Block IP - Zscaler

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This playbook allows blocks IPs in Zscaler by adding them to categories

Attribute Value
Type Playbook
Solution Standalone Content
Source View on GitHub

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 2
http Built-in 0 3
workflow Built-in 0 1
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Entities_-_Get_IPs post /entities/ip
Add_comment_to_incident_(V3)_2 post /Incidents/Comment

http (Built-in)

Action Method Endpoint Other
HTTP_Add_IP PUT [concat(parameters('Zscaler Admin Url'), '/api/v1/urlCategories/@{variables(''Category'')}?action=ADD_TO_LIST')]
HTTP_Activate_Changes POST [concat(parameters('Zscaler Admin Url'), '/api/v1/status/activate')]
HTTP_Delete_Api_Session DELETE [concat(parameters('Zscaler Admin Url'), '/api/v1/authenticatedSession')]

workflow (Built-in)

Action Method Endpoint Other
zscaler workflowId=[variables('ZscalerAuthenticationFlow')]
triggerName=manual

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks