id: block_url_-_generic version: -1 name: Block URL - Generic description: Deprecated. Use 'Block URL - Generic v2' instead. starttaskid: "0" tasks: "0": id: "0" taskid: 59b1a1c8-41a6-4b2f-8bb4-24e4bd1036d8 type: start task: id: 59b1a1c8-41a6-4b2f-8bb4-24e4bd1036d8 version: -1 name: "" iscommand: false brand: "" description: '' nexttasks: '#none#': - "8" separatecontext: false view: |- { "position": { "x": 377.5, "y": 40 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "2": id: "2" taskid: 5ba81cb8-30c1-4d31-8af6-45f937d1d58b type: title task: id: 5ba81cb8-30c1-4d31-8af6-45f937d1d58b version: -1 name: Done type: title iscommand: false brand: "" description: '' separatecontext: false view: |- { "position": { "x": 377.5, "y": 1150 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "5": id: "5" taskid: 21e74ef4-5adb-44a4-874b-2bedbd59a051 type: title task: id: 21e74ef4-5adb-44a4-874b-2bedbd59a051 version: -1 name: Block URLs type: title iscommand: false brand: "" description: '' nexttasks: '#none#': - "16" - "17" - "18" separatecontext: false view: |- { "position": { "x": 377.5, "y": 425 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "8": id: "8" taskid: 6685a431-51a7-4bf8-8679-5d079a8dca85 type: condition task: id: 6685a431-51a7-4bf8-8679-5d079a8dca85 version: -1 name: Is there a URL to block? description: Verify that the playbook input includes at least one URL to block. type: condition iscommand: false brand: "" nexttasks: '#default#': - "2" "yes": - "5" separatecontext: false conditions: - label: "yes" condition: - - operator: isExists left: value: simple: inputs.URL iscontext: true view: |- { "position": { "x": 377.5, "y": 175 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "11": id: "11" taskid: 4576e191-0508-4140-8ed3-0503e6232d9b type: playbook task: id: 4576e191-0508-4140-8ed3-0503e6232d9b version: -1 name: Add Indicator to Miner - Palo Alto MineMeld playbookName: Add Indicator to Miner - Palo Alto MineMeld type: playbook iscommand: false brand: "" description: '' nexttasks: '#none#': - "2" separatecontext: true loop: iscommand: false exitCondition: "" wait: 1 max: 0 view: |- { "position": { "x": 110, "y": 710 } } note: false timertriggers: [] ignoreworker: false skipunavailable: true quietmode: 0 "12": id: "12" taskid: 4270c78b-8b35-44c8-832a-11b82fbbd9c4 type: condition task: id: 4270c78b-8b35-44c8-832a-11b82fbbd9c4 version: -1 name: Is Zscaler enabled? description: Verify that there is a valid instance of Zscaler enabled. type: condition iscommand: false brand: "" nexttasks: '#default#': - "2" "yes": - "13" separatecontext: false conditions: - label: "yes" condition: - - operator: isExists left: value: complex: root: modules filters: - - operator: isEqualString left: value: simple: modules.brand iscontext: true right: value: simple: Zscaler ignorecase: true - - operator: isEqualString left: value: simple: modules.state iscontext: true right: value: simple: active ignorecase: true accessor: brand iscontext: true ignorecase: true view: |- { "position": { "x": 810, "y": 730 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "13": id: "13" taskid: 6c17067d-ac81-454b-8c4b-77e38811443e type: regular task: id: 6c17067d-ac81-454b-8c4b-77e38811443e version: -1 name: Block URL with Zscaler description: Block the URLS using Zscaler. script: '|||zscaler-blacklist-url' type: regular iscommand: true brand: "" nexttasks: '#none#': - "2" scriptarguments: url: complex: root: inputs.URL separatecontext: false view: |- { "position": { "x": 810, "y": 980 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "14": id: "14" taskid: fa3391b8-020e-4f53-8576-7445bf741452 type: playbook task: id: fa3391b8-020e-4f53-8576-7445bf741452 version: -1 name: PAN-OS - Block URL - Custom URL Category playbookName: PAN-OS - Block URL - Custom URL Category type: playbook iscommand: false brand: "" description: '' nexttasks: '#none#': - "2" separatecontext: true loop: iscommand: false exitCondition: "" wait: 1 max: 0 view: |- { "position": { "x": -800, "y": 980 } } note: false timertriggers: [] ignoreworker: false skipunavailable: true quietmode: 0 "15": id: "15" taskid: 7cc51964-5d19-48ce-8bc3-7403438e6dfe type: playbook task: id: 7cc51964-5d19-48ce-8bc3-7403438e6dfe version: -1 name: PAN-OS - Block IP and URL - External Dynamic List playbookName: PAN-OS - Block IP and URL - External Dynamic List type: playbook iscommand: false brand: "" description: '' nexttasks: '#none#': - "2" separatecontext: true loop: iscommand: false exitCondition: "" wait: 1 max: 0 view: |- { "position": { "x": -310, "y": 980 } } note: false timertriggers: [] ignoreworker: false skipunavailable: true quietmode: 0 "16": id: "16" taskid: 258ee49c-7ea8-4d92-8054-dd0844396174 type: title task: id: 258ee49c-7ea8-4d92-8054-dd0844396174 version: -1 name: MineMeld type: title iscommand: false brand: "" description: '' nexttasks: '#none#': - "11" separatecontext: false view: |- { "position": { "x": 110, "y": 570 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "17": id: "17" taskid: e92be57f-773d-496a-80f0-b1bc292b5355 type: title task: id: e92be57f-773d-496a-80f0-b1bc292b5355 version: -1 name: PAN-OS type: title iscommand: false brand: "" description: '' nexttasks: '#none#': - "19" - "20" separatecontext: false view: |- { "position": { "x": -560, "y": 570 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "18": id: "18" taskid: 18d080a9-f73c-4394-8f59-8cb602fd1604 type: title task: id: 18d080a9-f73c-4394-8f59-8cb602fd1604 version: -1 name: Zscaler type: title iscommand: false brand: "" description: '' nexttasks: '#none#': - "12" separatecontext: false view: |- { "position": { "x": 810, "y": 570 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "19": id: "19" taskid: 663d099d-dde1-4521-8ff2-18fabf06d99e type: condition task: id: 663d099d-dde1-4521-8ff2-18fabf06d99e version: -1 name: Use EDL? description: "" type: condition iscommand: false brand: "" nexttasks: '#default#': - "2" "yes": - "15" separatecontext: false conditions: - label: "yes" condition: - - operator: isNotEmpty left: value: simple: inputs.EDLServerIP iscontext: true view: |- { "position": { "x": -310, "y": 710 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 "20": id: "20" taskid: 61ddf243-2502-4c31-8ae3-9333c488d492 type: condition task: id: 61ddf243-2502-4c31-8ae3-9333c488d492 version: -1 name: Use Custom URL Category? description: "" type: condition iscommand: false brand: "" nexttasks: '#default#': - "2" "yes": - "14" separatecontext: false conditions: - label: "yes" condition: - - operator: isNotEmpty left: value: simple: inputs.type iscontext: true view: |- { "position": { "x": -800, "y": 710 } } note: false timertriggers: [] ignoreworker: false skipunavailable: false quietmode: 0 system: true view: |- { "linkLabelsPosition": { "12_2_#default#": 0.48, "8_2_#default#": 0.43 }, "paper": { "dimensions": { "height": 1175, "width": 1990, "x": -800, "y": 40 } } } inputs: - key: URLBlacklistMiner value: {} required: false description: The name of the URL block list Miner in Minemeld. playbookInputQuery: - key: URL value: {} required: false description: Array of malicious URLs to block. playbookInputQuery: - key: URLListName value: simple: Demisto Remediation - URL EDL required: false description: URL list from the instance context with which to override the remote file. playbookInputQuery: - key: LogForwarding value: {} required: false description: Log Forwarding object name. playbookInputQuery: - key: EDLServerIP value: {} required: false description: EDL server IP address. playbookInputQuery: - key: AutoCommit value: simple: "No" required: false description: |- This input establishes whether to commit the configuration automatically. Yes - Commit automatically. No - Commit manually. playbookInputQuery: - key: CustomURLCategory value: simple: Demisto Remediation - Malicious URLs required: false description: Custom URL Category name. playbookInputQuery: - key: type value: {} required: false description: Custom URL category type. Insert "URL List"/ "Category Match". playbookInputQuery: - key: device-group value: {} required: false description: Device group for the Custom URL Category (Panorama instances). playbookInputQuery: - key: categories value: {} required: false description: The list of categories. Relevant from PAN-OS v9.x. playbookInputQuery: outputs: [] fromversion: 5.0.0 tests: - block_indicators_-_generic_-_test marketplaces: - xsoar - marketplacev2 - platform deprecated: true