EDL in Panorama

[MGMGMG]

Hi all,

i've configured a couple of EDL in Panorama as shared list and pushed to all the devices.

No problem at this point.

Now,if i check the accessibility of the URL is normally available

But if i try to list all the domains ,the output is always 0 entries.

the test source URL is successfull from both Panorama and local device.

I tried to connect to local device trough Panorama and trough his own MGMT IP and result is the same.

I've to say that i not still configured EDL in any policy,so is possible that is working anyway(altough i don't believe).

Any tips?

TIA,

MG

 

[Arnesh · Accepted solution]

Hi @MGMGMG 

You are right to think that the EDL should be called in a security policy for the IPs/Domains to the reflected. The idea behind is that the firewall does not fetch the EDL information which are not being referenced in a policy on firewall. 

This is a similar post. Also, this KB can be helpful.

Regards,

[MGMGMG]

Hi Arnesh,

many thanks for your answer.

Just one more advise,i configured an iplist.txt and a domainlist.txt both as URL list,is this best practice or better configure them as IP list and DOMAIN list respectively?

TIA,

MG

[Arnesh]

Hi MG,

We need to make sure that the an external dynamic list of one type —IP address, URL or Domain—must include entries of that type only. Please refer Formatting Guidelines for an External Dynamic List

Regards,

[MGMGMG]

Hi there,

again thanks for your reply.

Checked the link and found that  domain ending in .txt has to be URL.

Solved!

Thanks,

MG