Block IP - Generic Deprecated Hidden

Deprecated. Use "Block IP - Generic v2" playbook instead. This playbook blocks malicious IPs using all integrations that you have enabled. Supported integrations for this playbook: * Check Point Firewall * Palo Alto Networks Minemeld * Palo Alto Networks Panorama * Zscaler

Deprecated Content (Deprecated) · 11 tasks · 2 inputs · 28 outputs

Inputs

  • IPBlacklistMiner — The name of the IP block list Miner in Minemeld.
  • IP — Array of malicious IPs to block.

Outputs

  • CheckpointFWRule.Destination — Collection of Network objects identified by the name or UID. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard.
  • CheckpointFWRule.DestinationNegate — True if negate is set for destination.
  • PanoramaRule.Direction — Direction of the Panorama rule, could be 'to','from', 'both'
  • PanoramaRule.IP — The IP the Panorama rule blocks
  • CheckpointFWRule.Name — Object name. Should be unique in domain.
  • PanoramaRule.Name — Name of the Panorama rule
  • CheckpointFWRule.UID — Object unique identifier.
  • PanoramaRule — List of Panorama rules
  • CheckpointFWRule.Type — Type of the object.
  • CheckpointFWRule.Action — Accept, Drop, Apply Layer, Ask, Info. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard.
  • CheckpointFWRule.ActionSetting — Action settings.
  • CheckpointFWRule.CustomFields — Custom fields.
  • CheckpointFWRule.Data — How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard.
  • CheckpointFWRule.DataDirection — On which direction the file types processing is applied.
  • CheckpointFWRule.DataNegate — True if negate is set for data.
  • CheckpointFWRule.Domain — Information about the domain the object belongs to.
  • CheckpointFWRule.Enabled — Enable/Disable the rule.
  • CheckpointFWRule.Hits — Hits count object.
  • CheckpointFWRule.Data.Name — Object name. Should be unique in domain.
  • CheckpointFWRule.Data.Domain — Information about the domain the object belongs to.
  • CheckpointFWRule.Domain.Name — Object name. Should be unique in domain.
  • CheckpointFWRule.Domain.UID — Object unique identifier.
  • CheckpointFWRule.Domain.Type — Domain type.
  • CheckpointFWRule.Hits.FirstDate — First of hits.
  • CheckpointFWRule.Hits.LastDate — Last date of hits.
  • CheckpointFWRule.Hits.Level — Level of hits.
  • CheckpointFWRule.Hits.Percentage — Percentage of hits
  • CheckpointFWRule.Hits.Value — Value of hits.

Commands used

checkpoint-block-ip zscaler-blacklist-ip

Flowchart

yes yes yes yes Start Start Done Done Block IPs Block IPs Block IP with Check Point Firewall - checkpoint-block-ip Block IP with Check Point... checkpoint-block-ip Is Check Point Firewall enabled? Is Check Point Firewall e... Is there an IP to block? Is there an IP to block? Is Palo Alto Networks Panorama enabled? Is Palo Alto Networks Pan... Block IP with Palo Alto Networks Panorama - PanoramaBlockIP Block IP with Palo Alto N... PanoramaBlockIP Add Indicator to Miner - Minemeld - Add Indicator to Miner - Palo Alto MineMeld Add Indicator to Miner - ... Add Indicator to Miner - Palo... Is Zscaler enabled? Is Zscaler enabled? Block IP with Zscaler - zscaler-blacklist-ip Block IP with Zscaler zscaler-blacklist-ip