Autofocus MineMeld - how to access output node that requires authorisation

[Nikolay-Matveev]

I need to create O365 IP/URL EDLs but when I try to access the output nodes I get "Unauthorised" message unless I sign into AutoFocus in the browser. Needless to say I cannot do the same on a firewall. How do I allow anonymous connections to a feed in Autofocus MineMeld or use authentication when configuring EDL on a firewall? 

[rschunk]

At the moment I can do a test URL and everything works with anoynomous as the setting in Minemeld.  What is not working is populating the EDLs.  I do not see any errors in the tail log, just no update to the firewall.

All EDLs are in a security rule and committed. 

Prefer to see everything working with no anoynomous before trying true authentication again.

If you want to jump on a conference bridge we can look at this.  Just let me now.  Thanks,  Rich

[lmori]

Hi @rschunk,

do you still have this issue?

could you check the article here ? https://live.paloaltonetworks.com/t5/MineMeld-Articles/Connecting-PAN-OS-to-MineMeld-using-External-...

Thanks,

luigi

[zmacharia_PA]

I ran into this issue with all the correct parameters set and also had a security rule defined to reference the EDL. Though the 'Test Source URL' link returned an error, clicking on the 'List Entries And Exceptions' Tab, all the entries were there, so might be worth checking that as well. I am running 8.0.12.

In addition you can also run 'show running security-policy <policy_name>' to validate if the entries have populated.

[lmori]

@zmacharia_PA is correct, the "Test Source URL" button should not be trusted.

[Dananjaya]

Add below & restart minemeld servcie.

$ sudo -u minemeld sh -c 'echo "FEEDS_AUTH_ENABLED: True" > /opt/minemeld/local/config/api/30-feeds-auth.yml'

---