URL Access Error

[ECerafogli]

Hi all,

I have setup MineMeld on a VM and it seems to be working correctly but, when I setup the EDL on a PAN firewall and test it, I get a "URL access error" message on the firewall

I have generated CA from Palo alto and i have created a certificate signed by this CA (with CN same of minemeld's hostename).After that, I have uploaded the certificate to minemeld and verified that the change was successful.

I also changed the service route of EDL.

Someone could help me?

Thanks

UPDATE:

I removed FEEDS_AUTH_ENABLED on /opt/minemeld/local/config/api/30-feeds-auth.yml and the EDL is accessible from PA (without authentication) but if i enable it i got the same error.

[ethiSEC]

Sometimes this appears to be related to the TLS version configured on your MineMeld web server. For some strange reason, the PAN FW will only make the request to the webserver using TLS 1.0 and nothing higher.

If you see issues where the URL is unavailable or an access error check to see if TLS 1.0 is disabled.

A quick PCAP on. the MGT interface will show you what it's trying to negotiate.

tcpdump filter 'host your_dst_IP'

Jason

[ECerafogli]

Hi @ethiSEC thank you for the answer.

Where can i check if TLS1.0 is enabled on minemeld?

Thanks

[SutareMayur]

You can check TLS version under Minemeld config file.

- Mayur