View the contents of an external dynamic list to check if it contains certain IP
addresses, domains, or URLs.
| Where Can I Use
This? | What Do I Need? |
|---|
- NGFW (Cloud Managed)
- NGFW (PAN-OS & Panorama Managed)
- Prisma Access (Managed by Strata Cloud Manager)
- Prisma Access (Managed by Panorama)
| Check for any license or role requirements for the products you're using. |
It's a good idea to look at your external dynamic list (EDL) entries to
assess the information present in these lists. Viewing external dynamic list entries
gives you insights into the threat intelligence being used for Security policy
enforcement, and helps you maintain an up to date and robust security posture.
To access and view entries within an external dynamic list, navigate to the
Objects tab and select External Dynamic
Lists. Here, you can see a list of all configured external dynamic
lists. Select a specific external dynamic list to view the entries it contains.
External dynamic list entries typically comprise IP addresses, URLs, domain
names, or other indicators of compromise, depending on the type of external dynamic
list configured. Your configuration periodically fetches updates from the specified
URL associated with the external dynamic list, ensuring that the entries remain
current and reflect the latest threat intelligence.
To delve deeper into the entries within an external dynamic list, you can
review the contents directly from the external dynamic list configuration. This
might involve inspecting the external dynamic list's source file, which you can
access by clicking on the URL associated with the external dynamic list. The
contents of the external dynamic list source file provide a comprehensive view of
the listed indicators and their details.
Regular monitoring of these entries is vital to ensure the effectiveness of
your configuration's threat prevention capabilities. Review the entries
periodically, cross-reference them with known threat databases, and validate their
relevance to your organization's security posture.
Before you
Enforce Policy on an External
Dynamic List, view the contents of an external dynamic list to check if
it contains certain IP addresses, domains, or URLs. The entries displayed are based
on the version of the external dynamic list that was most recently retrieved.
Follow these steps to view the contents of an external dynamic list to check if it
contains certain IP addresses, domains, or URLs.
