How to create IPv4 list from a text file

[tienngo]

Hi community,

I am encountering decrypt-err with Anydesk application after deploying SSL Decryption. In order to fix that, I am going to create a list of Public IPv4 that Anydesk use to excludes them from the decryption. Currently I collected an IPv4 list and want to create an EDL so I can simply add them to exclusion list. I have created and using Minemeld EDL for Office365 but it is dynamic list. 

Could anyone please guide me how to create a custom EDL IPv4 list from a text file please?

[SutareMayur]

@tienngo,

Can you please give details on error that you are getting? if possible, please attach error snap. In my environment, I've generated self-signed certificate on PA and it is imported on windows server. Everything was smooth.

Mayur

[tienngo]

Hi @SutareMayur 

I tried to generate self CA on PA as the following

Then I exported the generated self CA to a PEM file with a security key. Please note that since the ISS can only read the .pfx file and the PA can export CA in the file type PEM, DER, PKCS12 so I don't know which file type I should generate.

I imported the generated self CA to the ISS using import button in Server Certificate

Enter the password I have set at the export self CA step then I got the error

Could you please show me where I was wrong and share me how did you do it?

Thank you

[SutareMayur]

@tienngo,

First of all, while generating certificate Common Name (CN) should be either IP address of server where your web page is configured or the FQDN you will be used for accessing webpage. Whatever you will put here that will appear on the certificate.

Once certificate is generated, export is as below file and put passphrase. Once exported, import file with same passphrase on your server. This should work for you.

Hope it helps!

Mayur

[tienngo]

Dear @SutareMayur 

Thanks for your guidance, Certificate between IIS and PA is done!

From the web browser in the LAN network I can access and see the IP content in the web URL I have configured in ISS.

On PA when I create a rule using the EDL from the IIS I got the message as below and cannot verify the content of the EDL as well

Do you have any idea please...

[tienngo]

Hi @SutareMayur 

The issue is resolved!

Since the log is very clear, I change the URL to access a text file hosted by IIS, everything is good now. It seems for the EDL, PA communicates with the IIS the different way than Minemeld

Thank you for your help!