Block Domain - External Dynamic List

This Playbook is part of the Generic Export Indicators Service Pack.

Supported versions

Supported Cortex XSOAR versions: 6.5.0 and later.

This playbook blocks domains using External Dynamic Link. The playbook adds a tag to the inputs domain indicators. the tagged domains can be publish as External Dynamic list that can be added to blocklist using products like Panorama by Palo Alto Networks. For Panorama - You can block the tagged domains by creating EDL(in Panorama) with the XSOAR EDL Url, and assign it to Anti-Spyware profile under "DNS Signature Policies"

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

This playbook does not use any scripts.

Commands

• setIndicators

Playbook Inputs

---

Name	Description	Default Value	Required
Domains	The domains to block		Optional
Tag	Indicator tag to assign		Optional

Playbook Outputs

---

There are no outputs for this playbook.

Playbook Image

---