Prisma SASE - Block URL

The playbook will handle the operation of blocking a URL within the organization. If a category is provided, the URL will be added to the list. If not, a new URL category will be created, and a new security rule that blocks that category.

Pack

PrismaAccess

Tasks

14

Inputs

• URL — List of URLs that are needed to be blocked.
• CategoryName — The name of the predefined custom URL category.
• Folder — Specify the scope for a newly created security rule to be applied. Remember, this input will only be used when there is no input to the CategoryName. Default: Shared
• TSGID — Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
• AutoCommit — Possible Values: True -> Will Commit and Push Configuration False -> Manual Push will be required. Else --> Will ignore the push section and continue the playbook.

Outputs

• PrismaSase — The root context key for Prisma SASE integration output.
• PrismaSase.SecurityRule — Created security rule.
• PrismaSase.SecurityRule.action — Security rule action.
• PrismaSase.SecurityRule.application — Security rule application.
• PrismaSase.SecurityRule.category — Security rule category.
• PrismaSase.SecurityRule.description — Security rule description.
• PrismaSase.SecurityRule.destination — Security rule destination.
• PrismaSase.SecurityRule.folder — Security rule folder.
• PrismaSase.SecurityRule.from — Security rule from field (source zone(s)).
• PrismaSase.SecurityRule.id — Security rule ID.
• PrismaSase.SecurityRule.name — Security rule name.
• PrismaSase.SecurityRule.position — Security rule position.
• PrismaSase.SecurityRule.service — Security rule service.
• PrismaSase.SecurityRule.source — Security rule source.
• PrismaSase.SecurityRule.source_user — Security rule source user.
• PrismaSase.SecurityRule.to — Security rule to field (destination zone(s)).
• PrismaSase.SecurityRule.profile_setting — The Security rule group object in the rule.
• PrismaSase.SecurityRule.profile_setting.group — Security rule group.
• PrismaSase.CandidateConfig — Configuration job object.
• PrismaSase.CandidateConfig.job_id — Configuration job ID.
• PrismaSase.CandidateConfig.result — The configuration push result, e.g. OK, FAIL.
• PrismaSase.CandidateConfig.details — The configuration push details.
• PrismaSase.CustomURLCategory — The custom URL category object.
• PrismaSase.CustomURLCategory.id — The URL category ID.
• PrismaSase.CustomURLCategory.name — The URL category name.
• PrismaSase.CustomURLCategory.folder — The URL category folder.
• PrismaSase.CustomURLCategory.type — The URL category type.
• PrismaSase.CustomURLCategory.list — The URL category match list.
• PrismaSase.CustomURLCategory.description — The URL category description.

Commands used

• prisma-sase-candidate-config-push
• prisma-sase-custom-url-category-create
• prisma-sase-custom-url-category-list
• prisma-sase-custom-url-category-update