List Office 365 using MineMeld does not work

[Sistemas_SanLucar]

Hi,

I have installed Minemild and I applied article and create dbl for Offcie365:

https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-usi...

I have cretate 2 rules for Office 365 to test if feed sources Office 365 works.

I have a rule to match with feed list office 365 servers and application Office365 and all traffic should match with this rule. And I have below this rule other rule with destination "any" and application Office 365.

Log shows traffic match with 2 rule.

That means there are IPs that are not in the sources provided by Minemeld.

On the other hand, System Log Pa-500 shows this message:

'EBL(O365-IPV4) Refresh Aborted. No changes to list file

what's mean this message? Is an error ?

Thank you

[lmori]

Hi @Sistemas_SanLucar,

as mentioned in the original MS article traffic to CDNs is not covered by the published IP ranges. To safely enable that traffic you should define a policy with ssl and web-browsing, destination any and URL Category the EDL of O365 URLs provided by MineMeld.

[Sistemas_SanLucar]

Hi,

thank you for your answer.

I tried to apply it but I had problems.

I have Pan-os 6.1.0

When I try to create a url filter profile. it does not show my dbl.

how could I make it?

thank you

[lmori]

Hi @Sistemas_SanLucar,

you need PAN-OS 7.1 to use EDLs as URL categories.