How to create IPv4 list from a text file

[tienngo]

Hi community,

I am encountering decrypt-err with Anydesk application after deploying SSL Decryption. In order to fix that, I am going to create a list of Public IPv4 that Anydesk use to excludes them from the decryption. Currently I collected an IPv4 list and want to create an EDL so I can simply add them to exclusion list. I have created and using Minemeld EDL for Office365 but it is dynamic list. 

Could anyone please guide me how to create a custom EDL IPv4 list from a text file please?

[SutareMayur · Accepted solution]

@tienngo ,

You can configure IIS based webpage on any windows server and add list of IPV4 address in it. Once your webpage is ready, you can call it under IP type of EDL under Palo Alto to fetch those list of addresses.

Make sure, there is communication between firewall and Windows server IP.

You can refer below post which talks about same use case.

https://live.paloaltonetworks.com/t5/minemeld-discussions/external-feed-url-configuration/m-p/320864...

Hope it helps!

Mayur

[tienngo]

Hi Sutare,

Thank you for your recomendation. I have deployed an IIS server then can access the URL from the LAN and can see the IP list content.

But.. When I export the certificate on the IIS I have a .pfx file but I cannot import the certificate to the PA. Could you please share your experience configuring the certificate between IIS and the PA?

[SutareMayur]

@tienngo,

If your webpage is ready on 443 port and you are able to access it from LAN. Now on PA, you need to import certificate and add it under certificate profile. Then you need to map this certificate profile under EDL. Once this is done, you can just test connectivity using 'Test Source URL' option.

Hope it helps!

Mayur

[tienngo]

Hi @SutareMayur 

I know the procedure with the certification since I am using Minemeld for EDL. The issue I am encountering is that when I generate self CA in the IIS then export to the .pfx then import the file to PA and failed. 

How can I import the pfx file which generated by ISS to PA? I tried to genrated self CA on PA then import to ISS but got the same result.