Minemmeld access error : EDL external dynamic list file either empty or not found

Reply
L2 Linker

Minemmeld access error : EDL external dynamic list file either empty or not found

I am getting the follwoing error repetedly in PAN-OS 8.0.5

 

> tail mp-log ms.log
2017-10-18 21:14:53.743 -0700 Error: ebl_verify_fetched_copy(pan_cfg_ebl.c:2241): EDL entry(0x1068000, 0x1e760800, 0x12cb6000 vsys1/EDl-IP, 0, 1 ip) Old refreshed file type is either not a text file or empty file or no old file exist.
2017-10-18 21:14:53.743 -0700 Error: pan_ebl_system_ebl_show_handler(pan_cfg_ebl.c:7203): EDL external dynamic list file either empty or not found
2017-10-18 21:14:54.711 -0700 Error: ebl_verify_fetched_copy(pan_cfg_ebl.c:2241): EDL entry(0x1068000, 0x1e760800, 0x12cb6000 vsys1/EDl-IP, 0, 1 ip) Old refreshed file type is either not a text file or empty file or no old file exist.
2017-10-18 21:14:54.711 -0700 Error: pan_ebl_system_ebl_show_handler(pan_cfg_ebl.c:7203): EDL external dynamic list file either empty or not found

Please can someone help me correct this issue?....all URLS are accessiblke from PAN-OS.. 

L5 Sessionator

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

Looks like an authentication error to me. Have you followed the thread at https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Minemeld-Feed-Password-OR-api-security/td-... ?

L2 Linker

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

Works on PAN-OS 7.x...but not on PAN-OS 8.x.... :(

L4 Transporter

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

Hey @ausafali88,

 

Are you behind a proxy?

 

Regards,

Bo

L2 Linker

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

Hello @borising

 

No..just a point ot point connection...it works in PAN-OS 7.x...

L4 Transporter

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

Hey @ausafali88,

 

Ok. The reason for asking, is that there is a bug in 8.0.x that doesn't allow EDL connections out through a proxy.

L5 Sessionator

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

@ausafali88: are you using the original self-signed certificate distributed with MineMeld?

L2 Linker

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

No generated a certificate using a CSR issued to a CA....

L7 Applicator

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

Hi @ausafali88,

checklist:

- are you using MineMeld standalone or MM in AutoFocus ?

- have you enabled feed authentication on MM ? If yes, have you configured EDL username and password in PAN-OS ?

- have you configured a certificate profile on PAN-OS ?

- if you download the API logs from MineMeld, do you see requests for the feed URL ?

 

Thanks,

luigi

L2 Linker

Re: Minemmeld access error : EDL external dynamic list file either empty or not found

I am having same problem and i can answer those questions.

 

checklist:

- are you using MineMeld standalone or MM in AutoFocus ?

**Minemeld Standalone

- have you enabled feed authentication on MM ? If yes, have you configured EDL username and password in PAN-OS ?
**. Yes it is enables but i am using anonymous tag

-- Selfsigned or CA

** CA (InCommon)

PA:

-- Panos 8.06

- have you configured a certificate profile on PAN-OS ?

**Yes i did. First i tried to do on panorama but looks like i can not use cert profile when i try to create EDL. So i went and create on one of my firewall but no log

- if you download the API logs from MineMeld, do you see requests for the feed URL ?
** Yes i see


 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!