Is JSON Based URL is configurable in Security Policy as EDL.

[SahulH]

Hi Team,

Please confirm us can we configure JSON based URL as a EDL in Security policy on Palo Alto Firewall.

Herewith, I have provided you with the sample JSON Website for your reference. Please refer and share us with your valuable inputs.

https://snat.f5silverline.com/api/v1/snat -->> JSON Website

I have also tried to configure EDL with the above URL on my lab setup however, the list of IP's are not getting fetched from the Website. Refer the below snap for your reference once configured on the Firewall.

Snap:

Please refer to the above configuration and let us know whether we can achieve this on PA Firewall. If yes then, share me with your valuable suggestion on how to accomplish this one.

Awaiting for your valuable response !!

Best Regards,

Sahul Hameed

[kiwi · Accepted solution]

Hi @SahulH ,

JSON isn't supported.  Please check the syntax here:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/policy/use-an-external-dynamic-list-in-po...

You might want to reach out to your local SE and have him make a feature request for supporting JSON formatting in the future.

Cheers !

Kiwi.

[SahulH]

Hi @kiwi ,

Thanks for your response !!

We will check this out with SE to propose this as a feature request.

Best Regards,

Sahul Hameed

[BPry]

@SahulH,

A workaround solution would be spinning up a MineMeld instance and just using an output node to feed the information to your firewall.