Creating Minemeld IPv4 Lists

[peter.moscatelli]

I'm a newbie with Minemeld and Autofocus.

I'm looking to create a Minemeld Miner that will maintain IPv4 Whitelist based on an AWS Site that is load balancing and/or using DNS Round Robin.

The CDN that we're pulling data from lives in AWS and IP Address Resolution is constantly changing (see api.ebass-emmi.eu).

My plan is to create a External Dynamic List (EDL) based Policy Rule and the EDL Object will be feed from this Minemeld Miner.

Many Thank for the assist!

[kiwi]

Hi @peter.moscatelli,

I think this question is more suited in the MineMeld discussions forum (moving it there).

Cheers !

-Kiwi.

[xhoms]

Hi @peter.moscatelli,

you might want to take a look to the project https://github.com/PaloAltoNetworks/fqdn-service

It can genererate an IPv4/IPv6 feed out of FQDN's hosted in AWS.

The generated feed can be consumed directly by the PANOS devices or by a SimpleJSON MineMeld miner

[peter.moscatelli]

Thanks Kiwi!

[peter.moscatelli]

Thanks for the response!

So, I was under the impression that I could build this tool/functionality within Minemeld (Miner) itself and the have my Firewalls consume the IPv4 data from Miner URL?