- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
01-01-2024 09:01 PM
Hi,
I have been using Panorama integration to block the IP. Is there any way where I can unblock the IP or remove the IP from address group of Panorama.
01-04-2024 09:08 AM
You can use the pan-os-edit-address-group command to achieve this. Just pass the the address group name, address group type, and then also add the arg for element_to_remove which will allow you remove specific IPs from the address group. The command would look something like this !pan-os-edit-address-group name="Bad IPs" type=static element_to_remove=8.8.8.8. This would remove 8.8.8.8 from the static address group named Bad IPs
01-02-2024 04:04 PM
can you maybe attach a screenshot of what you are trying to achieve?
are you referring to tags, or to an address group you created in Panorama?
- you can add or remove address objects from an address group by going to the connect `device group > objects` in Panorama
- for tags you can remove the tag by `clear auto-tag vsys <value> ip <ip/netmask>` in the cli
01-02-2024 10:50 PM - edited 01-03-2024 03:06 AM
I am referring to an address group which I have created. I am using Pan-OS-Block IP-Static Address Group playbook which is a part of Panorama Integration. Everytime when an IP is found malicious it gets appended in that address group. Is there any way where I can remove some IP's from address group?
01-04-2024 09:08 AM
You can use the pan-os-edit-address-group command to achieve this. Just pass the the address group name, address group type, and then also add the arg for element_to_remove which will allow you remove specific IPs from the address group. The command would look something like this !pan-os-edit-address-group name="Bad IPs" type=static element_to_remove=8.8.8.8. This would remove 8.8.8.8 from the static address group named Bad IPs
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!