Configure a Public External Dynamic List

Table of Contents

External Dynamic Lists on Cloud NGFW for Azure

Configure a Private External Dynamic List

Configure a Public External Dynamic List

Configure an external dynamic list (EDL) hosted on a public web server for use in Cloud NGFW for Azure security policies.

Where Can I Use This?	What Do I Need?
Cloud NGFW for Azure	Cloud NGFW subscription Palo Alto Networks Customer Support Portal account Azure Marketplace subscription Strata Cloud Manager access

A public EDL is a text file accessible over the public internet. Cloud NGFW for Azure retrieves the list using its management interface and updates the list at the interval you configure. You reference the EDL object in security rules to control traffic based on IP addresses, URLs, or domain names without updating policies each time the list changes.

Log in to Strata Cloud Manager.
Select ConfigurationNGFW and Prisma Access.
Select your target folder.
Select ObjectsExternal Dynamic List and click Add External Dynamic List.
Configure the EDL object and click Save:
- For Name, enter a descriptive name for the EDL.
- For Type, choose IP List, URL List, or Domain List based on the content of your EDL.
- For Source, enter the public URL hosting the EDL text file (for example, https://edl-server.example.com/ip.txt).
- For Check Frequency, set the interval at which Cloud NGFW for Azure polls the server for updates.
Select Security Policies and click Add to create a security rule that references the EDL object.
- For Source Address or Destination Address, add the EDL object you created.
- For Action, choose Allow, Deny, or Drop.
- Complete the destination and application parameters as required by your policy.
Click Save.
Click Push Config to deliver the configuration to your Cloud NGFW for Azure firewalls.