Enrichment URL - Forcepoint

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This playbook checks if malicious URL is blocked or unblocked by SMC firewall.

Attribute Value
Type Playbook
Solution Standalone Content
Source View on GitHub

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuresentinel Managed 1 2
forcepointsmcapiconnector Managed 0 4
ForcepointSMC-Connector Custom 1 0
Action parameters (URLs, paths, function IDs)

azuresentinel (Managed)

Action Method Endpoint Other
Add_comment_to_incident_(V3) post /Incidents/Comment
Entities_-_Get_URLs post /entities/url

forcepointsmcapiconnector (Managed)

Action Method Endpoint Other
Get_URLs_from_URL_list get /@{encodeURIComponent(variables('SMC Api Version Number'))}/elements/url_list_application/@{encodeURIComponent(last(split(items('For_each_URL_list')?['href'],'/')))}
Find_IP_or_URL_in_SMC get /@{encodeURIComponent(variables('SMC Api Version Number'))}/elements
Get_URL_List get /@{encodeURIComponent(variables('SMC Api Version Number'))}/elements/url_list_application
Login post /@{encodeURIComponent(variables('SMC Api Version Number'))}/login

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks