a test and it matches against the right policy.

and the way I have been fixingin it recently is to do a

request system refresh on the edl