PAN-OS - Add Domains EDL To Anti-Spyware
This playbook add domains EDL to Panorama Anti-Spyware. It assigns External Dynamic List URLs that contain domains to block to Panorama Anti-Spyware. You can create an External Dynamic List (EDL) and add domains to it using the Cortex XSOAR pack called "Generic Export Indicators Service". We recommend using this playbook as a one-time job. Once EDL is created and assigned to anti-spyware, domains can be blocked by adding them to the EDL.
PAN-OS by Palo Alto Networks · 11 tasks · 7 inputs · 0 outputs
Inputs
EDL_URL— The URL from which to pull the EDL.Add_To_Existing_PAN-OS_EDL— Set to "true" to use the existing PAN-OS EDL.PAN-OS_EDL_Name— PAN-OS EDL name to create/edit if it exists (depending on the value in Add_To_Existing_PAN-OS_EDL).Device_Group— The device group for which to return addresses for the EDL (Panorama instances).Certificate_Profile— The certificate profile name for the URL that was previously uploaded to PAN OS.Anti_Spyware_Profile— Name of the anti-spyware profile to create OR to edit if it exists (depending on the value in Use_Existing_AntiSpyware_Profile).Use_Existing_AntiSpyware_Profile— Set to "true" to create a new anti-spyware profile.
Commands used
pan-os-apply-dns-signature-policy
pan-os-create-anti-spyware-best-practice-profile
pan-os-create-edl
pan-os-edit-edl
pan-os-get-edl