topic Re: Refresh EDL from webserver in General Topics

Refresh EDL from webserver

Rodrigobe — Wed, 05 Jun 2019 18:59:31 GMT

Hello community,

We are using EDL for manually blacklist and whitelist some domains. We configured all our firewalls to refresh the EDLs every 5 minutes, but EDLs don't refresh until a couple hours. The solution that we found is use the "import now" button, doing that the EDLs refreshes. Is there any log we can search to see why the EDLs doesn't refresh? Is this a known issue? Thanks!

Using PANOS 8.1.7

Re: Refresh EDL from webserver

MP18 — Thu, 06 Jun 2019 03:27:52 GMT

check the system logs

also check the task manager for the verification or by running below command

show jobs all

Re: Refresh EDL from webserver

BPry — Thu, 06 Jun 2019 13:49:51 GMT

@Rodrigobe,

To expand a bit. When you run the command 'show jobs all' you should see quite a few jobs entitled EDLFetch. Locate the Job ID and run the command 'show jobs id <id>' and you should see the results of every EDL being utilized in policy.

Re: Refresh EDL from webserver

Rodrigobe — Thu, 06 Jun 2019 14:09:45 GMT

Thanks @MP18 and @BPry I'll check on this and let you know the results in a couple minutes.

Re: Refresh EDL from webserver

Rodrigobe — Thu, 06 Jun 2019 18:30:55 GMT

UPDATE

We can see the EDLFetch job running every 5 minutes in all our firewalls. We also se the EDLRefresh job when we update any EDL. But for some reason some firewalls don't refresh the EDL even if we see the EDLRefresh command running until we run import now.

All those firewalls that don't refresh the EDLs are located geographically outside the US (our webserver hosting master files for EDLs are in the US). Maybe that has something to do with this, but it is curious that when we click on improt now it works.

We will keep working on this and post any updates. Thanks for your support.

Re: Refresh EDL from webserver

MP18 — Thu, 13 Jun 2019 04:00:51 GMT

Any update on this?

Re: Refresh EDL from webserver

Rodrigobe — Thu, 13 Jun 2019 13:47:17 GMT

No, still having the same issue. We are using the "import now" function when we need inmediatly updates into the firewalls