Block or Unblock IP addresses - ForcepointNGFW

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

---

This playbook checks if malicious IP address is blocked or unblocked by SMC firewall.

Attribute	Value
Type	Playbook
Solution	Standalone Content
Source	View on GitHub

Logic App Connectors

This playbook uses 4 Logic App connectors / built-in actions:

Connector / Action	Type	Connections	Actions
azuresentinel	Managed	1	4
forcepointsmcapiconnector	Managed	0	4
teams	Managed	1	2
ForcepointSMC-Connector	Custom	1	0

Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action	Method	Endpoint	Other
Update_incident_2	put	/Incidents	—
Update_incident	put	/Incidents	—
Add_comment_to_incident_(V3)	post	/Incidents/Comment	—
Entities_-_Get_IPs	post	/entities/ip	—

forcepointsmcapiconnector (Managed)

Action	Method	Endpoint	Other
Add_IP_Address_into_IP_List	post	/@{encodeURIComponent(variables('SMC Api Version Number'))}/elements/ip_list/@{encodeURIComponent(last(split(body('Get_IP_List_Element')?['result']?[0]?['href'],'/')))}/ip_address_list	—
Get_IP_address	get	/@{encodeURIComponent(variables('SMC Api Version Number'))}/elements/ip_list/@{encodeURIComponent(last(split(body('Get_IP_List_Element')?['result']?[0]?['href'],'/')))}/ip_address_list	—
Get_IP_List_Element	get	/@{encodeURIComponent(variables('SMC Api Version Number'))}/elements/ip_list	—
Login	post	/@{encodeURIComponent(variables('SMC Api Version Number'))}/login	—

teams (Managed)

Action	Method	Endpoint	Other
Post_adaptive_card_in_a_chat_or_channel_2	post	/v1.0/teams/conversation/adaptivecard/poster/Flow bot/location/@{encodeURIComponent('Channel')}	—
Post_adaptive_card_in_a_chat_or_channel	post	/v1.0/teams/conversation/adaptivecard/poster/Flow bot/location/@{encodeURIComponent('Channel')}	—

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Playbooks