Unblock IP

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Unblock IP

L2 Linker

Hi,

I have been using Panorama integration to block the IP. Is there any way where I can unblock the IP or remove the IP from address group of Panorama.

1 accepted solution

Accepted Solutions

You can use the pan-os-edit-address-group command to achieve this. Just pass the the address group name, address group type, and then also add the arg for element_to_remove which will allow you remove specific IPs from the address group. The command would look something like this !pan-os-edit-address-group name="Bad IPs" type=static element_to_remove=8.8.8.8. This would remove 8.8.8.8 from the static address group named Bad IPs

 

View solution in original post

3 REPLIES 3

Cyber Elite
Cyber Elite

can you maybe attach a screenshot of what you are trying to achieve?

are you referring to tags, or to an address group you created in Panorama?

 

- you can add or remove address objects from an address group by going to the connect `device group > objects` in Panorama

- for tags you can remove the tag by `clear auto-tag vsys <value> ip <ip/netmask>` in the cli

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

I am referring to an address group which I have created. I am using Pan-OS-Block IP-Static Address Group playbook which is a part of Panorama Integration. Everytime when an IP is found malicious it gets appended in that address group. Is there any way where I can remove some IP's from address group?

You can use the pan-os-edit-address-group command to achieve this. Just pass the the address group name, address group type, and then also add the arg for element_to_remove which will allow you remove specific IPs from the address group. The command would look something like this !pan-os-edit-address-group name="Bad IPs" type=static element_to_remove=8.8.8.8. This would remove 8.8.8.8 from the static address group named Bad IPs

 

  • 1 accepted solution
  • 1322 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!