Unblock Indicator - Infoblox Cloud

This playbook unblocks the given IP or domain by adding it to the given allow type custom list of the Infoblox Cloud platform.

Infoblox Threat Defense with DDI · 14 tasks · 4 inputs · 0 outputs

Inputs

  • ip_addresses — The IP addresses to unblock.
  • domains — The domains to unblock.
  • custom_list_name — Specify the name of the custom list to add the given IP addresses or domains to. Default is "Default Allow".
  • custom_list_type — Specify the type of the custom list to add the given IP addresses or domains to. Possible values are: default_allow, custom_list, threat_insight, threat_insight_nde. Default is "default_allow".

Commands used

infobloxcloud-customlist-indicator-remove infobloxcloud-unblock-domain infobloxcloud-unblock-ip

Flowchart

yes yes yes yes #error# #error# No Yes Start Start Is Infoblox Threat Defense with DDI integration enabled? Is Infoblox Threat Defens... Clear previous inputs - DeleteContext Clear previous inputs DeleteContext Check whether indicators are available in playbook input Check whether indicators ... Collect the IP or domain indicators to unblock. Collect the IP or domain ... Check for indicators Check for indicators Check that IP indicators are present or not Check that IP indicators ... Check that domain indicators are present or not Check that domain indicat... Unblock the IP indicators - infobloxcloud-unblock-ip Unblock the IP indicators infobloxcloud-unblock-ip Unblock the domain indicators - infobloxcloud-unblock-domain Unblock the domain indic... infobloxcloud-unblock-domain Done Done Do you want to remove the indicators from Block list? Do you want to remove the... Collect the information to remove indicators from block list Collect the information t... Remove the indicators from Block list - infobloxcloud-customlist-indicator-remove Remove the indicators fro... infobloxcloud-customlist-indi...