PAN-OS EDL Setup v2

Deprecated. Use "PAN-OS EDL Setup v3" playbook instead. Configures an external dynamic list in PAN-OS. In the event that the file exists on the web server, it will sync it to demisto. Then it will create an EDL object and a matching rule.

Pack

DeprecatedContent

Tasks

20

Inputs

• list-name — The name of the list that will store the IOCs. The name of the file on the web server. This file name is the same as the name of the list with the extension ".txt" added.
• ioc-type — The type of the IOCs that the list will store. Can be "ip", "url", or "domain".
• list-items — comma separated values
• action-type — The action that will be defined in the rule: allow/deny/drop
• auto-commit — Whether to commit the configuration automatically.
• log-forwarding-object-name — The server address to which to forward logs.
• web-server-ip — The IP address of the web server on which the files are stored. The web server IP address is configured in the integration instance.
• pre-post-rulebase — Either pre-rulebase or post-rulebase, according to the rule structure.
• rule-position — The position of the rule in the ruleset. Valid values are: * top * bottom * before * after The default position is 'top'
• relative-rule-name — If the rule-position that is chosen is before or after, specify the rule name to which it is related.
• inbound-or-outbound-rule — Determines if the rule is inbound or outbound.
• rule-name — The name of the rule to update, or the name of the rule that will be created.
• device-group — The device group to work on. Exists only in panorama!

Outputs

• Panorama.EDL.Name — Name of the EDL.

Commands used

• pan-os-edl-get-external-file-metadata
• pan-os-edl-update
• pan-os-edl-update-from-external-file
• panorama
• panorama-create-edl
• panorama-get-edl