How to Configure Firewall to Fetch EDL from Cortex XSOAR with Client Authentication

Configure firewall to fetch EDL from Cortex XSOAR with client authentication

• PAN OS device (standalone or Panorama Managed)
• EDL from Cortex XSOAR with client authentication

To configure firewall to fetch EDL from Cortex XSOAR with client authentication, follow the steps below,

1. Export "Go Daddy Class 2 Certification Authority" certificate from PAN OS Default Trusted Certificate Authorities in PEM format.
2. Import that certificate into Device Certificates.
3. Add that certificate into Certificate Profile you used for Cortex XSOAR EDL. This is the only CA certificate that needs to be referred under Certificate Profile.
4. Configure EDL and choose the certificate profile that you configured on previous step.
   Note:
   If this is Panorama managed firewall and you are required to configure EDL in shared location, configure the following via Panorama CLI,
   

   > configure
   # set shared external-list <EDL_name> type <EDL_type> certificate-profile <cert-profile>

   and then push the configuration to the target managed firewall.

• Create an External Dynamic List Using the EDL Hosting Service