topic URL Access Error in General Topics

URL Access Error

ECerafogli — Mon, 04 Nov 2019 14:19:57 GMT

Hi all,

I have setup MineMeld on a VM and it seems to be working correctly but, when I setup the EDL on a PAN firewall and test it, I get a "URL access error" message on the firewall

I have generated CA from Palo alto and i have created a certificate signed by this CA (with CN same of minemeld's hostename).After that, I have uploaded the certificate to minemeld and verified that the change was successful.

I also changed the service route of EDL.

Someone could help me?

Thanks

UPDATE:

I removed FEEDS_AUTH_ENABLED on /opt/minemeld/local/config/api/30-feeds-auth.yml and the EDL is accessible from PA (without authentication) but if i enable it i got the same error.

Re: URL Access Error

ethiSEC — Thu, 31 Oct 2019 05:43:24 GMT

Sometimes this appears to be related to the TLS version configured on your MineMeld web server. For some strange reason, the PAN FW will only make the request to the webserver using TLS 1.0 and nothing higher.

If you see issues where the URL is unavailable or an access error check to see if TLS 1.0 is disabled.

A quick PCAP on. the MGT interface will show you what it's trying to negotiate.

tcpdump filter 'host your_dst_IP'

Jason

Re: URL Access Error

ECerafogli — Thu, 31 Oct 2019 13:05:12 GMT

Hi @ethiSEC thank you for the answer.

Where can i check if TLS1.0 is enabled on minemeld?

Thanks

Re: URL Access Error

SutareMayur — Fri, 07 Feb 2020 09:15:31 GMT

You can check TLS version under Minemeld config file.

- Mayur