PAN-OS - Block Destination Service

This playbook blocks a destination IP and service (TCP or UDP port) by creating a rule for a specific device group on PAN-OS.

Inputs

LogForwarding — Panorama log forwarding object name.
IP — IP address to block.
AutoCommit — This input establishes whether to commit the configuration automatically. True - Commit automatically. False - Commit manually.
DeviceGroup — Target Device Group.
Port — Destination port to block.
Protocol — Protocol
ServiceNamePrefix — Prefix of the Service name to be created.
RuleNamePrefix — Prefix of the Rule name to be created.
ObjectNamePrefix — Prefix of the object name to be created.
WhereRule — Where to move the rule. If you specify "before" or "after", you need to supply the "dst" argument. (Default is: 'top')
SourceZone — A comma-separated list of source zones.
DestinationZone — A comma-separated list of destination zones.
SecondaryDeviceGroup — If the rule, address and service are created in the "Shared" location, we need to know what device-groups we can push to because it isn't possible to push to the "Shared" location.