Block IP using Panorama Integration

Himangi — Fri, 16 Jun 2023 10:25:36 GMT

Hi,

I have integrated Panorama with XSOAR, instance is successfully created.

Now I have to block IP using this integration. I want to block ips just using panorama xsoar integration by using Static Address Group
Can anyone please assist how to go forward with this??

Re: Block IP using Panorama Integration

gyldz — Fri, 16 Jun 2023 12:29:55 GMT

Hi @Himangi ,

To achieve this using a static address group, you must have your IP as an address object in Panorama. You can create it in XSOAR. You can check the below steps as a reference. Let's assume that you have a static address group named IPBlock and IP which represents IP to be blocked.

1. Create the address in XSOAR using pan-os-create-address automation.

2. This will add an address entry to XSOAR and will output the name of the address which will be ip + -block. Now you need to add this entry to the static address group by using pan-os-edit-address-group.

I hope this answers your question.

topic Re: Block IP using Panorama Integration in Cortex XSOAR Discussions

Block IP using Panorama Integration

Re: Block IP using Panorama Integration