Prisma SASE - Add IPs to Static Address Group

This playbook appends a Static Address Group with provided IPs.

Palo Alto Networks - Strata Cloud Manager · 11 tasks · 5 inputs · 19 outputs

Details

ID	`Prisma SASE - Add IPs to Static Address Group`
From Version	6.8.0
Tasks	11

README

This playbook appends a Static Address Group with provided IPs.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

Prisma SASE - Create Address Object

Integrations

PrismaSASE

Scripts

This playbook does not use any scripts.

Commands

prisma-sase-address-group-list
prisma-sase-candidate-config-push
prisma-sase-address-group-update

Playbook Inputs

Name	Description	Default Value	Required
TSGID	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.		Optional
AutoCommit	Possible Values: True -> Will commit and push configuration. False -> Manual push will be required. Else –> Will ignore the push section and continue the playbook.		Optional
IP	A comma-separated list of IP addresses.		Optional
AddressGroupName	The address group name to be appanded.		Optional
Folder	The configuration folder group setting. The default value is ‘Shared’.	Shared	Optional

Playbook Outputs

Path	Description	Type
PrismaSase.AddressGroup	The root context key for Prisma SASE integration output.	unknown
PrismaSase.AddressGroup.id	The address group ID.	unknown
PrismaSase.AddressGroup.name	The address group name.	unknown
PrismaSase.AddressGroup.description	The address group description.	unknown
PrismaSase.AddressGroup.addresses	The address group addresses.	unknown
PrismaSase.AddressGroup.dynamic_filter	The address group filter.	unknown
PrismaSase	The root context key for Prisma SASE integration output.	unknown
PrismaSase.Address	Created address object.	unknown
PrismaSase.Address.description	Address description.	unknown
PrismaSase.Address.folder	Address folder.	unknown
PrismaSase.Address.id	Address ID.	unknown
PrismaSase.Address.type	Address type.	unknown
PrismaSase.Address.address_value	Address value.	unknown
PrismaSase.Address.name	Address name.	unknown
PrismaSase.CandidateConfig	Configuration job object.	unknown
PrismaSase.CandidateConfig.job_id	Configuration job ID.	unknown
PrismaSase.CandidateConfig.result	The configuration push result, e.g. OK, FAIL.	unknown
PrismaSase.CandidateConfig.details	The configuration push details.	unknown
PrismaSase.AddressGroup.folder	The address group folder.	unknown

Playbook Image

Prisma SASE - Add IPs to Static Address Group

Inputs

TSGID — Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
AutoCommit — Possible Values: True -> Will commit and push configuration. False -> Manual push will be required. Else --> Will ignore the push section and continue the playbook.
IP — A comma-separated list of IP addresses.
AddressGroupName — The address group name to be appanded.
Folder — The configuration folder group setting. The default value is 'Shared'.

Outputs

PrismaSase.AddressGroup — The root context key for Prisma SASE integration output.
PrismaSase.AddressGroup.id — The address group ID.
PrismaSase.AddressGroup.name — The address group name.
PrismaSase.AddressGroup.description — The address group description.
PrismaSase.AddressGroup.addresses — The address group addresses.
PrismaSase.AddressGroup.dynamic_filter — The address group filter.
PrismaSase — The root context key for Prisma SASE integration output.
PrismaSase.Address — Created address object.
PrismaSase.Address.description — Address description.
PrismaSase.Address.folder — Address folder.
PrismaSase.Address.id — Address ID.
PrismaSase.Address.type — Address type.
PrismaSase.Address.address_value — Address value.
PrismaSase.Address.name — Address name.
PrismaSase.CandidateConfig — Configuration job object.
PrismaSase.CandidateConfig.job_id — Configuration job ID.
PrismaSase.CandidateConfig.result — The configuration push result, e.g. OK, FAIL.
PrismaSase.CandidateConfig.details — The configuration push details.
PrismaSase.AddressGroup.folder — The address group folder.

Commands used

prisma-sase-address-group-list prisma-sase-address-group-update prisma-sase-candidate-config-push

