Configure an EDL in Palo Alto Networks Next-Generation Firewall

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • The Palo Alto Networks firewall administrator configures an EDL to the Palo Alto Networks Next-Generation Firewall once notified the Retrieval URL is available from the ServiceNow AI Platform. Before the EDL can accept EDL entries, it must be configured in Palo Alto Networks, and activated in the ServiceNow AI Platform®.

    Before you begin

    Role required: Palo Alto Networks firewall administrator

    About this task

    The Palo Alto Networks Next-Generation Firewall administrator creates an EDL object, and assigns the source (Retrieval) URL and policy to the EDL. These tasks are performed in Palo Alto Networks before the EDL is activated in the ServiceNow AI Platform.

    The images in the following section are used by permission and are PRIVILEGED and PROPRIETARY.

    Procedure

    1. If you have not configured the EDL to the firewall, navigate to External Dynamic Lists > Objects in Palo Alto Networks.
      Task: Navigate to the Objects tab to view EDLs.
    2. In the Name column, select the ServiceNow EDL you want to configure from the list, for example, ServiceNow EDL for URL.
      Task: Select the EDL in the Name column.
    3. In the External Dynamic Lists dialog box, enter the Username and Password to authenticate with the ServiceNow AI Platform®.
      These credentials are the Username and Password you created for the API account role (sn_sec_panfw.api_account_access) in your ServiceNow instance.
      Task: Enter Username and Password for the ServiceNow AI Platform API account.
    4. In the Source field, enter the URL that was generated on the EDL list in your ServiceNow instance.
      Task: Copy the Retrieval URL in the Source field.
    5. Select a Certificate Profile from the choice list, SN2, for example.
    6. Click OK.