topic Re: Minemmeld access error : EDL external dynamic list file either empty or not found in General Topics

Minemmeld access error : EDL external dynamic list file either empty or not found

ausafali88 — Thu, 19 Oct 2017 04:19:41 GMT

I am getting the follwoing error repetedly in PAN-OS 8.0.5

> tail mp-log ms.log
2017-10-18 21:14:53.743 -0700 Error: ebl_verify_fetched_copy(pan_cfg_ebl.c:2241): EDL entry(0x1068000, 0x1e760800, 0x12cb6000 vsys1/EDl-IP, 0, 1 ip) Old refreshed file type is either not a text file or empty file or no old file exist.
2017-10-18 21:14:53.743 -0700 Error: pan_ebl_system_ebl_show_handler(pan_cfg_ebl.c:7203): EDL external dynamic list file either empty or not found
2017-10-18 21:14:54.711 -0700 Error: ebl_verify_fetched_copy(pan_cfg_ebl.c:2241): EDL entry(0x1068000, 0x1e760800, 0x12cb6000 vsys1/EDl-IP, 0, 1 ip) Old refreshed file type is either not a text file or empty file or no old file exist.
2017-10-18 21:14:54.711 -0700 Error: pan_ebl_system_ebl_show_handler(pan_cfg_ebl.c:7203): EDL external dynamic list file either empty or not found

Please can someone help me correct this issue?....all URLS are accessiblke from PAN-OS..

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

xhoms — Thu, 19 Oct 2017 14:12:58 GMT

Looks like an authentication error to me. Have you followed the thread at https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Minemeld-Feed-Password-OR-api-security/td-p/131716 ?

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

ausafali88 — Sun, 22 Oct 2017 11:48:46 GMT

Works on PAN-OS 7.x...but not on PAN-OS 8.x.... 😞

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

borising — Mon, 23 Oct 2017 06:58:51 GMT

Hey @ausafali88,

Are you behind a proxy?

Regards,

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

ausafali88 — Mon, 23 Oct 2017 09:43:38 GMT

Hello @borising

No..just a point ot point connection...it works in PAN-OS 7.x...

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

borising — Mon, 23 Oct 2017 09:56:50 GMT

Hey @ausafali88,

Ok. The reason for asking, is that there is a bug in 8.0.x that doesn't allow EDL connections out through a proxy.

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

xhoms — Tue, 24 Oct 2017 05:01:53 GMT

@ausafali88: are you using the original self-signed certificate distributed with MineMeld?

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

ausafali88 — Tue, 24 Oct 2017 09:47:30 GMT

No generated a certificate using a CSR issued to a CA....

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

lmori — Thu, 26 Oct 2017 14:18:23 GMT

Hi @ausafali88,

checklist:

- are you using MineMeld standalone or MM in AutoFocus ?

- have you enabled feed authentication on MM ? If yes, have you configured EDL username and password in PAN-OS ?

- have you configured a certificate profile on PAN-OS ?

- if you download the API logs from MineMeld, do you see requests for the feed URL ?

Thanks,

luigi

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

akapucu — Fri, 09 Mar 2018 23:39:30 GMT

I am having same problem and i can answer those questions.

checklist:

- are you using MineMeld standalone or MM in AutoFocus ?

**Minemeld Standalone

- have you enabled feed authentication on MM ? If yes, have you configured EDL username and password in PAN-OS ?
**. Yes it is enables but i am using anonymous tag

-- Selfsigned or CA

** CA (InCommon)

PA:

-- Panos 8.06

- have you configured a certificate profile on PAN-OS ?

**Yes i did. First i tried to do on panorama but looks like i can not use cert profile when i try to create EDL. So i went and create on one of my firewall but no log

- if you download the API logs from MineMeld, do you see requests for the feed URL ?
** Yes i see

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

xhoms — Tue, 13 Mar 2018 15:21:34 GMT

Hi @akapucu,

did you have the chance to go through the excellent article published by @lmori regarding this topic at https://live.paloaltonetworks.com/t5/MineMeld-Articles/Connecting-PAN-OS-to-MineMeld-using-External-Dynamic-Lists/ta-p/190414 ?

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

akapucu — Tue, 13 Mar 2018 15:38:37 GMT

Yes, I went through and unless i am missing something. It will be really difficult to use via panorama as i can not use shared ssl profile in the list so it means i can not manage the "external list" from shared group panaroma.