I have set up the feeds, and the EDLs and added the EDLs into a policy.
Whenk I run the command in the CLI "request system external-list show type url name o365-URLs", I retrieve the list in the PA firewall, and the list there matches the list in Minemeld. (Same goes for the IPv4 indicators)
I am curious why there are zero indicators processed. I think I am missing something in my setup?
Yes, I think @Sec101 and you are using one of the deprecated O365 Miners. You should use one of the new Miners based on the new MSFT API: https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-usi...
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The Live Community thanks you for your participation!