NetSec - Palo Alto Networks DUG - Tag User

Block a user by tagging them in the Palo Alto Networks NGFW. This requires PAN-OS 9.1 or higher.

PAN-OS by Palo Alto Networks · 7 tasks · 3 inputs · 0 outputs

Inputs

  • tagname —
  • username —
  • VIPListName — Name of the list that contains VIP users who can only be blocked after manager approval.

Commands used

getList pan-os-register-user-tag

Flowchart

yes no yes yes Start Start Pan-os - Tag User - pan-os-register-user-tag Pan-os - Tag User pan-os-register-user-tag Is user in VIP list excluded from automated containment? Is user in VIP list exclu... Escalate - Manager approves quarantine for VIP user? Escalate - Manager approv... Done Done Is there a VIP username list to check? - IsListExist Is there a VIP username l... IsListExist Get VIP user list - getList Get VIP user list getList