About drdowns

Having installed on CentOS 7 leveraging the Ansible playbook, how is an upgrade performed (when a newer release drops)?   One note, FIPS 140-2 mode prevents Minemeld from working.  Installing and running with SSL Decrypt applying to the Minemeld server was not possible either - never found all the right CA pointers needed for the various components to trust the PA Firewall. ... View more

Hello,   @mgusta   I had a similar experience and was confused until I read this:   If a URL that is included in an external dynamic list is also included in a custom URL category, or Block and Allow Lists , the action specified in the custom category or the block and allow list will take precedence over the external dynamic list.   found in https://www.paloaltonetworks.com/documentation/81/pan-os/pan-os/url-filtering/use-an-external-dynamic-list-in-a-url-filtering-profile   Since I had custom URLs for Office365 already, the Minemeld EDL feed did not take precidence.  To facilitate the migration, I had to add my prexisting custom URL categories (where overlap occurred) to the allowed URL Filtering Policy rather than "block" for all. ... View more