Block URL - Generic Deprecated

Deprecated. Use 'Block URL - Generic v2' instead.

Common Playbooks · 14 tasks · 10 inputs · 0 outputs

Details

IDblock_url_-_generic
From Version5.0.0
Tasks14

README

Deprecated. Use ‘Block URL - Generic v2’ instead.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • PAN-OS - Block URL - Custom URL Category
  • PAN-OS - Block IP and URL - External Dynamic List
  • Add Indicator to Miner - Palo Alto MineMeld

Integrations

This playbook does not use any integrations.

Scripts

This playbook does not use any scripts.

Commands

  • zscaler-blacklist-url

Playbook Inputs

Name Description Default Value Required
URLBlacklistMiner The name of the URL block list Miner in Minemeld.   Optional
URL Array of malicious URLs to block.   Optional
URLListName URL list from the instance context with which to override the remote file. Demisto Remediation - URL EDL Optional
LogForwarding Log Forwarding object name.   Optional
EDLServerIP EDL server IP address.   Optional
AutoCommit This input establishes whether to commit the configuration automatically.
Yes - Commit automatically.
No - Commit manually.		 No Optional
CustomURLCategory Custom URL Category name. Demisto Remediation - Malicious URLs Optional
type Custom URL category type. Insert “URL List”/ “Category Match”.   Optional
device-group Device group for the Custom URL Category (Panorama instances).   Optional
categories The list of categories. Relevant from PAN-OS v9.x.   Optional

Playbook Outputs

There are no outputs for this playbook.

Playbook Image

Block URL - Generic

Inputs

  • URLBlacklistMiner — The name of the URL block list Miner in Minemeld.
  • URL — Array of malicious URLs to block.
  • URLListName — URL list from the instance context with which to override the remote file.
  • LogForwarding — Log Forwarding object name.
  • EDLServerIP — EDL server IP address.
  • AutoCommit — This input establishes whether to commit the configuration automatically. Yes - Commit automatically. No - Commit manually.
  • CustomURLCategory — Custom URL Category name.
  • type — Custom URL category type. Insert "URL List"/ "Category Match".
  • device-group — Device group for the Custom URL Category (Panorama instances).
  • categories — The list of categories. Relevant from PAN-OS v9.x.

Commands used

zscaler-blacklist-url

Flowchart

yes yes yes yes Start Start Done Done Block URLs Block URLs Is there a URL to block? Is there a URL to block? Add Indicator to Miner - Palo Alto MineMeld - Add Indicator to Miner - Palo Alto MineMeld Add Indicator to Miner - ... Add Indicator to Miner - Palo... Is Zscaler enabled? Is Zscaler enabled? Block URL with Zscaler - zscaler-blacklist-url Block URL with Zscaler zscaler-blacklist-url PAN-OS - Block URL - Custom URL Category - PAN-OS - Block URL - Custom URL Category PAN-OS - Block URL - Cust... PAN-OS - Block URL - Custom U... PAN-OS - Block IP and URL - External Dynamic List - PAN-OS - Block IP and URL - External Dynamic List PAN-OS - Block IP and URL... PAN-OS - Block IP and URL - E... MineMeld MineMeld PAN-OS PAN-OS Zscaler Zscaler Use EDL? Use EDL? Use Custom URL Category? Use Custom URL Category?

