Absolute domain ending in .txt

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Absolute domain ending in .txt

L1 Bithead

HI all,

i received from an external provider a .txt list to block in my palo alto.

The list is not exactly a file ,is an absolute domain,i mean is like www.test.com/blacklist/domain.list.txt.

This will be a dynamic list,so is there some way to save this domain as object in palo alto,adding to a policy,and palo alto will update automatically as far as the provider update the .txt list?

I tried to save as FQDN ,but can't resolve it,so can't be added.

I tried as well as Dynamic address group,but as i can't save the domain as normal object i can't use it as "match criteria".

Hope is clear.

Thanks in advance.

MG

1 ACCEPTED SOLUTION

Accepted Solutions

L2 Linker

Hi @MGMGMG 

 

Perhaps, the EDL can solve your problem. It can fetch the URLs, IPs and then can be used on the firewall in security policies or as a URL-category for block or allow traffic.

 

Regards

View solution in original post

3 REPLIES 3

L2 Linker

Hi @MGMGMG 

 

Perhaps, the EDL can solve your problem. It can fetch the URLs, IPs and then can be used on the firewall in security policies or as a URL-category for block or allow traffic.

 

Regards

L2 Linker

Hello, 

@Arnesh  is right, External Dynamic Lists work exactly as You need.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list-in-pol...

 

Going further, there is even nice tool called MineMeld which can collect feeds and prepare special lists for Your devices.

https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/minemeld

 

PCNSE, PCCSE, CCNP Security

L1 Bithead

Hi Arnesh,

just tried your tip and working exactly as i needed.

Thanks W_Rafalski,looked at the link and sounds interesting.

Thank for support and regards.

MG

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!