PAN-OS - Block IP and URL - External Dynamic List
Deprecated. Use "PAN-OS - Block IP and URL - External Dynamic List v2" playbook instead. This playbook blocks IP addresses and URLs using Palo Alto Networks Panorama or Firewall External Dynamic Lists. It checks if the EDL configuration is in place with the 'PAN-OS EDL Setup' sub-playbook (otherwise the list will be configured), and adds the input IPs and URLs to the relevant lists.
- Pack
- DeprecatedContent
- Tasks
- 17
Inputs
- IPListName — IP address list from the instance context with which to override the remote file.
- IP — IP address to block
- URL — URL to block.
- URLListName — URL list from the instance context with which to override the remote file.
- LogForwarding — Log Forwarding object name.
- EDLServerIP — EDL server IP address.
- AutoCommit — This input establishes whether to commit the configuration automatically. Yes - Commit automatically. No - Commit manually.
- url-pre-post-rulebase — Either pre-rulebase or post-rulebase, according to the rule structure.
- ip-pre-post-rulebase — Either pre-rulebase or post-rulebase, according to the rule structure.
- url-rule-position — The position of the rule in the ruleset. Valid values are: * top * bottom * before * after
- ip-rule-position — The position of the rule in the ruleset. Valid values are: * top * bottom * before * after
- inbound-or-outbound-rule — Determines if the rule is inbound or outbound.
- device-group — The device group to work on. Exists only in panorama!
Commands used
- pan-os-edl-update
- panorama
- panorama-refresh-edl