---
title: Configure an EDL
description: The Palo Alto Networks firewall administrator configures an EDL to the Palo Alto Networks Next-Generation Firewall once notified the Retrieval URL is available from the ServiceNow AI Platform. Before the EDL can accept EDL entries, it must be configured in Palo Alto Networks, and activated in the ServiceNow AI Platform.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/paloalto-config\_firewall\_pa.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Activate an EDL manually, Activate an EDL for Palo Alto Networks Next-Generation Firewall, Palo Alto Networks Next-Generation Firewall integration, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Configure an EDL

The Palo Alto Networks firewall administrator configures an EDL to the Palo Alto Networks Next-Generation Firewall once notified the Retrieval URL is available from the ServiceNow AI Platform. Before the EDL can accept EDL entries, it must be configured in Palo Alto Networks, and activated in the ServiceNow AI Platform®.

## Before you begin

Role required: Palo Alto Networks firewall administrator

## About this task

The Palo Alto Networks Next-Generation Firewall administrator creates an EDL object, and assigns the source \(Retrieval\) URL and policy to the EDL. These tasks are performed in Palo Alto Networks before the EDL is activated in the ServiceNow AI Platform.

The images in the following section are used by permission and are PRIVILEGED and PROPRIETARY.

## Procedure

1.  If you have not configured the EDL to the firewall, navigate to **External Dynamic Lists** > **Objects** in Palo Alto Networks.

    \[Omitted image "4-30-pa-3-cropped.png"\] Alt text: Task: Navigate to the Objects tab to view EDLs.

2.  In the **Name** column, select the ServiceNow EDL you want to configure from the list, for example, **ServiceNow EDL for URL**.

    \[Omitted image "4-30-pa-3-box.png"\] Alt text: Task: Select the EDL in the Name column.

3.  In the External Dynamic Lists dialog box, enter the Username and Password to authenticate with the ServiceNow AI Platform®.

    These credentials are the Username and Password you created for the API account role \(sn\_sec\_panfw.api\_account\_access\) in your ServiceNow instance.

    \[Omitted image "paloalto-acct.png"\] Alt text: Task: Enter Username and Password for the ServiceNow AI Platform API account.

4.  In the Source field, enter the URL that was generated on the EDL list in your ServiceNow instance.

5.  Select a Certificate Profile from the choice list, `SN2`, for example.

6.  Click OK.


**Parent Topic:**[Activate an EDL manually](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/paloalto_activate_edl_manually.md)