Warning: External Dynamic List XXX is configured with no certificate profile

[MaratP]

Hi all,

I've been following this Article but I've run into an issue.

When I try to edit an existing EDL and assign the Certificate Profile I created, the dropdown only shows "None (Disable Cert profile)" — the new certificate profile isn't listed as an option.

However, when I create a brand new EDL, the certificate profile I created is available and selectable without any problem.

The issue is that I can't simply delete and recreate all the existing EDLs from scratch, since they're referenced in many security rules and doing so would require rebuilding those rules as well.

Is there a way to update the certificate profile on existing EDL objects without recreating them? Any guidance would be appreciated.

Thanks in advance!

[JayGolf]

Hi @MaratP ,

When you say existing EDLs are you referring to the default PAN EDLs? PAN predefined EDLs certificate settings cannot be modified. However, you should be able to modify existing custom EDL objects that you have created. 

[MaratP]

Hi, @JayGolf 

I am talking about custom EDL that was created. and its the strange part i cant figure out - why non of the options except the "None (Disable Cert profile)" are not being displayed as available at dropdown 

[MaratP · Accepted solution]

Anyone wondering, Found this https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UMCCA2 

When creating a new EDL from Panorama we cannot choose a Certificate Profile if 'Shared' option is checked. This is by design.