In the exception setting for the Anti-Spyware Inline Cloud Analysis, a custom URL list appears in the pull down menu instead of an EDL
Symptom
In the exception setting for the Anti-Spyware Inline Cloud Analysis, there is a setting called "EDL URL". When trying to add an EDL, only a custom URL list appears in the pull down menu instead of an EDL.
Environment
- Next Generation Firewall
- Threat Prevention subscription
Cause
Firstly, it's normal to see a custom URL as an option. For the exception setting of the Anti-Spyware Inline Cloud Analysis, the firewall supports both custom URL and EDL.
Reference:
Exclude from Inline Cloud Analysis > EDL URL > "External Dynamic Lists containing a series of URLs or a custom URL category."
The reason why an EDL is not shown as an exclusion is because the firewall does not have a valid EDL configuration.
Resolution
Please check the items below and make sure that the firewall has a valid EDL configuration.
- The EDL type must be "URL list".
Note: If you are making a new EDL, please make sure to commit the configuration.
- The EDL should have a list of entries. Otherwise, nothing will be excluded even if it's configured. Here is an example.
The following CLI commands might be useful for troubleshooting.
| request system external-list refresh type url name <the name of the EDL> request system external-list show type url name <the name of the EDL> |
- The EDL is now shown in the pull down menu.