Help: how to use dynamic block list

[dat.tran]

Hi all.

I want use " Dynamic Block List" to block some IP.

I creat a IP list on a local web servers

But I can't import list in to Palo Alto?

Something wrong?

Pls help me.

Thanks

[UhMayYeah]

Does the "Test Source URL " succeed?

Has this DBL been used in a security rule as an  Address-Object?

If Yes,Do you see any error messages?

-Ameya

[dat.tran]

Does the "Test Source URL " succeed?

>> yes, PA say "Source URL is accessible."

Has this DBL been used in a security rule as an  Address-Object?

>>already

when i commit, all computer in zone can't access internet.

i Don't understand why. may be PA don't understand file txt?

[UhMayYeah]

Can you try configuring the rules without using the 'negate' feature.

As a quick test,create explicit rules to deny traffic from/to the dynamic block-list and allow the rest of traffic.

-Ameya

[dat.tran · Accepted solution]

thanks you, it's ok.

i change file txt and chang server, now it 's ok.