topic Re: Panorama External Dynamic Lists in General Topics

Panorama External Dynamic Lists

drewdown — Wed, 19 Jun 2019 21:24:50 GMT

I had to RMA our m-100 and when I did that I lost the external dynamic lists on the PANORAMA itself. They are still locally on the managed FWs but I cannot referrence them on the Panorama. Of course that broke all outbound traffic because the top rule to block all traffic to those lists wasn't matching anything on the destination side (thanks PAN support).

I disabled those rules and it fixed the problem but know I need to know how to either referrence those lists or get them configured and or imported into Panorama. I had this working prior but I don't remember how.

Edit: My specific problem is from the new m-100 when I try to add a 'Predifined IP List' the drop-down in the 'Source' is blank. Whereas on the previous m-100 it shows the 2 IP and domain lists.

Re: Panorama External Dynamic Lists

MP18 — Thu, 20 Jun 2019 04:48:43 GMT

You can Put the same rule in Panorama under the pre rule list.

Re: Panorama External Dynamic Lists

drewdown — Thu, 20 Jun 2019 12:27:38 GMT

Which is what I had prior but that didn't get migrated. I eventually downloaded AV/Apps and threats and installed the latest version on the PANORAMA. Once I did that the 'Predefined IP lists' showed up and I could referrence them in the shared policies. Whats odd is that I logged back in Panorama today and neither of the antivirus or apps that I installed yesterday are showing as 'installed.'