EBL during upgrading a PAN from 6.1.10 to 7.1.5

[Nitish05]

We are planning a have an version upgrade on PA firewall from 6.1.10 to 7.1.5 and the firewall is using the EBL, want to get any confirmation if the upgrade gonna impact the EBL in any way. Thanks

[DonohoeRobert]

Hi Nitish, 

Hope you are well. The upgrade will not impact the EBL in anyway. If any trouble observed raise a support case with you ASC. 

best regards, 

robert D 

[Nitish05]

Hi Robert,

Thanks alot, any how will confirm once i am gone through that.

Thanks

[DonohoeRobert]

Hi Nitish, 

There is a nice article runs through EBL's here and includes cli command for checking the EBL once configured. 

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Dynamic-Block-List-DBL-...

{>request system external-list show name example-list}

double checked the command on 7.1.5 and still valid, so try that after the upgrade. 

If any hassle with it contact your support provider. Can't forsee any issues however. 

Best regards

Robert D 

[TranceforLife]

Hi,

EBL is essentially a list of the websites/IP addresses. So after upgrade just confirm your firewall can still connect to the EBL site and still can refresh/see these ip on the box:

https://live.paloaltonetworks.com/t5/Learning-Articles/Working-with-External-Block-List-EBL-Formats-...

[OtakarKlier]

I agree with those above. I have EBL's and performed a similar upgrade and everything was good with the EBL's.