PAN-OS - Block IP - Custom Block Rule

This playbook blocks IP addresses using Custom Block Rules in Palo Alto Networks Panorama or Firewall. The playbook receives malicious IP addresses as inputs, creates a custom bi-directional rule to block them, and commits the configuration.

PAN-OS by Palo Alto Networks · 12 tasks · 3 inputs · 0 outputs

Inputs

  • LogForwarding — Panorama log forwarding object name
  • IP — IP address to block
  • AutoCommit — This input establishes whether to commit the configuration automatically. Yes - Commit automatically. No - Commit manually.

Commands used

pan-os-create-address pan-os-custom-block-rule

Flowchart

yes yes yes Start Start Palo Alto Networks PAN-OS enabled? Palo Alto Networks PAN-OS... Panorama - Create custom block rule - pan-os-custom-block-rule Panorama - Create custom ... pan-os-custom-block-rule Done Done Is there an IP to block? Is there an IP to block? PAN-OS - Create address object - pan-os-create-address PAN-OS - Create address o... pan-os-create-address PAN-OS Commit Configuration - PAN-OS Commit Configuration PAN-OS Commit Configuration PAN-OS Commit Configuration PAN-OS Commit Configuration - PAN-OS Commit Configuration PAN-OS Commit Configuration PAN-OS Commit Configuration AutoCommit defined? AutoCommit defined? Commit PAN-OS Instance manually Commit PAN-OS Instance ma... Panorama - Create custom block rule - pan-os-custom-block-rule Panorama - Create custom ... pan-os-custom-block-rule Commit PAN-OS Instance manually Commit PAN-OS Instance ma...