Aggregated URL lists also contain domain entries. Similarly, aggregated domain lists include URL entries if the path is empty.
All URL lists already include a trailing slash (/) as a best practice. You can safely use the lists without relying on "append trailing slash" function on the firewall.
This service can be used by any network device (vendor neutral) capable of fetching a newline-separated EDL (Extended Dynamic List) format via HTTP(S) protocol. This format is also known in the industry as a DBL (Dynamic Block List), EBL (External Block List), or CIF (Custom Intelligence Feed).
Each EDL contains the last update time at the beginning of the file. Note that if the source has not changed, the EDL will not be regenerated, so the last update time will remain unchanged and will reflect the last update time of the source.
Each EDL includes the record count at the beginning of the file. You can check this information before using it in your environment to ensure that you do not exceed the EDL capacity of your platform.
For Palo Alto Networks (PAN) devices, you can check the EDL capacity of your platform with the following CLI command: "show system state filter cfg.general.max-edl*"