topic Re: Creating Minemeld IPv4 Lists in General Topics

Creating Minemeld IPv4 Lists

peter.moscatelli — Mon, 17 Dec 2018 21:54:48 GMT

I'm a newbie with Minemeld and Autofocus.

I'm looking to create a Minemeld Miner that will maintain IPv4 Whitelist based on an AWS Site that is load balancing and/or using DNS Round Robin.

The CDN that we're pulling data from lives in AWS and IP Address Resolution is constantly changing (see api.ebass-emmi.eu).

My plan is to create a External Dynamic List (EDL) based Policy Rule and the EDL Object will be feed from this Minemeld Miner.

Many Thank for the assist!

Re: Creating Minemeld IPv4 Lists

kiwi — Tue, 18 Dec 2018 09:08:59 GMT

Hi @peter.moscatelli,

I think this question is more suited in the MineMeld discussions forum (moving it there).

Cheers !

-Kiwi.

Re: Creating Minemeld IPv4 Lists

xhoms — Tue, 18 Dec 2018 11:14:59 GMT

Hi @peter.moscatelli,

you might want to take a look to the project https://github.com/PaloAltoNetworks/fqdn-service

It can genererate an IPv4/IPv6 feed out of FQDN's hosted in AWS.

The generated feed can be consumed directly by the PANOS devices or by a SimpleJSON MineMeld miner

Re: Creating Minemeld IPv4 Lists

peter.moscatelli — Fri, 21 Dec 2018 20:33:31 GMT

Thanks Kiwi!

Re: Creating Minemeld IPv4 Lists

peter.moscatelli — Fri, 21 Dec 2018 20:55:10 GMT

Thanks for the response!

So, I was under the impression that I could build this tool/functionality within Minemeld (Miner) itself and the have my Firewalls consume the IPv4 data from Miner URL?