Error message: URL access error is seen when testing EDL - Knowledge Base - Palo Alto Networks

Error message: URL access error is seen when testing EDL

23577

Created On 07/23/21 08:11 AM - Last Modified 12/29/22 03:42 AM

External Dynamic List

Policy

Service Connections

8.1

9.0

9.1

10.0

10.1

PAN-OS

Symptom

External Dynamic List (EDL) , is configured correctly
When testing it using "Test Source URL" button, it gives "URL access error":

When management-server debug is enabled, ms.log displays HTTP code 404:

admin@PA-VM(active)> debug management-server on debug  => set management server to debug
admin@PA-VM(active)> less mp-log ms.log                => logs taken after using test source command
....
debug: pan_ebl_system_ebl_refresh_handler(pan_cfg_ebl.c:7838): EDL : curl_easy_perform passed, http_code(404)
Error:  pan_ebl_system_ebl_refresh_handler(pan_cfg_ebl.c:7844): EDL URL access error
....
admin@PA-VM(active)> debug management-server on info  => Reset management server to normal mode.

Environment

Any Palo Alto Firewall
PAN-OS 8.1 and above
External Dynamic List (EDL) configured.

Cause

HTTP 404 error code indicates that the FW was able to communicate with the server, but the server could not find what was requested.
The error may also be used when a server does not wish to disclose whether it has the requested information.

Resolution

Make sure the configured "Source" URL is correct. One can test accessing it from other sources.
Make sure the server (source) will provide the requested list to the Firewall.

Additional Information