Reply
L4 Transporter

EDLs

Can we group EDLs?

Once the url is fetched and content is read by the firewall and later the url is deleted, does firewall keep the cache of contents?

can firewall detect redundant entries?

Cyber Elite

@SThatipelly,

"Can we group EDLs?"

You can't really create a EDL 'group' like you can with addresses or services to the best of my knowledge. You can however utilize MineMeld to combine multiple different Lists into a single output for your firewall. If you are doing anything with EDLs I highly recommend you setup MineMeld.  

 

"Once the url is fetched and content is read by the firewall and later the url is deleted, does firewall keep the cache of contents?"

The firewall will update its EDL content as often as you've configured as part of the setup process. Whatever your 'Repeat' interval is set to is how often the firewall will update the EDL entries. If your interval is setup Hourly and you delete an entry 38 minutes after the last refresh, the entry will still be present on the firewall until it refreshes in 22 minutes. 

 

"can firewall detect redundant entries"

No. If you send it through MineMeld you can trim out duplicate entries or "merge" multiple different EDLs into one list that will trim out any duplicates that it catches and combine multiple addresses into an address range where applicable. By itself the firewall will simply read whatever is in the list you're feeding it. 

L4 Transporter

Thank you so much BPry.What if the whole list/url is deleted?will firewall delete all the entries after a referesh?

 

Can you please provide me any docs for setting up/using minemeld?

Community Team Member

Hi @SThatipelly,

 

Anything you need to help get you started with MineMeld should be available at the MineMeld portal located here :

 

MineMeld

 

Cheers !

-Kiwi.

Cyber Elite

@SThatipelly,

So that can depend on what exactly happens. If the firewall can still reach the link to check the EDL and it's simply empty, the firewall will delete all entries. If the firewall can't reach the EDL because it was trully removed, it will consider the EDL host to be offline and continue to utilize the cache entry until the EDL is removed from the firewall. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!