Problem to whitelist internal domains and IP's

[tlmarques]

Need help, as in Cortex XSOAR , I'm having issues adding my domains and internal networks to a whitelist
In the settings, I have two options for this, but I can't edit them.
Anyone else experiencing the same issue? My objective was to insert and exclude internal domains and IPs from external feed analysis.

[ysato]

Hi @tlmarques 

Those are OOTB lists so you will need to detach to unlock the list to be editable. Once you are done editing, you can reattach to lock the list again. 

[usahitya1]

 Detach, Add new data and lock it. 

[tlmarques]

on my machines, I can't do that... even with the admin user

[tlmarques]

on my machines, I can't do that... even with the admin user, see image bellow.

[usahitya1]

I think you need to contact the support

[ysato]

@tlmarques 

This might be due to the list being pushed from dev to prod. You won't be able to edit lists that were pushed from dev. Although this list is OOTB, if you push it from dev, it's going to behave like that.

Another way to find out is run !addToList listName="InternalDomains" listData="test". If you see any error message related to "remote repository", then the list was pushed from dev. 

[tlmarques]

The list is default...

i try run and system give error:

[Santuli]

I noticed that if you are on version 6.10 it does not allow you to "detach" even if you have all the permissions enabled, however if you have version 6.12 it does allow you. At least that's the difference I noticed.