External Dynamic Lists not working

[COMIP]

Hi all,

I have configured EDL of type Dynamic URL Lists with the next configuration

Then in URL filtering profile the ransomwaretracker_URL category is configured as BLOCK and the Profile is applied in the Security rule.

It seems configured correctly, I can list the EDL in CLI, but if I try to go to listed URL, it does not blocked.

PAN is working with 7.1.2 version.

Thanks,

Jordi

[TranceforLife]

the user is running 7.1.2 PAN-OS

[BPry]

ahh my bad. 

[TranceforLife]

l have just tested trying using http, getting redirected to https. If it is listed on firewall through the cli that is fine, should work. Also could run test button to see if you are connected successfully. Should just work. Please follow link posted by BPry:

https://live.paloaltonetworks.com/t5/Learning-Articles/Working-with-External-Block-List-EBL-Formats-...

[COMIP]

Hi all,

Thanks for your opinions. The device is a PAN 3020 and I think that the list are supported, the number of entries is ok.

https://live.paloaltonetworks.com/t5/PAN-OS-7-1-Videos/PAN-OS-7-1-URL-Filtering-Dynamic-Block-List-E...

I have tried to configure the list without https but continues without block the URLs listed in file.

The test source URL is correct, the list can be oppened.

The traffic do match in rule with the profile applied.

[BPry]

@COMIP I just tried to run that list on my own 3020 and while the link tests okay it wasn't able to actually pull anything from the list; I would assume because of the formatting. Can you run the command request system external-list show name (name) with the correct name of your list and see if there is actually anything within the list? You could also do a refresh instead of a show and monitor the specific job of the DBL refresh and see if it actually completes.