Source

playbook-Block_URL_-_Generic.yml playbook-Block_URL_-_Generic_v2.yml playbook-Block_URL_-_Generic_v2_README.md
Download History Raw 
id: block_url_-_generic
version: -1
name: Block URL - Generic
description: Deprecated. Use 'Block URL - Generic v2' instead.
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: 59b1a1c8-41a6-4b2f-8bb4-24e4bd1036d8
    type: start
    task:
      id: 59b1a1c8-41a6-4b2f-8bb4-24e4bd1036d8
      version: -1
      name: ""
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "8"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 377.5,
          "y": 40
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "2":
    id: "2"
    taskid: 5ba81cb8-30c1-4d31-8af6-45f937d1d58b
    type: title
    task:
      id: 5ba81cb8-30c1-4d31-8af6-45f937d1d58b
      version: -1
      name: Done
      type: title
      iscommand: false
      brand: ""
      description: ''
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 377.5,
          "y": 1150
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "5":
    id: "5"
    taskid: 21e74ef4-5adb-44a4-874b-2bedbd59a051
    type: title
    task:
      id: 21e74ef4-5adb-44a4-874b-2bedbd59a051
      version: -1
      name: Block URLs
      type: title
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "16"
      - "17"
      - "18"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 377.5,
          "y": 425
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "8":
    id: "8"
    taskid: 6685a431-51a7-4bf8-8679-5d079a8dca85
    type: condition
    task:
      id: 6685a431-51a7-4bf8-8679-5d079a8dca85
      version: -1
      name: Is there a URL to block?
      description: Verify that the playbook input includes at least one URL to block.
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "2"
      "yes":
      - "5"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isExists
          left:
            value:
              simple: inputs.URL
            iscontext: true
    view: |-
      {
        "position": {
          "x": 377.5,
          "y": 175
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "11":
    id: "11"
    taskid: 4576e191-0508-4140-8ed3-0503e6232d9b
    type: playbook
    task:
      id: 4576e191-0508-4140-8ed3-0503e6232d9b
      version: -1
      name: Add Indicator to Miner - Palo Alto MineMeld
      playbookName: Add Indicator to Miner - Palo Alto MineMeld
      type: playbook
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "2"
    separatecontext: true
    loop:
      iscommand: false
      exitCondition: ""
      wait: 1
      max: 0
    view: |-
      {
        "position": {
          "x": 110,
          "y": 710
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: true
    quietmode: 0
  "12":
    id: "12"
    taskid: 4270c78b-8b35-44c8-832a-11b82fbbd9c4
    type: condition
    task:
      id: 4270c78b-8b35-44c8-832a-11b82fbbd9c4
      version: -1
      name: Is Zscaler enabled?
      description: Verify that there is a valid instance of Zscaler enabled.
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "2"
      "yes":
      - "13"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isExists
          left:
            value:
              complex:
                root: modules
                filters:
                - - operator: isEqualString
                    left:
                      value:
                        simple: modules.brand
                      iscontext: true
                    right:
                      value:
                        simple: Zscaler
                    ignorecase: true
                - - operator: isEqualString
                    left:
                      value:
                        simple: modules.state
                      iscontext: true
                    right:
                      value:
                        simple: active
                    ignorecase: true
                accessor: brand
            iscontext: true
          ignorecase: true
    view: |-
      {
        "position": {
          "x": 810,
          "y": 730
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "13":
    id: "13"
    taskid: 6c17067d-ac81-454b-8c4b-77e38811443e
    type: regular
    task:
      id: 6c17067d-ac81-454b-8c4b-77e38811443e
      version: -1
      name: Block URL with Zscaler
      description: Block the URLS using Zscaler.
      script: '|||zscaler-blacklist-url'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "2"
    scriptarguments:
      url:
        complex:
          root: inputs.URL
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 810,
          "y": 980
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "14":
    id: "14"
    taskid: fa3391b8-020e-4f53-8576-7445bf741452
    type: playbook
    task:
      id: fa3391b8-020e-4f53-8576-7445bf741452
      version: -1
      name: PAN-OS - Block URL - Custom URL Category
      playbookName: PAN-OS - Block URL - Custom URL Category
      type: playbook
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "2"
    separatecontext: true
    loop:
      iscommand: false
      exitCondition: ""
      wait: 1
      max: 0
    view: |-
      {
        "position": {
          "x": -800,
