EDLs are external dynamic lists that are published for consumption by a firewall. They can be composed of 1 or more sources.
In an EDL you need to specify:
- Include Sources
- Data from these sources will be including in the published EDL
- Exclude Sources
- Data found in these sources will be excluded from the published EDL
- Enable HTTP Basic Auth
Do not select the same sources for both Include and Exclude. If you do, your EDL will be blank.
Advanced EDL Settings
You can also configure Advanced EDL Settings.
If you have the correct permissions, you can edit the permission tags of an EDL. If you do not have the correct permissions, this option will not be visible.
Under Versioning, you can also see the Object Count. This is how many objects are in the EDL. The number is a link where you can view a graph of the object count over time.
Anytime an EDL changes, a snapshot is stored. This allows you to see specific changes if you need to investigate why something was added or removed from an EDL. You can also override the EDL data with snapshot data. This locks the EDL from updating as it continues to serve the cached snapshot
Click on the Snapshots link to view the available snapshots for this EDL.
You can select different snapshots to view or compare. When comparing snapshots, it shows the changes from snapshot 2 to snapshot 1. Referencing the above screenshot, in Snapshot 1, 18.104.22.168 was added and 22.214.171.124 was removed when compared to Snapshot 2.
Override - If you want to override the EDL with a snapshot, click Override. An EDL that is in Override will not update but continue using the snapshot as the data.
EDLs that have an override will be highlighted in red. To remove the override, click Remove Override.