Skip to main content

Block Domain - External Dynamic List

This Playbook is part of the Generic Export Indicators Service Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.5.0 and later.

This playbook blocks domains using External Dynamic Link. The playbook adds a tag to the inputs domain indicators. the tagged domains can be publish as External Dynamic list that can be added to blocklist using products like Panorama by Palo Alto Networks. For Panorama - You can block the tagged domains by creating EDL(in Panorama) with the XSOAR EDL Url, and assign it to Anti-Spyware profile under "DNS Signature Policies"


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


This playbook does not use any integrations.


This playbook does not use any scripts.


  • setIndicators

Playbook Inputs#

NameDescriptionDefault ValueRequired
DomainsThe domains to blockOptional
TagIndicator tag to assignOptional

Playbook Outputs#

There are no outputs for this playbook.

Playbook Image#

Block Domain - External Dynamic List