Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
Meaning of the system log, "EDL(<Edl name>) Unable to fetch external dynamic list. HTTP response code said error Using old copy for refresh"

Meaning of the system log, "EDL(<Edl name>) Unable to fetch external dynamic list. HTTP response code said error Using old copy for refresh"

12040
Created On 05/01/19 04:02 AM - Last Modified 05/02/19 21:52 PM


Symptom


When attempting to pull an External Dynamic List (EDL), the following error is generated in the system log

System Log:
system log generated "EDL(<Edl name>) Unable to fetch external dynamic list. HTTP response code said error Using old copy for refresh."
EDL(<Edl name>) Unable to fetch external dynamic list


Environment


  • EDL (External Dynamic List)
  • FQDN (Fully Qualified Domain Name) resolution


Cause


Currently, the firewall can only handle HTTP response code 200. If anything else is received, such as HTTP response code 500, the firewall is not able to read it and a system log is generated. 

Example of firewall failing to get EDL when sending HTTP GET to server where the EDL is hosted on:
GET /lists/SOMETHING.txt HTTP/1.1 
User-Agent: curl/7.20.1 (i686-redhat-linux-gnu) libcurl/7.20.1 OpenSSL/1.0.1e zlib/1.2.3
Host: panwdb.abc.com
Accept: */*

HTTP/1.1 500 Internal Server Error
X-Cloud-Trace-Context: bc71ea5c3d264171213b012c54b9bff0
Date: Tue, 30 Apr 2019 03:01:06 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Frontend
Content-Length: 323


 


Resolution


Resolve the issue on the server hosting the EDL file so that it can send a HTTP Response code 200.

A workaround can be to reduce the EDL. However, it is not guaranteed since the server may still have an issue. Reducing the EDL allows the server more time to process the request.

Note: HTTP Response code 500 is commonly an issue on the server the firewall is fetching the EDL from. 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLtFCAW&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail