topic Cannot see Dynamic IP lists in General Topics

Cannot see Dynamic IP lists

FarzanaMustafa — Tue, 15 Dec 2020 06:07:57 GMT

We are currently going through the process of setting up new PA-820s for use in our environment.

We should have access to the following External Dynamic IP lists on these devices based on our licensing, however they are not being displayed.

I have enabled all licenses / authorization codes in the portal. Unit has Internet access. Using Mgnt interface for service route.

Receiving Dynamic Updates. PANOS 10.0.1. How to fix this?

> request system external-list show type predefined-ip name panw-highrisk-ip-list

Server error : panw-highrisk-ip-list is invalid name.Current target-vsys is none
request -> system -> external-list -> show -> type -> predefined-ip -> name is invalid

> request system external-list show type predefined-ip name panw-known-ip-list

Server error : panw-known-ip-list is invalid name.Current target-vsys is none
request -> system -> external-list -> show -> type -> predefined-ip -> name is invalid

Old PA220 availability:

220
New PA820 availability:

Re: Cannot see Dynamic IP lists

SutareMayur — Tue, 15 Dec 2020 06:29:42 GMT

Hi @FarzanaMustafa , please check below checks

1. Verify if you are putting correct list name under the command.

- request system external-list show type predefined-ip name panw-highrisk-ip-list

2. Check if you're seeing Threat Prevention License installed on the gateway under Device-->Licenses

If not, try to Retrieve license keys from license server and check if you see license on the gateway then check.

Re: Cannot see Dynamic IP lists

FarzanaMustafa — Wed, 16 Dec 2020 06:31:53 GMT

Hi @SutareMayur

Thank you for the response.

Yes to both but still no luck.

Re: Cannot see Dynamic IP lists

SutareMayur — Wed, 16 Dec 2020 08:35:50 GMT

HI @FarzanaMustafa ,

Have you checked if you are able to see IP addresses under WebUI (Under Objects --> EDLs)? This is just to clarify if issue is with the list or is it kind of bug which is observed under cli. Also please check cli o/p again by changing the target vsys.

Re: Cannot see Dynamic IP lists

S.Cantwell — Wed, 16 Dec 2020 13:50:36 GMT

In addition, please down and install your AV solution. I ran into this situation, where those Dynamic lists do not show unless AV is downloaded and installed.

Re: Cannot see Dynamic IP lists

FarzanaMustafa — Thu, 17 Dec 2020 05:06:49 GMT

Hi @SutareMayur & @S.Cantwell

No change was made at our end and issue got automatically resolved.

Thank you for your help.

Re: Cannot see Dynamic IP lists

morahman — Fri, 22 Apr 2022 23:09:08 GMT

Thanks @S.Cantwell
This turned out to be the resolution for me. Here's a KB article for this issue:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNZgCAO

Re: Cannot see Dynamic IP lists

BrianWalshCork — Fri, 22 Nov 2024 00:06:38 GMT

This was the problem in my case also.

A new PA440 with the config copied from an older PA220.

Running Check Not on the Dynamic updates didn't show the Anti virus section. I had downloaded an installed the "Applications And Threats" updates, and the wildfire updates, and noticed that the EDLs were not available.

I went back to dynamic updates, click "Check Now" again, an the antivirus section appeared. Downloaded and installed, and the the EDLs appeared.