Block URL - Generic v2

This playbook blocks malicious URLs using all integrations that are enabled. Supported integrations for this playbook: * Palo Alto Networks PAN-OS * Zscaler * Sophos * Forcepoint * Checkpoint * Netcraft.

Common Playbooks · 33 tasks · 11 inputs · 0 outputs

Inputs

  • URL — Array of malicious URLs to block.
  • LogForwarding — Log Forwarding object name.
  • AutoCommit — This input establishes whether to commit the configuration automatically. Yes - Commit automatically. No - Commit manually.
  • CustomURLCategory — Custom URL Category name.
  • type — Custom URL category type. Insert "URL List"/ "Category Match".
  • categories — The list of categories. Relevant from PAN-OS v9.x.
  • UserVerification — Possible values:True/False. Default:True. Specify if User Verification is Requrired
  • EDLServerIP — EDL Server IP Address
  • device-group — Device group for the Custom URL Category (Panorama instances).
  • Tag — Insert a tag name with which indicators will get tagged. This tag can be used later in the External Dynamic Lists integration by using the tag for filtering IPs in the indicator query.
  • Folder — For prisma SASE usage - Specify the scope for a newly created security rule to be applied. Remember, this input will only be used when there is no input to the CategoryName. Default: Shared

Commands used

appendIndicatorField fp-add-address-to-category netcraft-attack-report zscaler-blacklist-url

Flowchart

yes yes yes yes yes yes yes yes yes yes Start Start Done Done Block URLs Block URLs Is there a URL to block? Is there a URL to block? Is Zscaler enabled? Is Zscaler enabled? Block URL with Zscaler - zscaler-blacklist-url Block URL with Zscaler zscaler-blacklist-url PAN-OS - Block URL - Custom URL Category - PAN-OS - Block URL - Custom URL Category PAN-OS - Block URL - Cust... PAN-OS - Block URL - Custom U... Checkpoint Checkpoint PAN-OS PAN-OS Zscaler Zscaler Use EDL? Use EDL? Use Custom URL Category? Use Custom URL Category? Is CheckPoint Integration Aavailable? - IsIntegrationAvailable Is CheckPoint Integration... IsIntegrationAvailable Checkpoint - Block URL - Checkpoint - Block URL Checkpoint - Block URL Checkpoint - Block URL Sophos Firewall - Block URL - Sophos Firewall - Block URL Sophos Firewall - Block URL Sophos Firewall - Block URL No URL was definded No URL was definded Sophos Sophos Is Sophos Integration Enabled? - IsIntegrationAvailable Is Sophos Integration Ena... IsIntegrationAvailable EDL EDL Update Tag For URLs - appendIndicatorField Update Tag For URLs appendIndicatorField User Verification User Verification Append the URLs' blocking list - SetAndHandleEmpty Append the URLs' blocking... SetAndHandleEmpty Forcepoint Forcepoint Is Forcepoint Integration Enabled? - IsIntegrationAvailable Is Forcepoint Integration... IsIntegrationAvailable Forcepoint - Add URL's to a specific category - fp-add-address-to-category Forcepoint - Add URL's to... fp-add-address-to-category Is User Verification Is Required? Is User Verification Is R... Set Input URLs as Blocklist. - SetAndHandleEmpty Set Input URLs as Blocklist. SetAndHandleEmpty Netcraft Netcraft Is Netcraft Integration Enabled? - IsIntegrationAvailable Is Netcraft Integration E... IsIntegrationAvailable Block URL with Netcraft - netcraft-attack-report Block URL with Netcraft netcraft-attack-report Prisma SASE Prisma SASE Is Prisma SASE Enabled? - IsIntegrationAvailable Is Prisma SASE Enabled? IsIntegrationAvailable Prisma SASE - Block URL - Prisma SASE - Block URL Prisma SASE - Block URL Prisma SASE - Block URL