{"id":1039,"date":"2021-02-28T00:25:07","date_gmt":"2021-02-27T16:25:07","guid":{"rendered":"https:\/\/www.insecurewire.com\/?p=1039"},"modified":"2021-02-28T00:25:07","modified_gmt":"2021-02-27T16:25:07","slug":"using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list","status":"publish","type":"post","link":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/","title":{"rendered":"Using a Minemeld Feed with a Palo Alto External Dynamic List"},"content":{"rendered":"

This post follows on from my article detailing the setup of Palo Alto Minemeld on Ubuntu 18.04<\/a>. We will now configure the External Dynamic List feature of a Palo Alto Firewall to consume your Minemeld feed. The steps here pertain to a PA, however other vendors firewalls offer the same feature but the principal is the same. Minemeld uses standard https for access to your feeds.<\/p>\n

1. Setup the certificate profile and chain. Device > Certificate Management > Certificate Profile. Create a new certificate profile and add the chain certificates from your Minemeld server:
\n\"Step<\/a><\/p>\n

2. It’s now time to configure your EDL. Objects > External Dynamic Lists > Add >
\n– Name the list.
\n– Type set URL List.
\n– Set the source URL to the https link from your minemeld feed.
\n– If you enabled authentication on your feed, tick the client authentication box and fill in the credentials
\n– Check for updates, this is configurable, set to hourly.
\n\"Step<\/a>
\nNote that the PA will not download the list unless it is a security policy. The config also needs to be commited.<\/strong><\/p>\n

3. Add your EDL list to a security policy. I have a URL filtering policy so I am going to block the list as a category like so:
\nObjects > URL Filtering > Click on your URL filter > Under External Dynamic URL Lists:
\nSet the list to Block (Site Access) and Block (User Credential Submission).
\n\"Step<\/a><\/p>\n

4. Commit the changes. Alternatively you can create a security policy that references your EDL:
\nPolicies > Security > Add > Under Service \/ URL Category you can set the EDL per the screenshot:
\n\"Step<\/a>
\nSet the Policy action to Deny.<\/p>\n

All done! You are now automatically blocking malicious threats with a curated dynamic list. You are now free to go and grab a coffee, enjoy!<\/p>\n","protected":false},"excerpt":{"rendered":"