Flowchart

Source

playbook-Prisma_SASE_-_Add_IPs_to_Static_Address_Group.yml

Download History Raw

id: Prisma SASE - Add IPs to Static Address Group
version: -1
contentitemexportablefields:
  contentitemfields: {}
name: Prisma SASE - Add IPs to Static Address Group
description: 'This playbook appends a Static Address Group with provided IPs. '
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: 8dc5f80f-7160-4fa4-8692-3ee097131ab4
    type: start
    task:
      id: 8dc5f80f-7160-4fa4-8692-3ee097131ab4
      version: -1
      name: ""
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "2"
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 340,
          "y": -270
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "1":
    id: "1"
    taskid: eb27ca46-c816-4673-8290-e860fd2e2419
    type: regular
    task:
      id: eb27ca46-c816-4673-8290-e860fd2e2419
      version: -1
      name: Get an Address Group
      description: Lists all address groups.
      script: '|||prisma-sase-address-group-list'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "5"
    scriptarguments:
      folder:
        complex:
          root: inputs.Folder
      name:
        complex:
          root: inputs.AddressGroupName
      tsg_id:
        complex:
          root: inputs.TSGID
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 550,
          "y": 220
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "2":
    id: "2"
    taskid: 052be5c2-3071-431f-890a-e50ddc44cfe1
    type: condition
    task:
      id: 052be5c2-3071-431f-890a-e50ddc44cfe1
      version: -1
      name: Was an IP provided?
      description: Was an IP provided?
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "3"
      "yes":
      - "4"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isNotEmpty
          left:
            value:
              simple: inputs.IP
            iscontext: true
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 340,
          "y": -140
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "3":
    id: "3"
    taskid: b0ac52d5-0098-41d0-8abf-429715147d43
    type: title
    task:
      id: b0ac52d5-0098-41d0-8abf-429715147d43
      version: -1
      name: Done
      type: title
      iscommand: false
      brand: ""
      description: ''
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 340,
          "y": 1480
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "4":
    id: "4"
    taskid: 57101bcc-571c-484a-8269-6ee1c31a9178
    type: condition
    task:
      id: 57101bcc-571c-484a-8269-6ee1c31a9178
      version: -1
      name: Is there an Address Group?
      description: Is there an address group?
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "3"
      "yes":
      - "1"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isNotEmpty
          left:
            value:
              simple: inputs.AddressGroupName
            iscontext: true
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 550,
          "y": 30
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "5":
    id: "5"
    taskid: 6814beeb-bd9e-40ec-8098-73edaef730e9
    type: condition
    task:
      id: 6814beeb-bd9e-40ec-8098-73edaef730e9
      version: -1
      name: Was the Group ID found and the IPs not there?
      description: Was the Group ID found and the IPs not there?
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "3"
      "yes":
      - "8"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isNotEmpty
          left:
            value:
              simple: PrismaSase.AddressGroup.id
            iscontext: true
      - - operator: notIn
          left:
            value:
              simple: inputs.IP
            iscontext: true
          right:
            value:
              simple: PrismaSase.AddressGroup.addresses
            iscontext: true
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 550,
          "y": 390
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "6":
    id: "6"
    taskid: 89137a69-17b1-442c-8b97-8e6090c4216b
    type: regular
    task:
      id: 89137a69-17b1-442c-8b97-8e6090c4216b
      version: -1
      name: Update address group
      description: Update an existing address group.
      script: '|||prisma-sase-address-group-update'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "10"
    scriptarguments:
      folder:
        complex:
          root: inputs.Folder
      group_id:
        complex:
          root: PrismaSase.AddressGroup
          accessor: id
      static_addresses:
        complex:
          root: inputs.IP
          transformers:
          - operator: uniq
      tsg_id:
        complex:
          root: inputs.TSGID
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 550,
          "y": 750
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "7":
    id: "7"
    taskid: 56aafb2d-6019-47c4-8be8-2ccd2e3e72c4
    type: regular
    task:
      id: 56aafb2d-6019-47c4-8be8-2ccd2e3e72c4
      version: -1
      name: Push Config
      description: Push the candidate configuration.
      script: '|||prisma-sase-candidate-config-push'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "3"
    scriptarguments:
      folders:
        simple: Remote Networks, Mobile Users, Service Connections
      tsg_id:
        complex:
          root: inputs.TSGID
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 550,
          "y": 1270
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "8":
    id: "8"
    taskid: da1f402d-606d-4448-8805-0ee35ad05444
    type: playbook
    task:
      id: da1f402d-606d-4448-8805-0ee35ad05444
      version: -1
      name: Prisma SASE - Create Address Object
      description: This playbook creates new address objects in the Prisma SASE Object section. Those objects can be used later on in other objects such as Security Rules.
      playbookName: Prisma SASE - Create Address Object
      type: playbook
