Prisma SASE - Block URL

The playbook will handle the operation of blocking a URL within the organization. If a category is provided, the URL will be added to the list. If not, a new URL category will be created, and a new security rule that blocks that category.

Palo Alto Networks - Strata Cloud Manager · 14 tasks · 5 inputs · 29 outputs

Inputs

  • URL — List of URLs that are needed to be blocked.
  • CategoryName — The name of the predefined custom URL category.
  • Folder — Specify the scope for a newly created security rule to be applied. Remember, this input will only be used when there is no input to the CategoryName. Default: Shared
  • TSGID — Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
  • AutoCommit — Possible Values: True -> Will Commit and Push Configuration False -> Manual Push will be required. Else --> Will ignore the push section and continue the playbook.

Outputs

  • PrismaSase — The root context key for Prisma SASE integration output.
  • PrismaSase.SecurityRule — Created security rule.
  • PrismaSase.SecurityRule.action — Security rule action.
  • PrismaSase.SecurityRule.application — Security rule application.
  • PrismaSase.SecurityRule.category — Security rule category.
  • PrismaSase.SecurityRule.description — Security rule description.
  • PrismaSase.SecurityRule.destination — Security rule destination.
  • PrismaSase.SecurityRule.folder — Security rule folder.
  • PrismaSase.SecurityRule.from — Security rule from field (source zone(s)).
  • PrismaSase.SecurityRule.id — Security rule ID.
  • PrismaSase.SecurityRule.name — Security rule name.
  • PrismaSase.SecurityRule.position — Security rule position.
  • PrismaSase.SecurityRule.service — Security rule service.
  • PrismaSase.SecurityRule.source — Security rule source.
  • PrismaSase.SecurityRule.source_user — Security rule source user.
  • PrismaSase.SecurityRule.to — Security rule to field (destination zone(s)).
  • PrismaSase.SecurityRule.profile_setting — The Security rule group object in the rule.
  • PrismaSase.SecurityRule.profile_setting.group — Security rule group.
  • PrismaSase.CandidateConfig — Configuration job object.
  • PrismaSase.CandidateConfig.job_id — Configuration job ID.
  • PrismaSase.CandidateConfig.result — The configuration push result, e.g. OK, FAIL.
  • PrismaSase.CandidateConfig.details — The configuration push details.
  • PrismaSase.CustomURLCategory — The custom URL category object.
  • PrismaSase.CustomURLCategory.id — The URL category ID.
  • PrismaSase.CustomURLCategory.name — The URL category name.
  • PrismaSase.CustomURLCategory.folder — The URL category folder.
  • PrismaSase.CustomURLCategory.type — The URL category type.
  • PrismaSase.CustomURLCategory.list — The URL category match list.
  • PrismaSase.CustomURLCategory.description — The URL category description.

Commands used

prisma-sase-candidate-config-push prisma-sase-custom-url-category-create prisma-sase-custom-url-category-list prisma-sase-custom-url-category-update

Flowchart

Yes yes yes Auto Commit Manual Push Start Start Check if the URL Custom Category was defined Check if the URL Custom C... Updating URL Predfiened Category List Updating URL Predfiened C... Get the URL category List - prisma-sase-custom-url-category-list Get the URL category List prisma-sase-custom-url-catego... Was a URL to Block provided? Was a URL to Block provided? Done Done Creating a new Category Creating a new Category Is the URL already exist? Is the URL already exist? Create a new Custom URL Category - prisma-sase-custom-url-category-create Create a new Custom URL C... prisma-sase-custom-url-catego... Update the URL category - prisma-sase-custom-url-category-update Update the URL category prisma-sase-custom-url-catego... Push Config - prisma-sase-candidate-config-push Push Config prisma-sase-candidate-config-... Commit and push configuration to folders? Commit and push configura... Prisma SASE - Create or Edit Security Policy Rule - Prisma SASE - Create or Edit Security Policy Rule Prisma SASE - Create or E... Prisma SASE - Create or Edit ... Choose to commit and push configuration automatically Choose to commit and push...