topic Re: MineMeld URL Access Error in General Topics

MineMeld URL Access Error

Ash2k — Wed, 22 Mar 2017 13:18:13 GMT

I have setup MineMeld on a VM and it seems to be working correctly but, when I setup the EDBL on a PAN firewall and test it, I get a "URL access error" message on the firewall. I can access the feed if I put the URL into a browser and can see the list of addresses.

I get the same error whether using the IP or FQDN as the Source. I've even gone as far as configuring MineMeld with our 3rd-party wildcard certificate in case the self-signed certificate was causing the issue, but this hasn't helped.

Any advice would be appriciated.

Re: MineMeld URL Access Error

Ash2k — Wed, 22 Mar 2017 13:34:57 GMT

Looks like the issue was caused by our Palo Alto Updates service route set to the external interface and the MineMeld URL being internally accessible only. Changed the serrvice route to default and then the EDBLSource was accessible.

https://live.paloaltonetworks.com/t5/Management-Articles/Dynamic-Block-Lists-DBL-not-working-Service-Routes/ta-p/67728

Re: MineMeld URL Access Error

lmori — Fri, 24 Mar 2017 08:18:06 GMT

Hi @Ash2k,

I think a possible alternative is using a specific Destination route for the MineMeld IP.

Re: MineMeld URL Access Error

Ash2k — Tue, 28 Mar 2017 11:40:26 GMT

Hi Imori,

I did try this at first but got an error when accessing the URL. Have just tested it again with entries for both the IP and FQDN but can only access the URL when the "Palo Alto Updates " service route is set to the internal.

Would have been nice to set a specific destination route and still have Palo Alto Updates going out via the external interface.

Ash

Re: MineMeld URL Access Error

lmori — Wed, 29 Mar 2017 09:29:24 GMT

Yes, I will talk to PMs about this.

Re: MineMeld URL Access Error

Mohamed-Hakim — Mon, 17 Apr 2017 02:09:18 GMT

When changed service route to default instead of external interface internal IP EDBLSource was accessible but external resolving services didn't work like "dynamic update " . how to fix that

Re: MineMeld URL Access Error

lmori — Tue, 18 Apr 2017 09:55:44 GMT

Hi @Mohamed-Hakim,

please, could you share more details about your network layout and configuration ?

Thanks,

luigi

Re: MineMeld URL Access Error

Flo — Wed, 08 Nov 2017 02:32:29 GMT

Thank you, the other way would be to deploy MineMeld in the DMZ so it is reachable from Untrust, but I'd rather not do so.

Is there any reason [security?] why our palo alto consultant configured the "Palo Alto Update Service" to use a specific external interface rather than "default" ?

Re: MineMeld URL Access Error

rohill — Wed, 24 Jul 2019 16:47:52 GMT

Having an issue with EDL miner output. I am able to see the IPs associated for the output miner when I click on the URL in mindmeld. However if I copy and paste that URL I receive an unauthorized error message and when I click test URL on the firewall I get a URL error message. Any suggestions on correcting this issue.

Thanks

Re: MineMeld URL Access Error

lmori — Thu, 25 Jul 2019 13:33:23 GMT

Hi @rohill,

the "problem" is that MineMeld on Autofocus by default authenticates accesses to the feeds. You should define credentials to access that feed and associate a tag to it.

More details here: https://live.paloaltonetworks.com/t5/MineMeld-Articles/Connecting-PAN-OS-to-MineMeld-using-External-Dynamic-Lists/ta-p/190414

Luigi