This post follows on from my article detailing the setup of Palo Alto Minemeld on Ubuntu 18.04. We will now configure the External Dynamic List…<\/p>\n","protected":false},"author":2,"featured_media":1046,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,5],"tags":[95,100,112,132,140],"class_list":["post-1039","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-minemeld","category-palo-alto-networks","tag-edl","tag-external-dynamic-lists","tag-https","tag-minemeld","tag-palo-alto-networks"],"acf":[],"yoast_head":"\nUsing a Minemeld Feed with a Palo Alto External Dynamic List - Insecure Wire<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Using a Minemeld Feed with a Palo Alto External Dynamic List - Insecure Wire\" \/>\n<meta property=\"og:description\" content=\"This post follows on from my article detailing the setup of Palo Alto Minemeld on Ubuntu 18.04. We will now configure the External Dynamic List...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/\" \/>\n<meta property=\"og:site_name\" content=\"Insecure Wire\" \/>\n<meta property=\"article:published_time\" content=\"2021-02-27T16:25:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png\" \/>\n\t<meta property=\"og:image:width\" content=\"211\" \/>\n\t<meta property=\"og:image:height\" content=\"238\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"nikonau\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/insecurewire\" \/>\n<meta name=\"twitter:site\" content=\"@insecurewire\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"nikonau\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/\"},\"author\":{\"name\":\"nikonau\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d\"},\"headline\":\"Using a Minemeld Feed with a Palo Alto External Dynamic List\",\"datePublished\":\"2021-02-27T16:25:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/\"},\"wordCount\":298,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.insecurewi.re\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png\",\"keywords\":[\"EDL\",\"External Dynamic Lists\",\"HTTPS\",\"Minemeld\",\"Palo Alto Networks\"],\"articleSection\":[\"Minemeld\",\"Palo Alto Networks\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/\",\"url\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/\",\"name\":\"Using a Minemeld Feed with a Palo Alto External Dynamic List - Insecure Wire\",\"isPartOf\":{\"@id\":\"https:\/\/www.insecurewi.re\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png\",\"datePublished\":\"2021-02-27T16:25:07+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#primaryimage\",\"url\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png\",\"contentUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png\",\"width\":211,\"height\":238,\"caption\":\"PA Visio Icon\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.insecurewi.re\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Using a Minemeld Feed with a Palo Alto External Dynamic List\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.insecurewi.re\/#website\",\"url\":\"https:\/\/www.insecurewi.re\/\",\"name\":\"Insecure Wire\",\"description\":\"A Network Engineer\u2019s Perspective.\",\"publisher\":{\"@id\":\"https:\/\/www.insecurewi.re\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.insecurewi.re\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.insecurewi.re\/#organization\",\"name\":\"Insecure Wire\",\"url\":\"https:\/\/www.insecurewi.re\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png\",\"contentUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png\",\"width\":32,\"height\":32,\"caption\":\"Insecure Wire\"},\"image\":{\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/insecurewire\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d\",\"name\":\"nikonau\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g\",\"caption\":\"nikonau\"},\"sameAs\":[\"https:\/\/x.com\/https:\/\/twitter.com\/insecurewire\"],\"url\":\"https:\/\/www.insecurewi.re\/index.php\/author\/nikon\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Using a Minemeld Feed with a Palo Alto External Dynamic List - Insecure Wire","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/","og_locale":"en_US","og_type":"article","og_title":"Using a Minemeld Feed with a Palo Alto External Dynamic List - Insecure Wire","og_description":"This post follows on from my article detailing the setup of Palo Alto Minemeld on Ubuntu 18.04. We will now configure the External Dynamic List...","og_url":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/","og_site_name":"Insecure Wire","article_published_time":"2021-02-27T16:25:07+00:00","og_image":[{"width":211,"height":238,"url":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png","type":"image\/png"}],"author":"nikonau","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/insecurewire","twitter_site":"@insecurewire","twitter_misc":{"Written by":"nikonau","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#article","isPartOf":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/"},"author":{"name":"nikonau","@id":"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d"},"headline":"Using a Minemeld Feed with a Palo Alto External Dynamic List","datePublished":"2021-02-27T16:25:07+00:00","mainEntityOfPage":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/"},"wordCount":298,"commentCount":0,"publisher":{"@id":"https:\/\/www.insecurewi.re\/#organization"},"image":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#primaryimage"},"thumbnailUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png","keywords":["EDL","External Dynamic Lists","HTTPS","Minemeld","Palo Alto Networks"],"articleSection":["Minemeld","Palo Alto Networks"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/","url":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/","name":"Using a Minemeld Feed with a Palo Alto External Dynamic List - Insecure Wire","isPartOf":{"@id":"https:\/\/www.insecurewi.re\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#primaryimage"},"image":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#primaryimage"},"thumbnailUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png","datePublished":"2021-02-27T16:25:07+00:00","breadcrumb":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#primaryimage","url":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png","contentUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2021\/02\/download.png","width":211,"height":238,"caption":"PA Visio Icon"},{"@type":"BreadcrumbList","@id":"https:\/\/www.insecurewi.re\/index.php\/2021\/02\/28\/using-a-minemeld-feed-with-a-palo-alto-external-dynamic-list\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.insecurewi.re\/"},{"@type":"ListItem","position":2,"name":"Using a Minemeld Feed with a Palo Alto External Dynamic List"}]},{"@type":"WebSite","@id":"https:\/\/www.insecurewi.re\/#website","url":"https:\/\/www.insecurewi.re\/","name":"Insecure Wire","description":"A Network Engineer\u2019s Perspective.","publisher":{"@id":"https:\/\/www.insecurewi.re\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.insecurewi.re\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.insecurewi.re\/#organization","name":"Insecure Wire","url":"https:\/\/www.insecurewi.re\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/","url":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png","contentUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png","width":32,"height":32,"caption":"Insecure Wire"},"image":{"@id":"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/insecurewire"]},{"@type":"Person","@id":"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d","name":"nikonau","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.insecurewi.re\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g","caption":"nikonau"},"sameAs":["https:\/\/x.com\/https:\/\/twitter.com\/insecurewire"],"url":"https:\/\/www.insecurewi.re\/index.php\/author\/nikon\/"}]}},"_links":{"self":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/posts\/1039","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/comments?post=1039"}],"version-history":[{"count":0,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/posts\/1039\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/media\/1046"}],"wp:attachment":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/media?parent=1039"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/categories?post=1039"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/tags?post=1039"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}