The firewall is not downloading IP addresses from MineMeld. Based, on the image, what most likely is wrong?

The correct answer is D. A Certificate Profile that contains the CA certificate needs to be selected. If the list source is secured with SSL (i.e. lists with an HTTPS URL), enable server authentication. Select a Certificate Profile or create a New Certificate Profile for authenticating the server that hosts the list. The certificate profile you select must have root certificate…

Submitted by jordan8· Apr 18, 2026Configuration Troubleshooting

Question

Exhibit

Options

AA Certificate Profile that contains the client certificate needs to be selected.
BThe source address supports only files hosted with an ftp://<address/file>.
CExternal Dynamic Lists do not support SSL connections.
DA Certificate Profile that contains the CA certificate needs to be selected.

How the community answered

(18 responses)

A
6% (1)
B
17% (3)
C
6% (1)
D
72% (13)

Explanation

If the list source is secured with SSL (i.e. lists with an HTTPS URL), enable server authentication. Select a Certificate Profile or create a New Certificate Profile for authenticating the server that hosts the list. The certificate profile you select must have root certificate authority (CA) and intermediate CA certificates that match the certificates installed on the server you are authenticating. https://live.paloaltonetworks.com/t5/MineMeld-Articles/Connecting-PAN-OS-to-MineMeld-using- External-Dynamic-Lists/ta-p/190414

Topics

#External Dynamic Lists (EDL)#MineMeld#Certificates#SSL/TLS Trust

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice