Basic setup- PAN8.0 + Minemeld issues

dpocoroba — Sun, 03 Feb 2019 01:40:02 GMT

Hello All,

Having a problem getting a basic setup running feel I am missing something simple.

- Fresh install of MM on AWS. Built using Ubuntu and the

following link:

https://live.paloaltonetworks.com/t5/MineMeld-Articles/Manually-install-MineMeld-on-Ubuntu-Server-14-04/ta-p/98454

-Everything worked fine

-Installed the O365 lists as this is what I am trying to feed into PAN

Followed this link:

https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-using-MineMeld-Updated/ta-p/224148

Was able to see the lists, miners and feeds no problem.

I installed the GoDaddy root cert as outlined in

https://live.paloaltonetworks.com/t5/MineMeld-Articles/Connecting-PAN-OS-to-MineMeld-using-External-Dynamic-Lists/ta-p/190414 Step 2

The issue I am having is getting the EDL to poll from the feed

I can CURL the list from my PC but have to use the " -k " option to ignore the certificate error

Tried following to install a new cert on MM

following this link:

https://gist.github.com/jtschichold/f0977e5c1ec09b3ec7d66bf80687d9da

Then exporting the CA.crt into a pem file and importing it into the PAN

No matter what I do on the PAN I cant get the EDL to actually load and import the IP's. I am sure its related to the certs causing the issue.

Any help is appreciated

-DP

Re: Basic setup- PAN8.0 + Minemeld issues

lmori — Thu, 07 Feb 2019 08:06:56 GMT

Hi @dpocoroba,

the GoDaddy certificate is useful only if your MineMeld has a certificate signed by GoDaddy. In that specific article, the GoDaddy certificate is used because the Autofocus/MineMeld certificate is signed by GoDaddy. On private instance this could not apply.

Did you configure PAN-OS with a certificate profile? If you disable the certificate profile is the connection successful?

Be aware that to properly test the connectivity to an EDL you should configure the EDL, use it in a policy in the firewall and commit. Please don't trust the "Test URL" button on the EDL config dialog.

topic Re: Basic setup- PAN8.0 + Minemeld issues in General Topics

Basic setup- PAN8.0 + Minemeld issues

Re: Basic setup- PAN8.0 + Minemeld issues