Cloud Managed

Configure DNS sinkholing for a custom list of domains.
Use an External Dynamic List in a URL Filtering Profile.
Use an External Dynamic List of Type URL as Match Criteria in a Security Security Rule.
Select
Manage
Configuration
NGFW and
Prisma Access
Security Services
Security Policy
.
Select
Add Rule
and enter a descriptive
Name
for the rule.
In
SOURCE
, select a
Zone
.
In
DESTINATION
, select a
Zone
.
In
URL CATEGORY / TENANT RESTRICTION
, select the appropriate external dynamic list from the URL Category list.
In
Actions
, set the
Action
setting to
Allow
or
Deny
.
Select
Save
.
Verify whether entries in the external dynamic list were ignored or skipped.
Test that the policy action is enforced.
View External Dynamic List Entries for the URL list, and attempt to access a URL from the list.
Verify that the action you defined is enforced.
Monitor activity. Select
Incidents & Alerts
Log Viewer
Firewall/URL
to access the detailed log view.
Use an IP External Dynamic List or Predefined IP External Dynamic List as a Source or Destination Address Object in a Security Rule.
This capability is useful if you deploy new servers and want to allow access to the newly deployed servers without requiring a commit.
Select
Manage
Configuration
NGFW and
Prisma Access
Security Services
Security Policy
.
Select
Add Rule
and give the rule a descriptive
Name
.
In
SOURCE
and
DESTINATION
, set the external dynamic list to be used as the
SOURCE
and
DESTINATION
addresses.
In
APPLICATION / SERVICE
, make sure the
Service
is set to
Application Default
.
In
Actions
set the
Action
setting to
Allow
or
Deny
.
Create separate external dynamic lists if you want to specify allow and deny actions for specific IP addresses.
Leave all the other options at the default values.
Select
Save
to save the changes.
Test that the policy action is enforced.
View External Dynamic List Entries for the external dynamic list, and attempt to access an IP address from the list.
Verify that the action you defined is enforced.
Select
Incidents & Alerts
Log Viewer
Firewall/Traffic
and view the log entry for the session.
Use a Predefined URL External Dynamic List to exclude benign domains that applications use for background traffic from Authentication policy.
When you select the
panw-auth-portal-exclude-list
EDL type, you can easily exclude from Authentication policy enforcement the domains that many applications use for background traffic, such as updates and other trusted services. This ensures that the necessary traffic for these services is not blocked and application maintenance is not interrupted.
Select
Manage
Configuration
NGFW and
Prisma Access
Identity Services
Authentication
Authentication Rules
Add Rule
.
In
Services and URLs
, select the Predefined URL EDL as the
URL Category
.
In
Action
, select
Do Not Authenticate
.
Select
Save
.
Move
the rule to the top so that it's the first rule in the policy.