About paul_w

hello @lmori   These are the ones that we have found so far:   WNS Ranges https://www.microsoft.com/en-us/download/confirmation.aspx?id=44238   MPSN Ranges https://www.microsoft.com/en-gb/download/details.aspx?id=44535   Thank you ... View more

Hello @lmori   I have been able to populate the EDL object from other web servers so I believe I must have encountered the bug you referred to in your first reply...even though I was unable to find any error messages in the log file.   Thank you for your assistance.   Kind Regards, paul_w     ... View more

Hello @lmori -   I have had confirmation that a device on the same network as the firewall management interface can access the feed via a browser and can see the IP list without any block pages being displayed.   Are there any test commands that can be run from the firewall, is it possible to see the contents of the file that is being downloaded ?   Thanks. ... View more

Hello @lmori -   I am currently waiting for someone to test connectivity to the EDL feed from the other side of the VPN.   Looking at my problem from a different angle, do you know whether there are any external feeds available that I can try to use until I resolve my problem please ?   Thank you.  ... View more

Hello @lmori   Yes the feed the O365 Skype IPv4 addresses.   The only thing between the EDL and MineMeld server is the PA-5020 that is the peer for the VPN.   No authentication for output feeds is disabled   I have copy/pasted the output from the MineMeld feed to a text file and put it on a web server in another part of the network, created another EDL on the same firewall and the EDL wont populate from the web server either.   Could the problem be related in someway to the format of the data ?   For info - I have got an EBL and an EDL accessing the same MineMeld feed locally with no problems but they are running PANOS 6.1.10 and 7.1.6   Thanks. ... View more

The EDL is on one end of an IPSEC VPN the peer traffic logs attached appear to show successful connections to the Minemeld server.   The URL shows IP addresses, extract below:   104.208.152.137-104.208.152.137 104.208.28.54-104.208.28.54 104.208.31.113-104.208.31.113 104.209.188.207-104.209.188.207 104.210.1.218-104.210.1.218 104.210.80.193-104.210.80.193 104.210.9.95-104.210.9.95 104.211.162.59-104.211.162.59 104.211.165.113-104.211.165.113 104.211.165.216-104.211.165.216 104.40.189.177-104.40.189.177 104.40.75.8-104.40.75.8 104.40.76.196-104.40.76.196 104.40.82.150-104.40.82.150 104.40.91.215-104.40.91.215 104.41.151.83-104.41.151.83 104.41.207.112-104.41.207.112 104.41.208.54-104.41.208.54 104.41.210.140-104.41.210.140 104.42.228.150-104.42.228.150 The only thing I can think of that would block the session is the peer firewall and as I say the logs appear to show a valid connection.   The system log on the EDL firewall also appears to show that the file is being downloaded and processed...or are these spurious messages ?   ... View more

Hi @lmori - I can't find find the ip address of the firewall in the logs and there don't appear to be any obvious errors.   Logs attached.   Thanks. ... View more

Hi @lmori -   I have connected to the URL with a browser and I can see the IP addresses listed, there are no proxies involved, the 'Test Source URL' on the EDL object gives result message 'Source URL is accessible.' ... View more

Hi @lmori   The file appears to be downloading: 2017-07-12 13:30:50.287 +0100 EDL entry(0x10a6a000, 0x1cff6000, (nil) vsys1/Skype-IPv4, 1, 1 ip) Downloaded EDL file size(1210)   There is nothing obvious to me in ms.log, I have attached some extracts for reference.   Thanks ... View more

Hi Imori -   I will check the log.   For information I used the process on https://gist.github.com/jtschichold/f0977e5c1ec09b3ec7d66bf80687d9da to generate the certificate. ... View more

Hello -   I have created an EDL in PANOS 8.0.0 using a feed from Minemeld 0.9.40, when I commit I receive the following message:   EDL(vsys1/Skype-IPv4 ip) Downloaded file is not a text file.   Does anyone know how to correct the error ?   Thanks ... View more

Hi Luigi -   that worked fine, thank you for your assistance ... View more