topic dynamic external lists sources in General Topics

dynamic external lists sources

nwnetadmin — Thu, 08 Apr 2021 22:00:42 GMT

Hello,

I am trying to use the Palo Alto Bulletproof, high Risk, and known malicious dynamic external lists. However, I can't add them because the sources aren't listed in the drop down menu of the "Add External Dynamic List" window.

I read that it uses the content updates to get those. I am up to date on the Application and Threats Dynamic Updates. And the Threat Prevention License is active.

Firewall is a PA-820 running 10.0.5.

I seem to remember that, on my other firewalls, these lists were just "there" to be used in the security policies. Seems like there is probably just another check box somewhere for me to trigger those to be available, but I am not sure where.

What could I be missing?

Thanks

Re: dynamic external lists sources

ydhanuka — Fri, 09 Apr 2021 02:51:54 GMT

Hi @nwnetadmin ,

I believe you may be missing predefined EDL based on the screenshot.

This article below should help.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PM0pCAG

Essentially, dynamic updates with AV needs to be downloaded/installed for all the predefined EDL's to be present on the firewall and use it further.

Hope this helps,

Yogesh

Re: dynamic external lists sources

nwnetadmin — Fri, 09 Apr 2021 13:57:19 GMT

okay,

this shows that dynamic updates are activated and installed:

and this shows that threat prevention is active:

Not sure if there is somewhere else that I should be looking at?

Re: dynamic external lists sources

OtakarKlier — Fri, 09 Apr 2021 14:57:04 GMT

Hello,

The definitions are not installed. They look to only be downloaded. Install them and see what happens.

The predefined EDL's dont have to be added. They will appear automatically.

Regards,

Re: dynamic external lists sources

nwnetadmin — Fri, 09 Apr 2021 15:09:41 GMT

Oh wow. I guess I need to look closer.

Thank you!

Re: dynamic external lists sources

nwnetadmin — Fri, 09 Apr 2021 15:15:52 GMT

that fixed it. Kind of embarrased, but that's okay. The value of screenshots!

Thank you!

Re: dynamic external lists sources

OtakarKlier — Fri, 09 Apr 2021 15:18:46 GMT

Hey no judgement here, I've done worse (just ask my wife) ;). We all over look things especially when we are all overworked. Glad you got it going!