Block IP using Panorama Integration

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Block IP using Panorama Integration

L2 Linker

Hi,

I have integrated Panorama with XSOAR, instance is successfully created.

Now I have to block IP using this integration. I want to block ips just using panorama xsoar integration by using Static Address Group
Can anyone please assist how to go forward with this??

1 accepted solution

Accepted Solutions

L4 Transporter

Hi @Himangi ,

 

To achieve this using a static address group, you must have your IP as an address object in Panorama. You can create it in XSOAR. You can check the below steps as a reference. Let's assume that you have a static address group named IPBlock and IP which represents IP to be blocked.

1. Create the address in XSOAR using pan-os-create-address automation.

gyldz_0-1686918442149.png

2. This will add an address entry to XSOAR and will output the name of the address which will be ip + -block. Now you need to add this entry to the static address group by using pan-os-edit-address-group.

gyldz_3-1686918571525.png

I hope this answers your question. 

View solution in original post

1 REPLY 1

L4 Transporter

Hi @Himangi ,

 

To achieve this using a static address group, you must have your IP as an address object in Panorama. You can create it in XSOAR. You can check the below steps as a reference. Let's assume that you have a static address group named IPBlock and IP which represents IP to be blocked.

1. Create the address in XSOAR using pan-os-create-address automation.

gyldz_0-1686918442149.png

2. This will add an address entry to XSOAR and will output the name of the address which will be ip + -block. Now you need to add this entry to the static address group by using pan-os-edit-address-group.

gyldz_3-1686918571525.png

I hope this answers your question. 

  • 1 accepted solution
  • 1193 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!