Firewall not able to fetch the EDL address objects

• Firewall able to ping the EDL (External Domain List) server
• FW has service route configured for Palo Alto Networks Services to be eth1/1 and the edl-updates to be default
• tcpdump on FW mgmt interface shows no attempt of FW to connect to EDL server
• MS.log output displays the following

Error: pan_ebl_set_curl_proxy_info(pan_cfg_ebl.c:5930): failed to get proxy info
Error: ebl_fetch_url_from_remote_libcurl(pan_cfg_ebl.c:2450): EDL vsys1:Malicious_IPs_Minemeld 
curl_easy_perform failed, Err(35):SSL connect error

• Palo Alto Firewall
• PAN-OS 9.0and above.
• EDL (External Domain List) configured.

• If a service route is set for edl-updates, then that interface is used for fetching EDL list.
• If not and if Palo Alto Networks Services has a service route set, then this is used for fetching the EDL list.
• If both are not set, then MGT (management) interface will be used.