Cannot see Dynamic IP lists

[FarzanaMustafa]

We are currently going through the process of setting up new PA-820s for use in our environment.

We should have access to the following External Dynamic IP lists on these devices based on our licensing, however they are not being displayed.

I have enabled all licenses / authorization codes in the portal. Unit has Internet access. Using Mgnt interface for service route.

Receiving Dynamic Updates. PANOS 10.0.1. How to fix this?

> request system external-list show type predefined-ip name panw-highrisk-ip-list

Server error : panw-highrisk-ip-list is invalid name.Current target-vsys is none
request -> system -> external-list -> show -> type -> predefined-ip -> name is invalid

> request system external-list show type predefined-ip name panw-known-ip-list

Server error : panw-known-ip-list is invalid name.Current target-vsys is none
request -> system -> external-list -> show -> type -> predefined-ip -> name is invalid

Old PA220 availability:

220
New PA820 availability:

[SutareMayur]

Hi @FarzanaMustafa , please check below checks

1. Verify if you are putting correct list name under the command.

- request system external-list show type predefined-ip name panw-highrisk-ip-list

2. Check if you're seeing Threat Prevention License installed on the gateway under Device-->Licenses

If not, try to Retrieve license keys from license server and check if you see license on the gateway then check.

[FarzanaMustafa]

Hi @SutareMayur 

Thank you for the response.

Yes to both but still no luck.

[SutareMayur]

HI @FarzanaMustafa ,

Have you checked if you are able to see IP addresses under WebUI (Under Objects --> EDLs)? This is just to clarify if issue is with the list or is it kind of bug which is observed under cli. Also please check cli o/p again by changing the target vsys.

[S.Cantwell]

In addition, please down and install your AV solution.  I ran into this situation, where those Dynamic lists do not show unless AV is downloaded and installed.

[FarzanaMustafa · Accepted solution]

Hi @SutareMayur & @S.Cantwell 

No change was made at our end and issue got automatically resolved.

Thank you for your help.

[morahman]

Thanks @S.Cantwell 
This turned out to be the resolution for me. Here's a KB article for this issue:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNZgCAO

[BrianWalshCork]

This was the problem in my case also.

A new PA440 with the config copied from an older PA220.

Running Check Not on the Dynamic updates didn't show the Anti virus section. I had downloaded an installed the "Applications And Threats" updates, and the wildfire updates, and noticed that the EDLs were not available. 

I went back to dynamic updates, click "Check Now" again, an the antivirus section appeared. Downloaded and installed, and the the EDLs appeared.