Getting the error "Unable to fetch external dynamic list. Couldn't resolve host name. Using old copy for refresh.

[Kathiravan_R]

We have PA 5250 which has configured with multiple EDL. Suddenly all the EDLs are failing that throws the "Unable to fetch external dynamic list. Couldn't resolve host name. Using old copy for refresh." As a workaround we rebooted the firewall and it resolved the issue. Looking for the experts advise to resolve this issue permanently.

[BPry]

@Kathiravan_R,

What PAN-OS release are you running? I've run into this issue on a past release on a few nodes and what I've found to fix the issue is two options:

1) Commit a change to the firewall. This for some reason got it working again 95% of the time without the following.
2) Restart the management. Keep in mind that this will kill off any unsaved candidate configuration changes that haven't been saved or committed and will sever management connections to the device while everything restarts. 

[Kathiravan_R]

@BPry 

Thank you for looking into this issue. Currently firewalls are running on PAN OS 10.1.4-h4 version.

Error(Unable to fetch external dynamic list. Couldn't resolve host name. Using old copy for refresh) shows that there might be issue with the DNS because host resolution is not happening. How do I find it?

[JonasVanraes]

Hi

We also had this issue running PAN OS 10.1.5-h1, restarting management "fixed" the issue.

Regards

[Sr_Sealion]

For what it is worth, this issue still exists with PAN-OS 10.1.6-h6. Has anyone opened a case with PAN support?

[skywalker21]

I am also seeing this issue in 10.1.8