12-02-2025
06:41 AM
- last edited on
03-30-2026
04:55 AM
by
banand
Is it somehow possible to load an EDL from a server located in onprem network (not reachable from Internet)? From which interface / IP address does the AWS CNGFW tries to connect to EDL server? Can it make connection from an interface / IP address located in customer VPC? Could not find any documentation for this specific topic.
07-24-2026 12:41 AM
Why don't you just test it and see if it can?
Is your setup Centralized deployment in Security VPC Cloud NGFW for AWS Centralized Deployments ?
07-28-2026 07:53 AM
Actually tested it and confirmed by Palo Alto account engineer:
CNGFW AWS does not support EDL loading from customer network. All EDLs must be hosted in public reachable Internet.
CNGFW Azure supports usage of loopback IP in customer VNET for connection to EDL host
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
