Block IP using Panorama Integration

[${userLoginName}]

Hi,

I have integrated Panorama with XSOAR, instance is successfully created.

Now I have to block IP using this integration. I want to block ips just using panorama xsoar integration by using Static Address Group
Can anyone please assist how to go forward with this??

[gyldz · Accepted solution]

Hi @${userLoginName} ,

To achieve this using a static address group, you must have your IP as an address object in Panorama. You can create it in XSOAR. You can check the below steps as a reference. Let's assume that you have a static address group named IPBlock and IP which represents IP to be blocked.

1. Create the address in XSOAR using pan-os-create-address automation.

2. This will add an address entry to XSOAR and will output the name of the address which will be ip + -block. Now you need to add this entry to the static address group by using pan-os-edit-address-group.

I hope this answers your question.