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "6"
    scriptarguments:
      AutoCommit:
        simple: Else
      Folder:
        complex:
          root: inputs.Folder
      IP:
        complex:
          root: inputs.IP
          filters:
          - - operator: notIn
              left:
                value:
                  simple: inputs.IP
                iscontext: true
              right:
                value:
                  simple: PrismaSase.AddressGroup.addresses
                iscontext: true
          transformers:
          - operator: uniq
      Type:
        simple: ip_netmask
      TSGID:
        complex:
          root: inputs.TSGID
      limit:
        simple: "50"
    separatecontext: true
    continueonerrortype: ""
    loop:
      iscommand: false
      exitCondition: ""
      wait: 1
      max: 0
    view: |-
      {
        "position": {
          "x": 550,
          "y": 580
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "10":
    id: "10"
    taskid: da760a85-42a1-4a17-8d6f-cf74f20579f6
    type: condition
    task:
      id: da760a85-42a1-4a17-8d6f-cf74f20579f6
      version: -1
      name: Commit and push configuration to folders?
      description: Commit and push configuration to folders?
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "3"
      Auto Commit:
      - "7"
      Manual:
      - "12"
    separatecontext: false
    conditions:
    - label: Auto Commit
      condition:
      - - operator: isEqualString
          left:
            value:
              simple: inputs.AutoCommit
            iscontext: true
          right:
            value:
              simple: "True"
          ignorecase: true
    - label: Manual
      condition:
      - - operator: isEqualString
          left:
            value:
              simple: inputs.AutoCommit
            iscontext: true
          right:
            value:
              simple: "False"
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 550,
          "y": 910
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
  "12":
    id: "12"
    taskid: 5161b42f-d127-441e-854b-319408faaee8
    type: condition
    task:
      id: 5161b42f-d127-441e-854b-319408faaee8
      version: -1
      name: Choose to commit and push configuration automatically
      description: Choose to commit and push configuration automatically
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "3"
      Push:
      - "7"
    separatecontext: false
    continueonerrortype: ""
    view: |-
      {
        "position": {
          "x": 960,
          "y": 1090
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    message:
      to:
      subject:
      body:
      methods: []
      format: ""
      bcc:
      cc:
      timings:
        retriescount: 2
        retriesinterval: 360
        completeafterreplies: 1
        completeafterv2: true
        completeaftersla: false
      replyOptions:
      - Push
      - "No"
    skipunavailable: false
    quietmode: 0
    isoversize: false
    isautoswitchedtoquietmode: false
system: true
view: |-
  {
    "linkLabelsPosition": {},
    "paper": {
      "dimensions": {
        "height": 1815,
        "width": 1000,
        "x": 340,
        "y": -270
      }
    }
  }
inputs:
- key: TSGID
  value: {}
  required: false
  description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
  playbookInputQuery:
- key: AutoCommit
  value: {}
  required: false
  description: |-
    Possible Values:
    True -> Will commit and push configuration.
    False -> Manual push will be required.
    Else --> Will ignore the push section and continue the playbook.
  playbookInputQuery:
- key: IP
  value: {}
  required: false
  description: A comma-separated list of IP addresses.
  playbookInputQuery:
- key: AddressGroupName
  value: {}
  required: false
  description: The address group name to be appanded.
  playbookInputQuery:
- key: Folder
  value:
    simple: Shared
  required: false
  description: |-
    The configuration folder group setting.
    The default value is 'Shared'.
  playbookInputQuery:
outputs:
- contextPath: PrismaSase.AddressGroup
  description: The root context key for Prisma SASE integration output.
  type: unknown
- contextPath: PrismaSase.AddressGroup.id
  description: The address group ID.
- contextPath: PrismaSase.AddressGroup.name
  description: The address group name.
- contextPath: PrismaSase.AddressGroup.description
  description: The address group description.
- contextPath: PrismaSase.AddressGroup.addresses
  description: The address group addresses.
- contextPath: PrismaSase.AddressGroup.dynamic_filter
  description: The address group filter.
- contextPath: PrismaSase
  description: The root context key for Prisma SASE integration output.
  type: unknown
- contextPath: PrismaSase.Address
  description: Created address object.
- contextPath: PrismaSase.Address.description
  description: Address description.
- contextPath: PrismaSase.Address.folder
  description: Address folder.
- contextPath: PrismaSase.Address.id
  description: Address ID.
- contextPath: PrismaSase.Address.type
  description: Address type.
- contextPath: PrismaSase.Address.address_value
  description: Address value.
- contextPath: PrismaSase.Address.name
  description: Address name.
- contextPath: PrismaSase.CandidateConfig
  description: Configuration job object.
  type: unknown
- contextPath: PrismaSase.CandidateConfig.job_id
  description: Configuration job ID.
- contextPath: PrismaSase.CandidateConfig.result
  description: The configuration push result, e.g. OK, FAIL.
- contextPath: PrismaSase.CandidateConfig.details
  description: The configuration push details.
- contextPath: PrismaSase.AddressGroup.folder
  description: The address group folder.
tests:
- No tests (auto formatted)
fromversion: 6.8.0
supportedModules:
- agentix
- xsiam
- edr
- cloud
- cloud_runtime_security