Aggregated URL lists also contain domain entries. Similarly, aggregated domain lists include URL
entries if the path is empty.
All URL lists already include a trailing slash (/) as a best practice. You can safely use the lists
without relying on "append trailing slash" function on the firewall.
This service can be used by any network device (vendor neutral) capable of fetching a
newline-separated EDL (Extended Dynamic List) format via HTTP(S) protocol. This format is also known
in the industry as a DBL (Dynamic Block List), EBL (External Block List), or CIF (Custom
Intelligence Feed).
Each EDL contains the last update time at the beginning of the file. Note that if the source has not
changed, the EDL will not be regenerated, so the last update time will remain unchanged and will
reflect the last update time of the source.
Each EDL includes the record count at the beginning of the file. You can check this information
before using it in your environment to ensure that you do not exceed the EDL capacity of your
platform.
For Palo Alto Networks (PAN) devices, you can check the EDL capacity of your platform with the
following CLI command: "show system state filter cfg.general.max-edl*"