EDL "Test Source URL" fails with "URL access error"

10540

Created On 12/07/21 01:27 AM - Last Modified 04/16/26 19:44 PM

External Dynamic List

Initial Configuration

9.1

10.0

PAN-OS

Symptom

External Dynamic List (EDL) with client authentication
When trying to test using "Test Source URL", it fails with the message "URL access error".

the test failed.

Environment

Palo Alto Firewalls and Panorama
PAN-OS 9.1 and above
External Dynamic List (EDL) with client authentication

Cause

This is a known issue referenced as PAN-69505.

Resolution

Upgrade to the PAN-OS version 10.1.x.

Note:
To check the EDL is working correctly, once the EDL is applied, wait for a refresh.
From CLI, we can manually refresh.

admin@pa-vm> request system external-list refresh type
> domain   Domain list type
> imei     IMEI list type
> imsi     IMSI list type
> ip       IP list type
> url      URL list type

admin@pa-vm> request system external-list refresh type domain name domain

EDL refresh job enqueued
admin@pa-vm> show jobs all

Enqueued              Dequeued           ID  PositionInQ                              Type                         Status Result Completed
------------------------------------------------------------------------------------------------------------------------------------------
2026/04/16 12:41:30   12:41:30         1925                                     EDLRefresh                            ACT   PEND         0%
2026/04/16 12:40:14   12:40:14         1924                                     EDLRefresh                            FIN     OK 12:41:19

Then open the EDL, and go to "List Entries and Exception". You should see the entries.

Additional Information