Help: how to use dynamic block list

Reply
Highlighted
L2 Linker

Help: how to use dynamic block list

Hi all.

I want use " Dynamic Block List" to block some IP.

I creat a IP list on a local web servers

block.PNG

import.png

But I can't import list in to Palo Alto?

Something wrong?

Pls help me.

Thanks

Tags (3)
L5 Sessionator

Re: Help: how to use dynamic block list

Does the "Test Source URL " succeed?

Has this DBL been used in a security rule as an  Address-Object?

If Yes,Do you see any error messages?

-Ameya

L2 Linker

Re: Help: how to use dynamic block list

Does the "Test Source URL " succeed?

>> yes, PA say "Source URL is accessible."


Has this DBL been used in a security rule as an  Address-Object?

>>already

policy.PNG

when i commit, all computer in zone can't access internet.

i Don't understand why. may be PA don't understand file txt?

L5 Sessionator

Re: Help: how to use dynamic block list

Can you try configuring the rules without using the 'negate' feature.

As a quick test,create explicit rules to deny traffic from/to the dynamic block-list and allow the rest of traffic.

-Ameya

L2 Linker

Re: Help: how to use dynamic block list

thanks you, it's ok.

i change file txt and chang server, now it 's ok.

Capture.jpg

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!