Block Indicator - Infoblox Cloud

This playbook blocks the given IP or domain by adding it to the given block type custom list of the Infoblox Cloud platform. If prompted it also removes the provided indicators from given allow list.

Pack

InfobloxBloxOne

Tasks

14

Inputs

• ip_addresses — The IP addresses to block.
• domains — The domains to block.
• custom_list_name — Specify the name of the custom list to add the given IP addresses or domains to. Default is "Default Block".
• custom_list_type — Specify the type of the custom list to add the given IP addresses or domains to. Possible values are: default_block, custom_list, threat_insight, dga, dnsm, zero_day_dns, threat_insight_nde. Default is "default_block".

Commands used

• infobloxcloud-block-domain
• infobloxcloud-block-ip
• infobloxcloud-customlist-indicator-remove