DAG is not working

[minow]

hey

i have started playing arround with MineWeld.

i am testing a solution for a customer to update DynamicObject / Block lists on the PA to be used by the SOC team.

i have created a IPv4 List and connected it directly to a DagPusher node.

but when i add an indicator to the miner i do not see it on the PA dynamic group.

this is what i see on MineWeld

This is the config , i assume here that the TAG is the TAG on the PA that the dynamic group should catch the objects, is it right ? 

this is the configured dynamyc group

admin@PA-LAB> show object dynamic-address-group all

Dynamic address groups in vsys vsys1:
----------------------------------------------------

----------------defined in vsys --------------------
SOC-BlockIPs
filter: 'SOC-BlockIPs'
members: total 0

----------------defined in shared-------------------
O: address object; R: registered ip; 😧 dynamic group; S: static group

Another question that i have is suppose the PA is not "alive" to get the updates , will MineWeld try to push the updates once ? or it will try again in a loop and wil update the device with the changes when it will be back ?

[lmori]

Hi @minow,

have you configured the devices under the output node device list ?

Whe you browse the tags under PAN-OS you should be able to see the tags pushed by MineMeld. By default they the mmld_ prrefix.

[minow]

thanks,

i was able to solve it somehow.

also the command i use for the cli was wrong , i needed the "registered ip" and not the "dynamic group"

[lmori]

Hi @minow,

thank you for letting us know.

Regards,

luigi

[PrasadDigraskar]

Hi Luigi,

I'm not able to see the tags pushed by MineMeld on PA firewall

I can see the following default tags: -

'mmld_pushed' and 'mmld_confidence_high'  and 'mmld_direction_unknown' 

I can't find any document related to the "DAGPusher" prototype, it would be great if you could share any document to configure the "DAGPusher" prototype.

Thank You

[lmori]

Hi @PrasadDigraskar,

those are the default tags pushed by the output node to the firewall. Which tags would you like to see ?

Thanks !

luigi