          "y": 980
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: true
    quietmode: 0
  "15":
    id: "15"
    taskid: 7cc51964-5d19-48ce-8bc3-7403438e6dfe
    type: playbook
    task:
      id: 7cc51964-5d19-48ce-8bc3-7403438e6dfe
      version: -1
      name: PAN-OS - Block IP and URL - External Dynamic List
      playbookName: PAN-OS - Block IP and URL - External Dynamic List
      type: playbook
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "2"
    separatecontext: true
    loop:
      iscommand: false
      exitCondition: ""
      wait: 1
      max: 0
    view: |-
      {
        "position": {
          "x": -310,
          "y": 980
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: true
    quietmode: 0
  "16":
    id: "16"
    taskid: 258ee49c-7ea8-4d92-8054-dd0844396174
    type: title
    task:
      id: 258ee49c-7ea8-4d92-8054-dd0844396174
      version: -1
      name: MineMeld
      type: title
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "11"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 110,
          "y": 570
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "17":
    id: "17"
    taskid: e92be57f-773d-496a-80f0-b1bc292b5355
    type: title
    task:
      id: e92be57f-773d-496a-80f0-b1bc292b5355
      version: -1
      name: PAN-OS
      type: title
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "19"
      - "20"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": -560,
          "y": 570
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "18":
    id: "18"
    taskid: 18d080a9-f73c-4394-8f59-8cb602fd1604
    type: title
    task:
      id: 18d080a9-f73c-4394-8f59-8cb602fd1604
      version: -1
      name: Zscaler
      type: title
      iscommand: false
      brand: ""
      description: ''
    nexttasks:
      '#none#':
      - "12"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 810,
          "y": 570
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "19":
    id: "19"
    taskid: 663d099d-dde1-4521-8ff2-18fabf06d99e
    type: condition
    task:
      id: 663d099d-dde1-4521-8ff2-18fabf06d99e
      version: -1
      name: Use EDL?
      description: ""
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "2"
      "yes":
      - "15"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isNotEmpty
          left:
            value:
              simple: inputs.EDLServerIP
            iscontext: true
    view: |-
      {
        "position": {
          "x": -310,
          "y": 710
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
  "20":
    id: "20"
    taskid: 61ddf243-2502-4c31-8ae3-9333c488d492
    type: condition
    task:
      id: 61ddf243-2502-4c31-8ae3-9333c488d492
      version: -1
      name: Use Custom URL Category?
      description: ""
      type: condition
      iscommand: false
      brand: ""
    nexttasks:
      '#default#':
      - "2"
      "yes":
      - "14"
    separatecontext: false
    conditions:
    - label: "yes"
      condition:
      - - operator: isNotEmpty
          left:
            value:
              simple: inputs.type
            iscontext: true
    view: |-
      {
        "position": {
          "x": -800,
          "y": 710
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
    skipunavailable: false
    quietmode: 0
system: true
view: |-
  {
    "linkLabelsPosition": {
      "12_2_#default#": 0.48,
      "8_2_#default#": 0.43
    },
    "paper": {
      "dimensions": {
        "height": 1175,
        "width": 1990,
        "x": -800,
        "y": 40
      }
    }
  }
inputs:
- key: URLBlacklistMiner
  value: {}
  required: false
  description: The name of the URL block list Miner in  Minemeld.
  playbookInputQuery:
- key: URL
  value: {}
  required: false
  description: Array of malicious URLs to block.
  playbookInputQuery:
- key: URLListName
  value:
    simple: Demisto Remediation - URL EDL
  required: false
  description: URL list from the instance context with which to override the remote file.
  playbookInputQuery:
- key: LogForwarding
  value: {}
  required: false
  description: Log Forwarding object name.
  playbookInputQuery:
- key: EDLServerIP
  value: {}
  required: false
  description: EDL server IP address.
  playbookInputQuery:
- key: AutoCommit
  value:
    simple: "No"
  required: false
  description: |-
    This input establishes whether to commit the configuration automatically.
    Yes - Commit automatically.
    No - Commit manually.
  playbookInputQuery:
- key: CustomURLCategory
  value:
    simple: Demisto Remediation - Malicious URLs
  required: false
  description: Custom URL Category name.
  playbookInputQuery:
- key: type
  value: {}
  required: false
  description: Custom URL category type. Insert "URL List"/ "Category Match".
  playbookInputQuery:
- key: device-group
  value: {}
  required: false
  description: Device group for the Custom URL Category (Panorama instances).
  playbookInputQuery:
- key: categories
  value: {}
  required: false
  description: The list of categories. Relevant from PAN-OS v9.x.
  playbookInputQuery:
outputs: []
fromversion: 5.0.0
tests:
- block_indicators_-_generic_-_test
marketplaces:
- xsoar
- marketplacev2
- platform
deprecated: true