PAN-OS - Apply Security Profile to Policy Rule

This playbook is used to apply a PAN-OS security profile to a policy rule. The playbook performs the following tasks: - Accepts a rule name to apply the security profile to. - Applies the security profile to the rule if the rule exists. If not, creates the rule and applies. - Commits the configuration.

MITRE ATT&CK - Courses of Action · 17 tasks · 5 inputs · 0 outputs

Inputs

  • device-group — The device group to work on. Exists only in panorama!
  • profile_type — Security profile type. Can be 'data-filtering', 'file-blocking', 'spyware', 'url-filtering', 'virus, 'vulnerability', or wildfire-analysis.'
  • profile_name — The profile name to apply to the rule.
  • pre-post-rulebase — Determines whether the rule is a pre-rulebase or post-rulebase rule, according to the rule structure. Exists only in panorama!
  • tag — Tag for which to filter the rules.

Commands used

pan-os-apply-security-profile pan-os-list-rules

Flowchart

yes yes yes Start Start Is PAN-OS integration enabled? Is PAN-OS integration ena... Done Done PAN-OS Apply profile to a rule PAN-OS Apply profile to a... PAN-OS - Create Or Edit Rule - PAN-OS - Create Or Edit Rule PAN-OS - Create Or Edit Rule PAN-OS - Create Or Edit Rule PAN-OS Apply security profile to a rule - pan-os-apply-security-profile PAN-OS Apply security pro... pan-os-apply-security-profile Insert a rule name Insert a rule name Create rule automatically? Create rule automatically? Panorama list rules - pan-os-list-rules Panorama list rules pan-os-list-rules Does the rule exist? Does the rule exist? Manual - Create rule Manual - Create rule Set rule name - Set Set rule name Set Set rule name - Set Set rule name Set Insert rule name Insert rule name PAN-OS Commit Configuration - PAN-OS Commit Configuration PAN-OS Commit Configuration PAN-OS Commit Configuration PAN-OS Create rule PAN-OS Create rule Provide data for rule creation Provide data for rule cre...