Get EDL Entries on Panorama

[jyao]

Hi gurus,

May I know if I can get ip/url/domain EDL entries on Panorama? As I can only see predefined-ip  amd predefined-url types on my Pamorama instance, I am not sure if it relates to my Pamorama license.

When I try to get entries of my custom EDL, the API returns below error:

<response status="error" code="17">

    <msg>

        <line>

            <![CDATA[ request -> system -> external-list -> show -> type -> ip unexpected here]]>

        </line>

        <line>

            <![CDATA[ request -> system -> external-list -> show -> type is invalid]]>

        </line>

    </msg>

</response>

Besides, when I use cmd=<request><system><external-list><show><type><predefined-url><num-records>200</num-records><anchor>1</anchor><name>panw-auth-portal-exclude-list</name></predefined-url></type></show></external-list></system></request> to get Panorama predefined url EDL entries, the XML api returns below error, and it seems num-records doesn't work for Panorama: 

<response status="error" code="17">

    <msg>

        <line>

            <![CDATA[ request -> system -> external-list -> show -> type -> predefined-url -> num-records not available to xmlapi client]]>

        </line>

        <line>

            <![CDATA[ request -> system -> external-list -> show -> type -> predefined-url -> num-records is invalid]]>

        </line>

    </msg>

</response>

However, on Firewall, I can get expected results.

Appreciate yoour kind comments.

Jonathan

[PavelK]

Hello @jyao

does your Panorama have installed latest Antivirus package? EDL objects are installed only after Antivirus package is installed and entries are updated through Antivirus content update: Unable to use predefined External Dynamic Lists on the Palo Alto Firewall or Panorama.

Kind Regards

Pavel