dynamic external lists sources

[nwnetadmin]

Hello,

I am trying to use the Palo Alto Bulletproof, high Risk, and known malicious dynamic external lists. However, I can't add them because the sources aren't listed in the drop down menu of the "Add External Dynamic List" window.

I read that it uses the content updates to get those. I am up to date on the Application and Threats Dynamic Updates. And the Threat Prevention License is active. 

Firewall is a PA-820 running 10.0.5.

I seem to remember that, on my other firewalls, these lists were just "there" to be used in the security policies. Seems like there is probably just another check box somewhere for me to trigger those to be available, but I am not sure where.

What could I be missing?

Thanks

[ydhanuka]

Hi @nwnetadmin ,

I believe you may be missing predefined EDL based on the screenshot.

This article below should help.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PM0pCAG

Essentially, dynamic updates with AV needs to be downloaded/installed for all the predefined EDL's to be present on the firewall and use it further.

Hope this helps,

Yogesh 

[nwnetadmin]

okay,

this shows that dynamic updates are activated and installed:

and this shows that threat prevention is active:

Not sure if there is somewhere else that I should be looking at?

[OtakarKlier · Accepted solution]

Hello,

The definitions are not installed. They look to only be downloaded. Install them and see what happens.

The predefined EDL's dont have to be added. They will appear automatically.

Regards,

[nwnetadmin]

Oh wow. I guess I need to look closer.

Thank you!

[nwnetadmin]

that fixed it. Kind of embarrased, but that's okay. The value of screenshots!

Thank you!

[OtakarKlier]

Hey no judgement here, I've done worse (just ask my wife) ;). We all over look things especially when we are all overworked. Glad you got it going!